Microsoft · Security update · March 14, 2023

KB5023705: March 2023 cumulative update for Windows Server 2022

KB5023705, released March 14, 2023, fixes 55 CVEs across 2 products. One of them is being exploited (CVE-2023-24880); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEVKnown ransomware use1 publicly disclosed
CVEs closed
55
8 rated Critical
Exploited
1
CVE-2023-24880
Exploitation more likely
5
Microsoft's assessment
Highest EPSS
0.7801
99th percentile

Priority of the 55 CVEs

Patch now 1 Urgent 10 High 33 Routine 11

Applies to

ProductBuild after install
Windows Server 202220348.1607
Windows Server 2022 (Server Core installation)20348.1607

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2023-24880 Windows SmartScreenSecurity Feature Bypass4.4 0.7801 KEVRansomwareDisclosedExploited
Urgent CVE-2023-23410 Windows HTTP.sysElevation of Privilege7.8 0.0795 More likely
Urgent CVE-2023-23416 Windows Cryptographic ServicesRemote Code Execution7.8 0.0758 More likely
Urgent CVE-2023-1018 Windows TPMElevation of Privilege8.8 0.0555 Exploitation Less Likely
Urgent CVE-2023-23415 Internet Control Message Protocol (ICMP)Remote Code Execution9.8 0.0348 More likely
Urgent CVE-2023-23392 Windows HTTP Protocol StackRemote Code Execution9.8 0.0167 More likely
Urgent CVE-2023-21708 Windows Remote Procedure CallRemote Code Execution9.8 0.0149 Exploitation Less Likely
Urgent CVE-2023-1017 Windows TPMElevation of Privilege8.8 0.0138 Exploitation Less Likely
Urgent CVE-2023-23404 Remote Access Service Point-to-Point Tunneling ProtocolRemote Code Execution8.1 0.0083 Exploitation Less Likely
Urgent CVE-2023-23411 Role: Windows Hyper-VDenial of Service6.5 0.0058 Exploitation Less Likely
Urgent CVE-2023-24861 Windows Win32KElevation of Privilege7.0 0.0027 More likely
High CVE-2023-24871 Windows Bluetooth ServiceRemote Code Execution8.8 0.0322 Exploitation Less Likely
High CVE-2023-24859 Windows Internet Key Exchange (IKE) ProtocolDenial of Service7.5 0.0165 Exploitation Less Likely
High CVE-2023-23388 Microsoft Bluetooth DriverElevation of Privilege8.8 0.0157 Exploitation Less Likely
High CVE-2023-24856 Microsoft PostScript Printer DriverInformation Disclosure7.5 0.0150 Exploitation Less Likely
High CVE-2023-24858 Microsoft PostScript Printer DriverInformation Disclosure7.5 0.0143 Exploitation Less Likely
High CVE-2023-24876 Microsoft PostScript Printer DriverRemote Code Execution8.8 0.0140 Exploitation Less Likely
High CVE-2023-23403 Microsoft Printer DriversRemote Code Execution8.8 0.0129 Exploitation Less Likely
High CVE-2023-23406 Microsoft PostScript Printer DriverRemote Code Execution8.8 0.0129 Exploitation Less Likely
High CVE-2023-23413 Microsoft PostScript Printer DriverRemote Code Execution8.8 0.0129 Exploitation Less Likely
High CVE-2023-24864 Microsoft PostScript Printer DriverElevation of Privilege8.8 0.0129 Exploitation Less Likely
High CVE-2023-24867 Microsoft PostScript Printer DriverRemote Code Execution8.8 0.0129 Exploitation Less Likely
High CVE-2023-24868 Microsoft PostScript Printer DriverRemote Code Execution8.8 0.0129 Exploitation Less Likely
High CVE-2023-24872 Microsoft PostScript Printer DriverRemote Code Execution8.8 0.0129 Exploitation Less Likely
High CVE-2023-24907 Microsoft PostScript Printer DriverRemote Code Execution8.8 0.0129 Exploitation Less Likely
Showing 1 to 25 of 55 1Next

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.