Windows 10: Microsoft December 2023 Security Updates

December 2023 Security UpdatesThis release consists of the following 36 Microsoft CVEs:Tag CVE Base Score CVSS Vector Exploitability FAQs? Workarounds? Mitigations?Windows Media CVE-2023-21740 Microsoft Edge Chromium-based CVE-2023-35618 Microsoft Office Outlook CVE-2023-35619 Microsoft Dynamics CVE-2023-35621 Microsoft Windows DNS CVE-2023-35622 Azure Connected Machine Agent CVE-2023-35624 Azure Machine Learning CVE-2023-35625 Windows MSHTML Platform CVE-2023-35628 Windows USB

:)

 

Microsoft March 2023 Security Updates

March 2023 Security Updates Updates this Month This release consists of security updates for the following products, features and roles. Azure Client Server Run-time Subsystem (CSRSS) Internet Control Message Protocol (ICMP) Microsoft Bluetooth Driver Microsoft Dynamics Microsoft Edge (Chromium-based) Microsoft Graphics Component Microsoft Office Excel Microsoft Office Outlook Microsoft Office SharePoint Microsoft OneDrive Microsoft PostScript Printer Driver Microsoft Printer Drivers Microsoft Windows Codecs Library Office for Android Remote Access Service Point-to-Point Tunneling Protocol Role: DNS Server Role: Windows Hyper-V Service Fabric Visual Studio Windows Accounts Control Windows Bluetooth Service Windows Central Resource Manager Windows Cryptographic Services Windows Defender Windows HTTP Protocol Stack Windows HTTP.sys Windows Internet Key Exchange (IKE) Protocol Windows Kernel Windows Partition Management Driver Windows Point-to-Point Protocol over Ethernet (PPPoE) Windows Remote Procedure Call Windows Remote Procedure Call Runtime Windows Resilient File System (ReFS) Windows Secure Channel Windows SmartScreen Windows TPM Windows Win32K Please note the following information regarding the security updates: Security Update Guide Blog Posts Date Blog Post January 6, 2023 Publishing CBL-Mariner CVEs on the Security Update Guide CVRF API December 29, 2022 Security Update Guide Improvement – Representing Hotpatch Updates August 9, 2022 Security Update Guide Notification System News: Create your profile now January 11, 2022 Coming Soon: New Security Update Guide Notification System February 9, 2021 Continuing to Listen: Good News about the Security Update Guide API January 13, 2021 Security Update Guide Supports CVEs Assigned by Industry Partners December 8, 2020 Security Update Guide: Let’s keep the conversation going November 9, 2020 Vulnerability Descriptions in the New Version of the Security Update Guide Relevant Information The new Hotpatching feature is now generally available. Please see Hotpatching feature for Windows Server Azure Edition virtual machines (VMs) for more information. Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the Microsoft Update Catalog. For information on lifecycle and support dates for Windows 10 operating systems, please see Windows Lifecycle Facts Sheet. Microsoft is improving Windows Release Notes. For more information, please see What's next for Windows release notes. A list of the latest servicing stack updates for each operating system can be found in ADV990001. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update. In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features. Customers running Windows 7, Windows Server 2008 R2, or Windows Server 2008 need to purchase the Extended Security Update to continue receiving security updates. See 4522133 for more information. FAQs, Mitigations, and Workarounds The following CVEs have FAQs, Mitigations, or Workarounds. You can see these in more detail from the Vulnerabilities tab by selecting FAQs, Mitigations and Workarounds columns in the Edit Columns panel. CVE-2023-1017 CVE-2023-1018 CVE-2023-1213 CVE-2023-1214 CVE-2023-1215 CVE-2023-1216 CVE-2023-1217 CVE-2023-1218 CVE-2023-1219 CVE-2023-1220 CVE-2023-1221 CVE-2023-1222 CVE-2023-1223 CVE-2023-1224 CVE-2023-1228 CVE-2023-1229 CVE-2023-1230 CVE-2023-1231 CVE-2023-1232 CVE-2023-1233 CVE-2023-1234 CVE-2023-1235 CVE-2023-1236 CVE-2023-21708 CVE-2023-22490 CVE-2023-22743 CVE-2023-23383 CVE-2023-23385 CVE-2023-23388 CVE-2023-23389 CVE-2023-23391 CVE-2023-23392 CVE-2023-23393 CVE-2023-23394 CVE-2023-23395 CVE-2023-23396 CVE-2023-23397 CVE-2023-23398 CVE-2023-23399 CVE-2023-23400 CVE-2023-23401 CVE-2023-23402 CVE-2023-23403 CVE-2023-23404 CVE-2023-23405 CVE-2023-23406 CVE-2023-23407 CVE-2023-23408 CVE-2023-23409 CVE-2023-23410 CVE-2023-23411 CVE-2023-23412 CVE-2023-23413 CVE-2023-23414 CVE-2023-23415 CVE-2023-23416 CVE-2023-23417 CVE-2023-23418 CVE-2023-23419 CVE-2023-23420 CVE-2023-23421 CVE-2023-23422 CVE-2023-23423 CVE-2023-23618 CVE-2023-23946 CVE-2023-24856 CVE-2023-24857 CVE-2023-24858 CVE-2023-24861 CVE-2023-24863 CVE-2023-24864 CVE-2023-24865 CVE-2023-24866 CVE-2023-24867 CVE-2023-24868 CVE-2023-24869 CVE-2023-24870 CVE-2023-24871 CVE-2023-24872 CVE-2023-24876 CVE-2023-24879 CVE-2023-24880 CVE-2023-24882 CVE-2023-24890 CVE-2023-24891 CVE-2023-24892 CVE-2023-24906 CVE-2023-24908 CVE-2023-24909 CVE-2023-24910 CVE-2023-24911 CVE-2023-24913 CVE-2023-24919 CVE-2023-24920 CVE-2023-24921 CVE-2023-24922 CVE-2023-24923 CVE-2023-24930 Known Issues You can see these in more detail from the Deployments tab by selecting Known Issues column in the Edit Columns panel. For more information about Windows Known Issues, please see Windows message center (links to currently-supported versions of Windows are in the left pane). KB Article Applies To 5002355 SharePoint Server Subscription Edition 5002396 Windows 10, version 20H2, Windows 10, version 21H2, Windows 10, version 22H2 5023702 Windows 10, version 1809, Windows Server 2019 5023705 Windows Server 2022 5023706 Windows 11 version 22H2 5023752 Windows Server 2012 (Security-only update) 5023754 Windows Server 2008 (Security-only update) 5023755 Windows Server 2008 (Monthly Rollup) 5023756 Windows Server 2012 (Monthly Rollup) 5023759 Windows Server 2008 R2 (Security-only update) 5023769 Windows Server 2008 R2 (Monthly Rollup) Released: Mar 14, 2023 https://msrc.microsoft.com/update-gu...eNote/2023-Mar

