Microsoft · Security update · January 10, 2023

KB5022348: January 2023 security update

KB5022348, released January 10, 2023, fixes 46 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent1 publicly disclosed
CVEs closed
46
9 rated Critical
Exploited
0
None reported
Exploitation more likely
4
Microsoft's assessment
Highest EPSS
0.0354
89th percentile

Priority of the 46 CVEs

Patch now 0 Urgent 13 High 28 Routine 5

Applies to

Product
Windows Server 2012
Windows Server 2012 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2023-21552 Microsoft Graphics ComponentElevation of Privilege7.8 0.0354 More likely
Urgent CVE-2023-21543 Windows Layer 2 Tunneling ProtocolRemote Code Execution8.1 0.0177 Exploitation Less Likely
Urgent CVE-2023-21556 Windows Layer 2 Tunneling ProtocolRemote Code Execution8.1 0.0150 Exploitation Less Likely
Urgent CVE-2023-21546 Windows Layer 2 Tunneling ProtocolRemote Code Execution8.1 0.0113 Exploitation Less Likely
Urgent CVE-2023-21555 Windows Layer 2 Tunneling ProtocolRemote Code Execution8.1 0.0113 Exploitation Less Likely
Urgent CVE-2023-21679 Windows Layer 2 Tunneling ProtocolRemote Code Execution8.1 0.0113 Exploitation Less Likely
Urgent CVE-2023-21535 Windows Secure Socket Tunneling Protocol (SSTP)Remote Code Execution8.1 0.0111 Exploitation Less Likely
Urgent CVE-2023-21548 Windows Secure Socket Tunneling Protocol (SSTP)Remote Code Execution8.1 0.0111 Exploitation Less Likely
Urgent CVE-2023-21541 Windows Task SchedulerElevation of Privilege7.8 0.0058 More likely
Urgent CVE-2023-21730 Windows Cryptographic ServicesElevation of Privilege7.8 0.0054 Exploitation Less Likely
Urgent CVE-2023-21726 Windows Credential ManagerElevation of Privilege7.8 0.0046 More likely
Urgent CVE-2023-21532 Microsoft Graphics ComponentElevation of Privilege7.0 0.0046 More likely
Urgent CVE-2023-21561 Windows Cryptographic ServicesElevation of Privilege7.8 0.0045 Exploitation Less Likely
High CVE-2023-21746 Windows NTLMElevation of Privilege7.8 0.0243 Exploitation Less Likely
High CVE-2023-21557 Windows LDAP - Lightweight Directory Access ProtocolDenial of Service7.5 0.0208 Exploitation Less Likely
High CVE-2023-21757 Windows Remote Access Service L2TP DriverDenial of Service7.5 0.0206 Exploitation Less Likely
High CVE-2023-21527 Windows iSCSIDenial of Service7.5 0.0203 Exploitation Less Likely
High CVE-2023-21677 Windows IKE ExtensionDenial of Service7.5 0.0203 Exploitation Less Likely
High CVE-2023-21683 Windows IKE ExtensionDenial of Service7.5 0.0203 Exploitation Less Likely
High CVE-2023-21728 Microsoft Local Security Authority Server (lsasrv)Denial of Service7.5 0.0203 Exploitation Less Likely
High CVE-2023-28297 Windows RPC APIElevation of Privilege8.8 0.0166 Exploitation Less Likely
High CVE-2023-21549 Windows SMBElevation of Privilege8.8 0.0147 DisclosedExploitation Less Likely
High CVE-2023-21681 Microsoft WDAC OLE DB provider for SQLRemote Code Execution8.8 0.0141 Exploitation Less Likely
High CVE-2023-21732 Windows ODBC DriverRemote Code Execution8.8 0.0141 Exploitation Less Likely
High CVE-2023-21675 Windows Virtual Registry ProviderElevation of Privilege7.8 0.0085 Exploitation Less Likely
Showing 1 to 25 of 46 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.