Microsoft February 2023 Patch Tuesday fixes 3 exploited zero-days, 77 flaws

Tag CVE ID CVE Title Severity .NET and Visual Studio .NET and Visual Studio Remote Code Execution Vulnerability Critical .NET Framework .NET Framework Denial of Service Vulnerability Important 3D Builder 3D Builder Remote Code Execution Vulnerability Important 3D Builder 3D Builder Remote Code Execution Vulnerability Important 3D Builder Print 3D Remote Code Execution Vulnerability Important Azure App Service Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability Important Azure Data Box Gateway Azure Data Box Gateway Remote Code Execution Vulnerability Important Azure DevOps Azure DevOps Server Cross-Site Scripting Vulnerability Important Azure DevOps Azure DevOps Server Remote Code Execution Vulnerability Important Azure Machine Learning Azure Machine Learning Compute Instance Information Disclosure Vulnerability Important HoloLens MITRE: CVE-2019-15126 Specifically timed and handcrafted traffic can cause internal errors (related to state transitions) in a WLAN device Unknown Internet Storage Name Service Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability Important Internet Storage Name Service Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability Important Mariner Unknown Unknown Microsoft Defender for Endpoint Microsoft Defender for Endpoint Security Feature Bypass Vulnerability Important Microsoft Defender for IoT Microsoft Defender for IoT Elevation of Privilege Vulnerability Important Microsoft Dynamics Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability Important Microsoft Dynamics Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability Important Microsoft Dynamics Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability Important Microsoft Dynamics Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability Important Microsoft Dynamics Microsoft Dynamics Unified Service Desk Remote Code Execution Vulnerability Important Microsoft Dynamics Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability Important Microsoft Edge (Chromium-based) Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Moderate Microsoft Edge (Chromium-based) Microsoft Edge (Chromium-based) Spoofing Vulnerability Low Microsoft Edge (Chromium-based) Microsoft Edge (Chromium-based) Tampering Vulnerability Low Microsoft Exchange Server Microsoft Exchange Server Remote Code Execution Vulnerability Important Microsoft Exchange Server Microsoft Exchange Server Remote Code Execution Vulnerability Important Microsoft Exchange Server Microsoft Exchange Server Remote Code Execution Vulnerability Important Microsoft Exchange Server Microsoft Exchange Server Remote Code Execution Vulnerability Important Microsoft Graphics Component Windows Graphics Component Elevation of Privilege Vulnerability Important Microsoft Graphics Component Windows Graphics Component Remote Code Execution Vulnerability Important Microsoft Office Microsoft Office Information Disclosure Vulnerability Important Microsoft Office OneNote Microsoft OneNote Spoofing Vulnerability Important Microsoft Office Publisher Microsoft Publisher Security Features Bypass Vulnerability Important Microsoft Office SharePoint Microsoft SharePoint Server Elevation of Privilege Vulnerability Important Microsoft Office Word Microsoft Word Remote Code Execution Vulnerability Critical Microsoft PostScript Printer Driver Microsoft PostScript Printer Driver Information Disclosure Vulnerability Important Microsoft PostScript Printer Driver Microsoft PostScript Printer Driver Remote Code Execution Vulnerability Important Microsoft PostScript Printer Driver Microsoft PostScript Printer Driver Remote Code Execution Vulnerability Important Microsoft WDAC OLE DB provider for SQL Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Important Microsoft WDAC OLE DB provider for SQL Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Important Microsoft WDAC OLE DB provider for SQL Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Important Microsoft Windows Codecs Library Windows Media Remote Code Execution Vulnerability Important Power BI Power BI Report Server Spoofing Vulnerability Important SQL Server Microsoft SQL Server Remote Code Execution Vulnerability Important SQL Server Microsoft SQL ODBC Driver Remote Code Execution Vulnerability Critical SQL Server Microsoft SQL Server Remote Code Execution Vulnerability Important SQL Server Microsoft SQL Server Remote Code Execution Vulnerability Important SQL Server Microsoft SQL Server Integration Service (VS extension) Remote Code Execution Vulnerability Important SQL Server Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability Important Visual Studio Visual Studio Elevation of Privilege Vulnerability Important Visual Studio Visual Studio Remote Code Execution Vulnerability Critical Visual Studio Visual Studio Remote Code Execution Vulnerability Critical Visual Studio Visual Studio Denial of Service Vulnerability Important Windows Active Directory Windows Active Directory Domain Services API Denial of Service Vulnerability Important Windows ALPC NT OS Kernel Elevation of Privilege Vulnerability Important Windows Common Log File System Driver Windows Common Log File System Driver Elevation of Privilege Vulnerability Important Windows Common Log File System Driver Windows Common Log File System Driver Elevation of Privilege Vulnerability Important Windows Cryptographic Services Windows Secure Channel Denial of Service Vulnerability Important Windows Cryptographic Services Windows Secure Channel Denial of Service Vulnerability Important Windows Distributed File System (DFS) Windows Distributed File System (DFS) Remote Code Execution Vulnerability Important Windows Fax and Scan Service Windows Fax Service Remote Code Execution Vulnerability Important Windows HTTP.sys HTTP.sys Information Disclosure Vulnerability Important Windows Installer Windows Installer Elevation of Privilege Vulnerability Important Windows iSCSI Windows iSCSI Discovery Service Remote Code Execution Vulnerability Critical Windows iSCSI Windows iSCSI Discovery Service Denial of Service Vulnerability Important Windows iSCSI Windows iSCSI Service Denial of Service Vulnerability Important Windows iSCSI Windows iSCSI Service Denial of Service Vulnerability Important Windows Kerberos Windows Kerberos Elevation of Privilege Vulnerability Important Windows MSHTML Platform Windows MSHTML Platform Remote Code Execution Vulnerability Important Windows ODBC Driver Microsoft ODBC Driver Remote Code Execution Vulnerability Important Windows ODBC Driver Microsoft ODBC Driver Remote Code Execution Vulnerability Important Windows Protected EAP (PEAP) Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability Important Windows Protected EAP (PEAP) Microsoft Protected Extensible Authentication Protocol (PEAP) Denial of Service Vulnerability Important Windows Protected EAP (PEAP) Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability Critical Windows Protected EAP (PEAP) Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability Important Windows Protected EAP (PEAP) Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability Critical Windows Protected EAP (PEAP) Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability Critical Windows SChannel Windows Secure Channel Denial of Service Vulnerability Important Windows Win32K Windows Graphics Component Elevation of Privilege Vulnerability Important