 

Microsoft January 2023 Security Updates

January 2023 Security Updates Updates this Month This release consists of security updates for the following products, features and roles.

• .NET Core
• 3D Builder
• Azure Service Fabric Container
• Microsoft Bluetooth Driver
• Microsoft Exchange Server
• Microsoft Graphics Component
• Microsoft Local Security Authority Server (lsasrv)
• Microsoft Message Queuing
• Microsoft Office
• Microsoft Office SharePoint
• Microsoft Office Visio
• Microsoft WDAC OLE DB provider for SQL
• Visual Studio Code
• Windows ALPC
• Windows Ancillary Function Driver for WinSock
• Windows Authentication Methods
• Windows Backup Engine
• Windows Bind Filter Driver
• Windows BitLocker
• Windows Boot Manager
• Windows Credential Manager
• Windows Cryptographic Services
• Windows DWM Core Library
• Windows Error Reporting
• Windows Event Tracing
• Windows IKE Extension
• Windows Installer
• Windows Internet Key Exchange (IKE) Protocol
• Windows iSCSI
• Windows Kernel
• Windows Layer 2 Tunneling Protocol
• Windows LDAP - Lightweight Directory Access Protocol
• Windows Local Security Authority (LSA)
• Windows Local Session Manager (LSM)
• Windows Malicious Software Removal Tool
• Windows Management Instrumentation
• Windows MSCryptDImportKey
• Windows NTLM
• Windows ODBC Driver
• Windows Overlay Filter
• Windows Point-to-Point Tunneling Protocol
• Windows Print Spooler Components
• Windows Remote Access Service L2TP Driver
• Windows RPC API
• Windows Secure Socket Tunneling Protocol (SSTP)
• Windows Smart Card
• Windows Task Scheduler
• Windows Virtual Registry Provider
• Windows Workstation Service

