Microsoft Server security updates, February 2023 (Patch Tuesday 2023-02-14)

Every Microsoft server-product CVE that the Microsoft Security Update Guide published in February 2023, including the Patch Tuesday release on 2023-02-14 and any out-of-band updates. Client-only products (Edge, Office apps, consumer Windows) are not tracked.

Advisories: 37
Critical: 4
High: 30
In CISA KEV: 3
CVEs: 37

Microsoft server CVEs, February 2023

Feb 14, 2023
Critical [CVE-2023-21716] Microsoft Word Remote Code Execution Vulnerability
Critical9.8
Feb 14, 2023
Critical [CVE-2023-21692] Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
Critical9.8
Feb 14, 2023
Critical [CVE-2023-21690] Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
Critical9.8
Feb 14, 2023
Critical [CVE-2023-21803] Windows iSCSI Discovery Service Remote Code Execution Vulnerability
Critical9.8
Feb 14, 2023
High [CVE-2023-21823] Windows Graphics Component Remote Code Execution Vulnerability
High7.8ExploitedCISA KEV
Feb 14, 2023
High [CVE-2023-23376] Windows Common Log File System Driver Elevation of Privilege Vulnerability
High7.8ExploitedCISA KEV
Feb 14, 2023
High [CVE-2023-21717] Microsoft SharePoint Server Elevation of Privilege Vulnerability
High8.8
Feb 14, 2023
High [CVE-2023-21713] Microsoft SQL Server Remote Code Execution Vulnerability
High8.8
Feb 14, 2023
High [CVE-2023-21710] Microsoft Exchange Server Remote Code Execution Vulnerability
High7.2
Feb 14, 2023
High [CVE-2023-21702] Windows iSCSI Service Denial of Service Vulnerability
High7.5
Feb 14, 2023
High [CVE-2023-21701] Microsoft Protected Extensible Authentication Protocol (PEAP) Denial of Service Vulnerability
High7.5
Feb 14, 2023
High [CVE-2023-21700] Windows iSCSI Discovery Service Denial of Service Vulnerability
High7.5
Feb 14, 2023
High [CVE-2023-21691] Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability
High7.5
Feb 14, 2023
High [CVE-2023-21688] NT OS Kernel Elevation of Privilege Vulnerability
High7.8
Feb 14, 2023
High [CVE-2023-21686] Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
High8.8
Feb 14, 2023
High [CVE-2023-21822] Windows Graphics Component Elevation of Privilege Vulnerability
High7.8
Feb 14, 2023
High [CVE-2023-21820] Windows Distributed File System (DFS) Remote Code Execution Vulnerability
High7.4
Feb 14, 2023
High [CVE-2023-21819] Windows Secure Channel Denial of Service Vulnerability
High7.5
Feb 14, 2023
High [CVE-2023-21818] Windows Secure Channel Denial of Service Vulnerability
High7.5
Feb 14, 2023
High [CVE-2023-21817] Windows Kerberos Elevation of Privilege Vulnerability
High7.8
Feb 14, 2023
High [CVE-2023-21816] Windows Active Directory Domain Services API Denial of Service Vulnerability
High7.5
Feb 14, 2023
High [CVE-2023-21812] Windows Common Log File System Driver Elevation of Privilege Vulnerability
High7.8
Feb 14, 2023
High [CVE-2023-21805] Windows MSHTML Platform Remote Code Execution Vulnerability
High7.8
Feb 14, 2023
High [CVE-2023-21804] Windows Graphics Component Elevation of Privilege Vulnerability
High7.8
Feb 14, 2023
High [CVE-2023-21802] Windows Media Remote Code Execution Vulnerability
High7.8
Feb 14, 2023
High [CVE-2023-21801] Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
High7.8
Feb 14, 2023
High [CVE-2023-21800] Windows Installer Elevation of Privilege Vulnerability
High7.8
Feb 14, 2023
High [CVE-2023-21798] Microsoft ODBC Driver Remote Code Execution Vulnerability
High8.8
Feb 14, 2023
High [CVE-2023-21529] Microsoft Exchange Server Remote Code Execution Vulnerability
High8.8ExploitedCISA KEV
Feb 14, 2023
High [CVE-2023-21568] Microsoft SQL Server Integration Service (VS extension) Remote Code Execution Vulnerability
High7.3
Feb 14, 2023
High [CVE-2023-21718] Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
High7.8
Feb 14, 2023
High [CVE-2023-21704] Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
High7.8
Feb 14, 2023
High [CVE-2023-21528] Microsoft SQL Server Remote Code Execution Vulnerability
High7.8
Feb 14, 2023
Medium [CVE-2023-21699] Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability
Medium5.3
Feb 14, 2023
Medium [CVE-2023-21694] Windows Fax Service Remote Code Execution Vulnerability
Medium6.8
Feb 14, 2023
Medium [CVE-2023-21693] Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
Medium5.7
Feb 14, 2023
Medium [CVE-2023-21687] HTTP.sys Information Disclosure Vulnerability
Medium5.5

Get an email when Microsoft publishes the next one.

See Microsoft's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Microsoft

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.