Microsoft · Security update · March 14, 2023

KB5023713: March 2023 cumulative update for Windows 10 1507

KB5023713, released March 14, 2023, fixes 50 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

UrgentUnsupported product
CVEs closed
50
7 rated Critical
Exploited
0
None reported
Exploitation more likely
4
Microsoft's assessment
Highest EPSS
0.0795
94th percentile

Priority of the 50 CVEs

Patch now 0 Urgent 9 High 31 Routine 10

Applies to

ProductBuild after install
Windows 10 for 32-bit Systems10240.19805
Windows 10 for x64-based Systems10240.19805

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2023-23410 Windows HTTP.sysElevation of Privilege7.8 0.0795 More likely
Urgent CVE-2023-23416 Windows Cryptographic ServicesRemote Code Execution7.8 0.0758 More likely
Urgent CVE-2023-1018 Windows TPMElevation of Privilege8.8 0.0555 Exploitation Less Likely
Urgent CVE-2023-23415 Internet Control Message Protocol (ICMP)Remote Code Execution9.8 0.0348 More likely
Urgent CVE-2023-21708 Windows Remote Procedure CallRemote Code Execution9.8 0.0149 Exploitation Less Likely
Urgent CVE-2023-1017 Windows TPMElevation of Privilege8.8 0.0138 Exploitation Less Likely
Urgent CVE-2023-23404 Remote Access Service Point-to-Point Tunneling ProtocolRemote Code Execution8.1 0.0083 Exploitation Less Likely
Urgent CVE-2023-23411 Role: Windows Hyper-VDenial of Service6.5 0.0058 Exploitation Less Likely
Urgent CVE-2023-24861 Windows Win32KElevation of Privilege7.0 0.0027 More likely
High CVE-2022-29900 AMD CPU BranchInformation Disclosure7.8 0.0394 Exploitation Less Likely
High CVE-2023-24859 Windows Internet Key Exchange (IKE) ProtocolDenial of Service7.5 0.0165 Exploitation Less Likely
High CVE-2023-24856 Microsoft PostScript Printer DriverInformation Disclosure7.5 0.0150 Exploitation Less Likely
High CVE-2023-24858 Microsoft PostScript Printer DriverInformation Disclosure7.5 0.0143 Exploitation Less Likely
High CVE-2023-24876 Microsoft PostScript Printer DriverRemote Code Execution8.8 0.0140 Exploitation Less Likely
High CVE-2023-23403 Microsoft Printer DriversRemote Code Execution8.8 0.0129 Exploitation Less Likely
High CVE-2023-23406 Microsoft PostScript Printer DriverRemote Code Execution8.8 0.0129 Exploitation Less Likely
High CVE-2023-23413 Microsoft PostScript Printer DriverRemote Code Execution8.8 0.0129 Exploitation Less Likely
High CVE-2023-24864 Microsoft PostScript Printer DriverElevation of Privilege8.8 0.0129 Exploitation Less Likely
High CVE-2023-24867 Microsoft PostScript Printer DriverRemote Code Execution8.8 0.0129 Exploitation Less Likely
High CVE-2023-24868 Microsoft PostScript Printer DriverRemote Code Execution8.8 0.0129 Exploitation Less Likely
High CVE-2023-24872 Microsoft PostScript Printer DriverRemote Code Execution8.8 0.0129 Exploitation Less Likely
High CVE-2023-24907 Microsoft PostScript Printer DriverRemote Code Execution8.8 0.0129 Exploitation Less Likely
High CVE-2023-24909 Microsoft PostScript Printer DriverRemote Code Execution8.8 0.0129 Exploitation Less Likely
High CVE-2023-24913 Microsoft PostScript Printer DriverRemote Code Execution8.8 0.0129 Exploitation Less Likely
High CVE-2023-23405 Windows Remote Procedure Call RuntimeRemote Code Execution8.1 0.0100 Exploitation Less Likely
Showing 1 to 25 of 50 1Next

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.