Please note the following information regarding the security updates: Security Update Guide Blog Posts Date Blog Post January 6, 2023 Publishing CBL-Mariner CVEs on the Security Update Guide CVRF API December 29, 2022 Security Update Guide Improvement – Representing Hotpatch Updates August 9, 2022 Security Update Guide Notification System News: Create your profile now January 11, 2022 Coming Soon: New Security Update Guide Notification System February 9, 2021 Continuing to Listen: Good News about the Security Update Guide API January 13, 2021 Security Update Guide Supports CVEs Assigned by Industry Partners December 8, 2020 Security Update Guide: Let’s keep the conversation going November 9, 2020 Vulnerability Descriptions in the New Version of the Security Update Guide Relevant Information

• The new Hotpatching feature is now generally available. Please see Hotpatching feature for Windows Server Azure Edition virtual machines (VMs) for more information.
• Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the Microsoft Update Catalog. For information on lifecycle and support dates for Windows 10 operating systems, please see Windows Lifecycle Facts Sheet.
• Microsoft is improving Windows Release Notes. For more information, please see What's next for Windows release notes.
• A list of the latest servicing stack updates for each operating system can be found in ADV990001. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.
• In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.
• Customers running Windows 7, Windows Server 2008 R2, or Windows Server 2008 need to purchase the Extended Security Update to continue receiving security updates. See 4522133 for more information.

FAQs, Mitigations, and Workarounds The following CVEs have FAQs, Mitigations, or Workarounds. You can see these in more detail from the Vulnerabilities tab by selecting FAQs, Mitigations and Workarounds columns in the Edit Columns panel.

• CVE-2023-21524
• CVE-2023-21525
• CVE-2023-21531
• CVE-2023-21532
• CVE-2023-21535
• CVE-2023-21536
• CVE-2023-21537
• CVE-2023-21539
• CVE-2023-21540
• CVE-2023-21541
• CVE-2023-21542
• CVE-2023-21543
• CVE-2023-21546
• CVE-2023-21548
• CVE-2023-21549
• CVE-2023-21550
• CVE-2023-21551
• CVE-2023-21552
• CVE-2023-21555
• CVE-2023-21556
• CVE-2023-21557
• CVE-2023-21558
• CVE-2023-21559
• CVE-2023-21560
• CVE-2023-21561
• CVE-2023-21563
• CVE-2023-21674
• CVE-2023-21675
• CVE-2023-21676
• CVE-2023-21678
• CVE-2023-21679
• CVE-2023-21680
• CVE-2023-21681
• CVE-2023-21682
• CVE-2023-21724
• CVE-2023-21725
• CVE-2023-21726
• CVE-2023-21730
• CVE-2023-21732
• CVE-2023-21733
• CVE-2023-21734
• CVE-2023-21735
• CVE-2023-21736
• CVE-2023-21737
• CVE-2023-21738
• CVE-2023-21739
• CVE-2023-21741
• CVE-2023-21742
• CVE-2023-21743
• CVE-2023-21744
• CVE-2023-21745
• CVE-2023-21746
• CVE-2023-21747
• CVE-2023-21748
• CVE-2023-21749
• CVE-2023-21750
• CVE-2023-21752
• CVE-2023-21753
• CVE-2023-21754
• CVE-2023-21755
• CVE-2023-21759
• CVE-2023-21760
• CVE-2023-21761
• CVE-2023-21762
• CVE-2023-21763
• CVE-2023-21764
• CVE-2023-21765
• CVE-2023-21766
• CVE-2023-21767
• CVE-2023-21768
• CVE-2023-21771
• CVE-2023-21772
• CVE-2023-21773
• CVE-2023-21774
• CVE-2023-21776
• CVE-2023-21779
• CVE-2023-21780
• CVE-2023-21781
• CVE-2023-21782
• CVE-2023-21783
• CVE-2023-21784
• CVE-2023-21785
• CVE-2023-21786
• CVE-2023-21787
• CVE-2023-21788
• CVE-2023-21789
• CVE-2023-21790
• CVE-2023-21791
• CVE-2023-21792
• CVE-2023-21793

