Microsoft Patch Tuesday for February 2023 — Snort rules and prominent vulnerabilities
Summary: Microsoft's February 2023 Patch Tuesday disclosed 73 vulnerabilities: 8 Critical, 64 Important, and one Moderate, with none publicly disclosed before the release and three seen in the wild. The most serious is CVE-2023-21823, a Windows Graphics Component remote code execution flaw, followed by CVE-2023-21715, a Microsoft Publisher security feature bypass, and CVE-2023-23376, a Windows Common Log File System Driver elevation of privilege vulnerability.
Bottom line: Three of the eight Critical flaws - CVE-2023-21689, CVE-2023-21690 and CVE-2023-21692 - are PEAP remote code execution bugs Microsoft rates as more likely to be exploited, and they affect almost all Windows versions including Windows 11, so an authenticated attacker could trigger code in the context of the server's account through a network call.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2023-21689CVE-2023-21690CVE-2023-21692CVE-2023-21715CVE-2023-21716CVE-2023-21803CVE-2023-21808CVE-2023-21815CVE-2023-21823CVE-2023-23376
- Related
- Microsoft Patch Tuesday, February 2023 Edition Cyber Risks ·Threat Source newsletter (Feb. 16, 2023) — Recapping what we may have missed so far this year Cyber Risks ·CVE-2023-21823: Microsoft Windows Graphic Component Privilege Escalation Vulnerability Known Exploited Vulnerabilities · Feb 14, 2023