PRUEBA AHORA
Patch Tuesday

Microsoft Patch Tuesday – January 2023

7 min. read
10/01/2023
By Esben Dochy
Microsoft-Patch-Tuesday-May-2022

Patch Tuesday is once again upon us. The January 2023 edition of Patch Tuesday brings us 101 fixes, with 11 rated as critical. We’ve listed the most important changes below.

⚡ TL;DR | Go Straight to the January 2023 Patch Tuesday Audit Report

Microsoft SharePoint Server Security Feature Bypass Vulnerability

The most severe issue addressed this month is a Sharepoint vulnerability, CVE-2023-21743. While the CVSS base score is quite low at 5.3. Microsoft has listed it as one of the critical vulnerabilities and has listed that exploitation is more likely.

Once the latest updated have been applied Microsoft mentions that additional steps are still required to fully secure your Sharepoint:

Customers must also trigger a SharePoint upgrade action included in this update to protect their SharePoint farm. The upgrade action can be triggered by running the SharePoint Products Configuration Wizard, the Upgrade-SPFarm PowerShell cmdlet, or the «psconfig.exe -cmd upgrade -inplace b2b» command on each SharePoint server after installing the update.

Additionally, CVE-2023-21742 and CVE-2023-21744 were also Sharepoint vulnerabilities that got fixed.

Windows Layer 2 Tunneling Protocol RCE

A majority of the remaining critical vulnerabilities are issues in the Windows Layer 2 Tunneling Protocol (L2TP). All of them having a CVSS base score of 8.1.

To exploit this, an unauthenticated attacker could send a specially crafted connection request to a RAS server, which could lead to remote code execution (RCE) on the RAS server machine.

Microsoft Cryptographic Services Vulnerabilities

Multiple vulnerabilities have been fixed in the Microsoft Cryptographic Services. The vulnerabilities include elevation of privilege and information disclosure vulnerabilities with CVSS base score ranging between 5.5 and 8.8.

For the elevation of privilege vulnerabilities, successful exploitation can lead to the attacker gaining SYSTEM privileges. For the information disclosure vulnerabilities, Microsoft lists that the information disclosed would be Windows cryptographic secrets.

Microsoft Exchange Vulnerabilities

Microsoft Exchange got 5 fixes this month. CVE-2023-21745, CVE-2023-21761, CVE-2023-21762, CVE-2023-21763, and CVE-2023-21764. A bit of a mixed bag with two spoofing vulnerabilities, one information disclosure and two elevation of privilege vulnerabilities.

Run the Patch Tuesday January 2023 Audit

To help manage your update progress, we’ve created the Patch Tuesday Audit that checks if the assets in your network are on the latest patch updates. The report has been color-coded to see which machines are up-to-date and which ones still need to be updated. As always, system administrators are urged to update their environment as soon as possible to ensure all endpoints are secured.

The Lansweeper Patch Tuesday report is automatically added to Lansweeper Cloud sites. Lansweeper Cloud is included in all our licenses without any additional cost and allows you to federate all your installations into one single view so all you need to do is look at one report, automatically added every patch Tuesday!