Known Issues You can see these in more detail from the Deployments tab by selecting Known Issues column in the Edit Columns panel. For more information about Windows Known Issues, please see Windows message center (links to currently-supported versions of Windows are in the left pane). KB Article Applies To 5022143 Microsoft Exchange Server 2016 5022188 Microsoft Exchange Server 2013 5022193 Microsoft Exchange Server 2019 5022286 Windows 10, version 1809, Windows Server 2019 5022303 Windows 11 version 22H2 5022338 Windows 7, Windows Server 2008 R2 (Monthly Rollup) 5022339 Windows 7, Windows Server 2008 R2 (Security-only update) 5022340 Windows Server 2008 (Monthly Rollup) 5022343 Windows Server 2012 (Security-only update) 5022346 Windows 8.1, Windows Server 2012 R2 (Security-only update) 5022348 Windows Server 2012 (Monthly Rollup) 5022352 Windows 8.1, Windows Server 2012 R2 (Monthly Rollup) 5022353 Windows Server 2008 (Security-only update) Released: Jan 10, 2023 January 2023 Security Updates - Release Notes - Security Update Guide - Microsoft

 

Microsoft April 2023 Security Updates

April 2023 Security Updates Updates this Month This release consists of security updates for the following products, features and roles. .NET Core Azure Machine Learning Azure Service Connector Microsoft Bluetooth Driver Microsoft Defender for Endpoint Microsoft Dynamics Microsoft Dynamics 365 Customer Voice Microsoft Edge (Chromium-based) Microsoft Graphics Component Microsoft Message Queuing Microsoft Office Microsoft Office Publisher Microsoft Office SharePoint Microsoft Office Word Microsoft PostScript Printer Driver Microsoft Printer Drivers Microsoft WDAC OLE DB provider for SQL Microsoft Windows DNS Visual Studio Visual Studio Code Windows Active Directory Windows ALPC Windows Ancillary Function Driver for WinSock Windows Boot Manager Windows Clip Service Windows CNG Key Isolation Service Windows Common Log File System Driver Windows DHCP Server Windows Enroll Engine Windows Error Reporting Windows Group Policy Windows Internet Key Exchange (IKE) Protocol Windows Kerberos Windows Kernel Windows Layer 2 Tunneling Protocol Windows Lock Screen Windows Netlogon Windows Network Address Translation (NAT) Windows Network File System Windows Network Load Balancing Windows NTLM Windows PGM Windows Point-to-Point Protocol over Ethernet (PPPoE) Windows Point-to-Point Tunneling Protocol Windows Raw Image Extension Windows RDP Client Windows Registry Windows RPC API Windows Secure Boot Windows Secure Channel Windows Secure Socket Tunneling Protocol (SSTP) Windows Transport Security Layer (TLS) Windows Win32K Please note the following information regarding the security updates: Security Update Guide Blog Posts Date Blog Post January 11, 2022 Coming Soon: New Security Update Guide Notification System February 9, 2021 Continuing to Listen: Good News about the Security Update Guide API January 13, 2021 Security Update Guide Supports CVEs Assigned by Industry Partners December 8, 2020 Security Update Guide: Let’s keep the conversation going November 9, 2020 Vulnerability Descriptions in the New Version of the Security Update Guide Relevant Information The new Hotpatching feature is now generally available. Please see Hotpatching feature for Windows Server Azure Edition virtual machines (VMs) for more information. Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the Microsoft Update Catalog. For information on lifecycle and support dates for Windows 10 operating systems, please see Windows Lifecycle Facts Sheet. Microsoft is improving Windows Release Notes. For more information, please see What's next for Windows release notes. A list of the latest servicing stack updates for each operating system can be found in ADV990001. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update. In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features. Customers running Windows 7, Windows Server 2008 R2, or Windows Server 2008 need to purchase the Extended Security Update to continue receiving security updates. See 4522133 for more information. FAQs, Mitigations, and Workarounds The following CVEs have FAQs, Mitigations, or Workarounds. You can see these in more detail from the Vulnerabilities tab by selecting FAQs, Mitigations and Workarounds columns in the Edit Columns panel. CVE-2023-21554 CVE-2023-21727 CVE-2023-21729 CVE-2023-23375 CVE-2023-23384 CVE-2023-24860 CVE-2023-24883 CVE-2023-24884 CVE-2023-24885 CVE-2023-24886 CVE-2023-24887 CVE-2023-24893 CVE-2023-24912 CVE-2023-24914 CVE-2023-24924 CVE-2023-24925 CVE-2023-24926 CVE-2023-24927 CVE-2023-24928 CVE-2023-24929 CVE-2023-24935 CVE-2023-28216 CVE-2023-28218 CVE-2023-28219 CVE-2023-28220 CVE-2023-28221 CVE-2023-28222 CVE-2023-28223 CVE-2023-28224 CVE-2023-28225 CVE-2023-28226 CVE-2023-28227 CVE-2023-28228 CVE-2023-28229 CVE-2023-28231 CVE-2023-28232 CVE-2023-28233 CVE-2023-28234 CVE-2023-28235 CVE-2023-28236 CVE-2023-28237 CVE-2023-28238 CVE-2023-28240 CVE-2023-28243 CVE-2023-28244 CVE-2023-28246 CVE-2023-28247 CVE-2023-28248 CVE-2023-28249 CVE-2023-28250 CVE-2023-28251 CVE-2023-28252 CVE-2023-28253 CVE-2023-28254 CVE-2023-28255 CVE-2023-28256 CVE-2023-28260 CVE-2023-28262 CVE-2023-28263 CVE-2023-28266 CVE-2023-28267 CVE-2023-28268 CVE-2023-28269 CVE-2023-28270 CVE-2023-28271 CVE-2023-28272 CVE-2023-28273 CVE-2023-28274 CVE-2023-28275 CVE-2023-28276 CVE-2023-28277 CVE-2023-28278 CVE-2023-28284 CVE-2023-28285 CVE-2023-28287 CVE-2023-28288 CVE-2023-28291 CVE-2023-28292 CVE-2023-28295 CVE-2023-28296 CVE-2023-28297 CVE-2023-28300 CVE-2023-28301 CVE-2023-28304 CVE-2023-28305 CVE-2023-28306 CVE-2023-28307 CVE-2023-28308 CVE-2023-28309 CVE-2023-28311 CVE-2023-28312 CVE-2023-28313 CVE-2023-28314 Known Issues You can see these in more detail from the Deployments tab by selecting Known Issues column in the Edit Columns panel. For more information about Windows Known Issues, please see Windows message center (links to currently-supported versions of Windows are in the left pane). KB Article Applies To 5002375 SharePoint Server Subscription Edition 5025221 Windows 10, version 20H2, Windows 10, version 21H2, Windows 10, version 22H2 5025224 Windows 11 version 21H2 5025229 Windows 10, Version 1809, Windows Server 2019 5025230 Windows Server 2022 5025239 Windows 11 version 22H2 5025271 Windows Server 2008 (Monthly Rollup) 5025273 Windows Server 2008 (Security-only update) 5025277 Windows Server 2008 R2 (Security-only update) 5025279 Windows Server 2008 R2 (Monthly Rollup)Released: Apr 11, 2023 https://msrc.microsoft.com/update-gu...eNote/2023-Apr