Microsoft patches several critical security issues on the May 2023 Windows Patch Day

[harlan4096]

Microsoft released security updates and non-security updates for all supported versions of its Windows operating system and other company products on the May 2023 Patch Tuesday.
 
All versions of Windows are affected by critical updates. Updates were also released for other Microsoft products, including Microsoft Edge and Microsoft Office.

This overview provides system administrators and home users with information on the released patches. It offers an overview of the Windows updates, lists known issues, links to support pages and direct downloads, and more.
 

Click here to access our April 2023 overview of the Microsoft Patch Day.
Microsoft Windows Security Updates: May 2023

You can download the following Excel spreadsheet. It lists the released security updates of the May 2023 Microsoft Patch Day. Click on the following link to download it:  windows may 2023 security updates

Executive Summary

• Microsoft released security updates for all supported client and server versions of Windows.
  
• Security updates were also released for Microsoft Office, Visual Studio Code, Microsoft Bluetooth Driver, Windows Backup Engine, Remote Desktop Client, Windows SMB and Microsoft Teams.
  
• The following Windows client version have known issues: Windows 10 version 1809, Windows 10 version 20H2, 21H2 and 22H2, Windows 11 version 21H2 and 22H2.
  
• The following Windows server versions have known issues: Windows Server 2008 and 2008 R2, Windows Server 2019 and 2022
  
• Microsoft won't release feature updates for Windows 10 anymore. Windows 10 version 22H2 is the last version of Windows 10.
  

Operating System Distribution

• Windows 10 version 21H2: 19 vulnerabilities, 4 critical and 15 important.
  • Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability -- CVE-2023-24903
    
  • Windows OLE Remote Code Execution Vulnerability -- CVE-2023-29325
    
  • Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability -- CVE-2023-24943
    
  • Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability -- CVE-2023-28283
    
• Windows 10 version 22H2: 19 vulnerabilities, 4 critical and 15 important.
  • same as Windows 10 version 21H2
    
• Windows 11 version 2!H2:  20 vulnerabilities, 4 critical and 16 important
  • Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability -- CVE-2023-24903
    
  • Windows OLE Remote Code Execution Vulnerability -- CVE-2023-29325
    
  • Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability -- CVE-2023-24943
    
  • Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability -- CVE-2023-28283
    
• Windows 11 version 22H2:  19 vulnerabilities, 4 critical and 16 important
  • same as Windows 11 version 22H2
    

Windows Server products

• Windows Server 2008 R2 (extended support only): 14 vulnerabilities: 4 critical and 10 important
  • Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability -- CVE-2023-24943
    
  • Windows OLE Remote Code Execution Vulnerability -- CVE-2023-29325
    
  • Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability -- CVE-2023-24903
    
  • Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability -- CVE-2023-28283
    
• Windows Server 2012 R2: 16 vulnerabilities: 5 critical and 11 important
  • Same as Windows Server 2008 R2, plus
    
  • Windows Network File System Remote Code Execution Vulnerability -- CVE-2023-24941
    
• Windows Server 2016: 18 vulnerabilities: 5 critical and 13 important.
  • Same as Windows Server 2012 R2
    
• Windows Server 2019: 19 vulnerabilities: 5 critical and 14 important.
  • Same as Windows Server 2012 R2
    
•  Windows Server 2022:  18 vulnerabilities: 5 critical and 131 important.
  • Same as Windows Server 2012 R2
    

...

Continue Reading