Microsoft · Security update · March 14, 2023

KB5023752: March 2023 security update

KB5023752, released March 14, 2023, fixes 47 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
47
4 rated Critical
Exploited
0
None reported
Exploitation more likely
4
Microsoft's assessment
Highest EPSS
0.4984
98th percentile

Priority of the 47 CVEs

Patch now 0 Urgent 6 High 30 Routine 11

Applies to

Product
Windows Server 2012
Windows Server 2012 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2023-23410 Windows HTTP.sysElevation of Privilege7.8 0.0795 More likely
Urgent CVE-2023-23416 Windows Cryptographic ServicesRemote Code Execution7.8 0.0758 More likely
Urgent CVE-2023-23415 Internet Control Message Protocol (ICMP)Remote Code Execution9.8 0.0348 More likely
Urgent CVE-2023-21708 Windows Remote Procedure CallRemote Code Execution9.8 0.0149 Exploitation Less Likely
Urgent CVE-2023-23404 Remote Access Service Point-to-Point Tunneling ProtocolRemote Code Execution8.1 0.0083 Exploitation Less Likely
Urgent CVE-2023-24861 Windows Win32KElevation of Privilege7.0 0.0027 More likely
High CVE-2022-29900 AMD CPU BranchInformation Disclosure7.8 0.0394 Exploitation Less Likely
High CVE-2023-24859 Windows Internet Key Exchange (IKE) ProtocolDenial of Service7.5 0.0165 Exploitation Less Likely
High CVE-2023-24856 Microsoft PostScript Printer DriverInformation Disclosure7.5 0.0150 Exploitation Less Likely
High CVE-2023-24858 Microsoft PostScript Printer DriverInformation Disclosure7.5 0.0143 Exploitation Less Likely
High CVE-2023-24876 Microsoft PostScript Printer DriverRemote Code Execution8.8 0.0140 Exploitation Less Likely
High CVE-2023-23403 Microsoft Printer DriversRemote Code Execution8.8 0.0129 Exploitation Less Likely
High CVE-2023-23406 Microsoft PostScript Printer DriverRemote Code Execution8.8 0.0129 Exploitation Less Likely
High CVE-2023-23413 Microsoft PostScript Printer DriverRemote Code Execution8.8 0.0129 Exploitation Less Likely
High CVE-2023-24864 Microsoft PostScript Printer DriverElevation of Privilege8.8 0.0129 Exploitation Less Likely
High CVE-2023-24867 Microsoft PostScript Printer DriverRemote Code Execution8.8 0.0129 Exploitation Less Likely
High CVE-2023-24868 Microsoft PostScript Printer DriverRemote Code Execution8.8 0.0129 Exploitation Less Likely
High CVE-2023-24872 Microsoft PostScript Printer DriverRemote Code Execution8.8 0.0129 Exploitation Less Likely
High CVE-2023-24907 Microsoft PostScript Printer DriverRemote Code Execution8.8 0.0129 Exploitation Less Likely
High CVE-2023-24909 Microsoft PostScript Printer DriverRemote Code Execution8.8 0.0129 Exploitation Less Likely
High CVE-2023-24913 Microsoft PostScript Printer DriverRemote Code Execution8.8 0.0129 Exploitation Less Likely
High CVE-2023-23405 Windows Remote Procedure Call RuntimeRemote Code Execution8.1 0.0100 Exploitation Less Likely
High CVE-2023-24869 Windows Remote Procedure Call RuntimeRemote Code Execution8.1 0.0100 Exploitation Less Likely
High CVE-2023-24908 Windows Remote Procedure Call RuntimeRemote Code Execution8.1 0.0100 Exploitation Less Likely
High CVE-2022-23825 AMD CPU BranchInformation Disclosure7.8 0.0079 Exploitation Less Likely
Showing 1 to 25 of 47 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.