Microsoft · Security update · March 14, 2023

KB5023765: March 2023 security update

KB5023765, released March 14, 2023, fixes 48 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
48
4 rated Critical
Exploited
0
None reported
Exploitation more likely
4
Vendor assessment
Highest EPSS
0.4984
98th percentile

Priority of the 48 CVEs

Patch now 0 Urgent 6 High 29 Routine 13

Applies to

Product
Windows Server 2012 R2
Windows Server 2012 R2 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2023-23410 Windows HTTP.sys Elevation of Privilege 7.8 0.0795 More likely
Urgent CVE-2023-23416 Windows Cryptographic Services Remote Code Execution 7.8 0.0758 More likely
Urgent CVE-2023-23415 Internet Control Message Protocol (ICMP) Remote Code Execution 9.8 0.0348 More likely
Urgent CVE-2023-21708 Windows Remote Procedure Call Remote Code Execution 9.8 0.0149 Exploitation Less Likely
Urgent CVE-2023-23404 Remote Access Service Point-to-Point Tunneling Protocol Remote Code Execution 8.1 0.0083 Exploitation Less Likely
Urgent CVE-2023-24861 Windows Win32K Elevation of Privilege 7.0 0.0027 More likely
High CVE-2023-24859 Windows Internet Key Exchange (IKE) Protocol Denial of Service 7.5 0.0165 Exploitation Less Likely
High CVE-2023-24856 Microsoft PostScript Printer Driver Information Disclosure 7.5 0.0150 Exploitation Less Likely
High CVE-2023-24858 Microsoft PostScript Printer Driver Information Disclosure 7.5 0.0143 Exploitation Less Likely
High CVE-2023-24876 Microsoft PostScript Printer Driver Remote Code Execution 8.8 0.0140 Exploitation Less Likely
High CVE-2023-23403 Microsoft Printer Drivers Remote Code Execution 8.8 0.0129 Exploitation Less Likely
High CVE-2023-23406 Microsoft PostScript Printer Driver Remote Code Execution 8.8 0.0129 Exploitation Less Likely
High CVE-2023-23413 Microsoft PostScript Printer Driver Remote Code Execution 8.8 0.0129 Exploitation Less Likely
High CVE-2023-24864 Microsoft PostScript Printer Driver Elevation of Privilege 8.8 0.0129 Exploitation Less Likely
High CVE-2023-24867 Microsoft PostScript Printer Driver Remote Code Execution 8.8 0.0129 Exploitation Less Likely
High CVE-2023-24868 Microsoft PostScript Printer Driver Remote Code Execution 8.8 0.0129 Exploitation Less Likely
High CVE-2023-24872 Microsoft PostScript Printer Driver Remote Code Execution 8.8 0.0129 Exploitation Less Likely
High CVE-2023-24907 Microsoft PostScript Printer Driver Remote Code Execution 8.8 0.0129 Exploitation Less Likely
High CVE-2023-24909 Microsoft PostScript Printer Driver Remote Code Execution 8.8 0.0129 Exploitation Less Likely
High CVE-2023-24913 Microsoft PostScript Printer Driver Remote Code Execution 8.8 0.0129 Exploitation Less Likely
High CVE-2023-23400 Role: DNS Server Remote Code Execution 7.2 0.0126 Exploitation Less Likely
High CVE-2023-23405 Windows Remote Procedure Call Runtime Remote Code Execution 8.1 0.0100 Exploitation Less Likely
High CVE-2023-24869 Windows Remote Procedure Call Runtime Remote Code Execution 8.1 0.0100 Exploitation Less Likely
High CVE-2023-24908 Windows Remote Procedure Call Runtime Remote Code Execution 8.1 0.0100 Exploitation Less Likely
High CVE-2023-23420 Windows Kernel Elevation of Privilege 7.8 0.0075 Exploitation Less Likely
Showing 1 to 25 of 48 1Next