Microsoft · Security update · March 14, 2023
KB5023754: March 2023 security update
KB5023754, released March 14, 2023, fixes 19 CVEs across 4 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.
UrgentUnsupported product
CVEs closed
19
2 rated Critical
Exploited
0
None reported
Exploitation more likely
3
Microsoft's assessment
Highest EPSS
0.4984
98th percentile
Priority of the 19 CVEs
Patch now 0
Urgent 4
High 11
Routine 4
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2023-23410 | Windows HTTP.sys | Elevation of Privilege | 7.8 | 0.0795 | More likely |
| Urgent | CVE-2023-23415 | Internet Control Message Protocol (ICMP) | Remote Code Execution | 9.8 | 0.0348 | More likely |
| Urgent | CVE-2023-21708 | Windows Remote Procedure Call | Remote Code Execution | 9.8 | 0.0149 | Exploitation Less Likely |
| Urgent | CVE-2023-24861 | Windows Win32K | Elevation of Privilege | 7.0 | 0.0027 | More likely |
| High | CVE-2022-29900 | AMD CPU Branch | Information Disclosure | 7.8 | 0.0394 | Exploitation Less Likely |
| High | CVE-2023-23405 | Windows Remote Procedure Call Runtime | Remote Code Execution | 8.1 | 0.0100 | Exploitation Less Likely |
| High | CVE-2023-24869 | Windows Remote Procedure Call Runtime | Remote Code Execution | 8.1 | 0.0100 | Exploitation Less Likely |
| High | CVE-2023-24908 | Windows Remote Procedure Call Runtime | Remote Code Execution | 8.1 | 0.0100 | Exploitation Less Likely |
| High | CVE-2022-23825 | AMD CPU Branch | Information Disclosure | 7.8 | 0.0079 | Exploitation Less Likely |
| High | CVE-2023-23420 | Windows Kernel | Elevation of Privilege | 7.8 | 0.0075 | Exploitation Less Likely |
| High | CVE-2023-23421 | Windows Kernel | Elevation of Privilege | 7.8 | 0.0067 | Exploitation Less Likely |
| High | CVE-2023-23422 | Windows Kernel | Elevation of Privilege | 7.8 | 0.0060 | Exploitation Less Likely |
| High | CVE-2023-23423 | Windows Kernel | Elevation of Privilege | 7.8 | 0.0060 | Exploitation Less Likely |
| High | CVE-2023-24910 | Microsoft Graphics Component | Elevation of Privilege | 7.8 | 0.0039 | Exploitation Less Likely |
| High | CVE-2023-23385 | Windows Point-to-Point Protocol over Ethernet (PPPoE) | Elevation of Privilege | 7.0 | 0.0033 | Exploitation Less Likely |
| Routine | CVE-2021-26414 | Windows DCOM Server | Security Feature Bypass | 4.8 | 0.4984 | Exploitation Less Likely |
| Routine | CVE-2023-24862 | Windows Secure Channel | Denial of Service | 5.5 | 0.0050 | Exploitation Less Likely |
| Routine | CVE-2023-23394 | Client Server Run-time Subsystem (CSRSS) | Information Disclosure | 5.5 | 0.0047 | Exploitation Less Likely |
| Routine | CVE-2023-23409 | Client Server Run-time Subsystem (CSRSS) | Information Disclosure | 5.5 | 0.0047 | Exploitation Less Likely |
Showing 1 to 19 of 19
1
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.