Patch Tuesday January 2023 CVE Codes & Titles

CVE NumberCVE Title
CVE-2022-41099BitLocker Security Feature Bypass Vulnerability
CVE-2022-41113Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
CVE-2022-47211Microsoft Office Graphics Remote Code Execution Vulnerability
CVE-2023-21524Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
CVE-2023-21525Remote Procedure Call Runtime Denial of Service Vulnerability
CVE-2023-21527Windows iSCSI Service Denial of Service Vulnerability
CVE-2023-21531Azure Service Fabric Container Elevation of Privilege Vulnerability
CVE-2023-21532Windows GDI Elevation of Privilege Vulnerability
CVE-2023-21535Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
CVE-2023-21536Event Tracing for Windows Information Disclosure Vulnerability
CVE-2023-21537Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
CVE-2023-21538.NET Denial of Service Vulnerability
CVE-2023-21539Windows Authentication Remote Code Execution Vulnerability
CVE-2023-21540Windows Cryptographic Information Disclosure Vulnerability
CVE-2023-21541Windows Task Scheduler Elevation of Privilege Vulnerability
CVE-2023-21542Windows Installer Elevation of Privilege Vulnerability
CVE-2023-21543Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
CVE-2023-21546Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
CVE-2023-21547Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability
CVE-2023-21548Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
CVE-2023-21549Windows SMB Witness Service Elevation of Privilege Vulnerability
CVE-2023-21550Windows Cryptographic Information Disclosure Vulnerability
CVE-2023-21551Microsoft Cryptographic Services Elevation of Privilege Vulnerability
CVE-2023-21552Windows GDI Elevation of Privilege Vulnerability
CVE-2023-21555Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
CVE-2023-21556Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
CVE-2023-21557Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
CVE-2023-21558Windows Error Reporting Service Elevation of Privilege Vulnerability
CVE-2023-21559Windows Cryptographic Information Disclosure Vulnerability
CVE-2023-21560Windows Boot Manager Security Feature Bypass Vulnerability
CVE-2023-21561Microsoft Cryptographic Services Elevation of Privilege Vulnerability
CVE-2023-21563BitLocker Security Feature Bypass Vulnerability
CVE-2023-21674Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
CVE-2023-21675Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-21676Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVE-2023-21677Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
CVE-2023-21678Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2023-21679Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
CVE-2023-21680Windows Win32k Elevation of Privilege Vulnerability
CVE-2023-21681Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2023-21682Windows Point-to-Point Protocol (PPP) Information Disclosure Vulnerability
CVE-2023-21683Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
CVE-2023-21724Microsoft DWM Core Library Elevation of Privilege Vulnerability
CVE-2023-21725Windows Malicious Software Removal Tool Elevation of Privilege Vulnerability
CVE-2023-21726Windows Credential Manager User Interface Elevation of Privilege Vulnerability
CVE-2023-21728Windows Netlogon Denial of Service Vulnerability
CVE-2023-21730Microsoft Cryptographic Services Elevation of Privilege Vulnerability
CVE-2023-21732Microsoft ODBC Driver Remote Code Execution Vulnerability
CVE-2023-21733Windows Bind Filter Driver Elevation of Privilege Vulnerability
CVE-2023-21734Microsoft Office Remote Code Execution Vulnerability
CVE-2023-21735Microsoft Office Remote Code Execution Vulnerability
CVE-2023-21736Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2023-21737Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2023-21738Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2023-21739Windows Bluetooth Driver Elevation of Privilege Vulnerability
CVE-2023-21741Microsoft Office Visio Information Disclosure Vulnerability
CVE-2023-21742Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2023-21743Microsoft SharePoint Server Security Feature Bypass Vulnerability
CVE-2023-21744Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2023-21745Microsoft Exchange Server Spoofing Vulnerability
CVE-2023-21746Windows NTLM Elevation of Privilege Vulnerability
CVE-2023-21747Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-21748Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-21749Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-21750Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-21752Windows Backup Service Elevation of Privilege Vulnerability
CVE-2023-21753Event Tracing for Windows Information Disclosure Vulnerability
CVE-2023-21754Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-21755Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-21757Windows Layer 2 Tunneling Protocol (L2TP) Denial of Service Vulnerability
CVE-2023-21758Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
CVE-2023-21759Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability
CVE-2023-21760Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2023-21761Microsoft Exchange Server Information Disclosure Vulnerability
CVE-2023-21762Microsoft Exchange Server Spoofing Vulnerability
CVE-2023-21763Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2023-21764Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2023-21765Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2023-21766Windows Overlay Filter Information Disclosure Vulnerability
CVE-2023-21767Windows Overlay Filter Elevation of Privilege Vulnerability
CVE-2023-21768Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2023-21771Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability
CVE-2023-21772Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-21773Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-21774Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-21776Windows Kernel Information Disclosure Vulnerability
CVE-2023-21779Visual Studio Code Remote Code Execution
CVE-2023-217803D Builder Remote Code Execution Vulnerability
CVE-2023-217813D Builder Remote Code Execution Vulnerability
CVE-2023-217823D Builder Remote Code Execution Vulnerability
CVE-2023-217833D Builder Remote Code Execution Vulnerability
CVE-2023-217843D Builder Remote Code Execution Vulnerability
CVE-2023-217853D Builder Remote Code Execution Vulnerability
CVE-2023-217863D Builder Remote Code Execution Vulnerability
CVE-2023-217873D Builder Remote Code Execution Vulnerability
CVE-2023-217883D Builder Remote Code Execution Vulnerability
CVE-2023-217893D Builder Remote Code Execution Vulnerability
CVE-2023-217903D Builder Remote Code Execution Vulnerability
CVE-2023-217913D Builder Remote Code Execution Vulnerability
CVE-2023-217923D Builder Remote Code Execution Vulnerability
CVE-2023-217933D Builder Remote Code Execution Vulnerability