Microsoft Windows Security Updates March 2023: What you need to know before installat

[harlan4096]

Welcome to the overview for the March 2023 Microsoft Windows security releases. Microsoft published security updates for all client and server versions of Windows that it supports.

Security updates and non-security updates are already available for Windows and other Microsoft products, including Microsoft Edge and Microsoft Office.
Our monthly overview offers information about all security patches that Microsoft released, including their severity, known issues as confirmed by Microsoft, links to support pages and downloads, and more.

Click here to check out the February 2023 Microsoft Windows Patch Day overview in case you missed it.

Microsoft Windows Security Updates: March 2023Here is the Excel spreadsheet for the security updates that Microsoft released on the March 2023 Patch Day. A click on the following link downloads the archive to the local system: Microsoft Windows security updates march 2023

Executive Summary

• Microsoft released security updates for all supported client and server versions of Windows.
  
• Security updates are also available for Azure, Microsoft Office, Microsoft Edge, Microsoft printer drivers, Visual Studio, and other company products.
  
• The following Windows client version have known issues: Windows 10, version 1809, version 20H2, 21H1 and 22H2, Windows 11 version 22H2.
  
• The following Windows server versions have known issues: Windows Server 2008, 2008 R2, 2012, Windows Server 2019, and Windows Server 2022.
  

Operating System Distribution

• Windows 10 version 21H2 and 22H2: 52  vulnerabilities, 7 critical and 44 important and 1 moderate
  • CERT/CC: CVE-2023-1017 TPM2.0 Module Library Elevation of Privilege Vulnerability -- CVE-2023-1017
    
  • CERT/CC: CVE-2023-1018 TPM2.0 Module Library Elevation of Privilege Vulnerability -- CVE-2023-1018
    
  • Remote Procedure Call Runtime Remote Code Execution Vulnerability -- CVE-2023-21708
    
  • Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability -- CVE-2023-23404
    
  • Windows Hyper-V Denial of Service Vulnerability -- CVE-2023-23411
    
  • Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability -- CVE-2023-23415
    
  • Windows Cryptographic Services Remote Code Execution Vulnerability -- CVE-2023-23416
    
• Windows 11 and Windows 11 version 22H2:  54 vulnerabilities, 8 critical and 45 important and 1 moderate
  • HTTP Protocol Stack Remote Code Execution Vulnerability -- CVE-2023-23392
    
  • CERT/CC: CVE-2023-1017 TPM2.0 Module Library Elevation of Privilege Vulnerability -- CVE-2023-1017
    
  • CERT/CC: CVE-2023-1018 TPM2.0 Module Library Elevation of Privilege Vulnerability -- CVE-2023-1018
    
  • Remote Procedure Call Runtime Remote Code Execution Vulnerability -- CVE-2023-21708
    
  • Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability -- CVE-2023-23404
    
  • Windows Hyper-V Denial of Service Vulnerability -- CVE-2023-23411
    
  • Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability -- CVE-2023-23415
    
  • Windows Cryptographic Services Remote Code Execution Vulnerability -- CVE-2023-23416
    

Windows Server products

• Windows Server 2008 R2 (extended support only): 20 vulnerabilities: 2 critical and 18 important
  • Remote Procedure Call Runtime Remote Code Execution Vulnerability -- CVE-2023-21708
    
  • Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability -- CVE-2023-23415
    
• Windows Server 2012 R2: 45 vulnerabilities: 4 critical and 41 important
  • Remote Procedure Call Runtime Remote Code Execution Vulnerability -- CVE-2023-21708
    
  • Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability -- CVE-2023-23404
    
  • Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability -- CVE-2023-23415
    
  • Windows Cryptographic Services Remote Code Execution Vulnerability -- CVE-2023-23416
    
• Windows Server 2016: 51 vulnerabilities: 7 critical and 43 important and 1 moderate.
  • CERT/CC: CVE-2023-1017 TPM2.0 Module Library Elevation of Privilege Vulnerability -- CVE-2023-1017
    
  • CERT/CC: CVE-2023-1018 TPM2.0 Module Library Elevation of Privilege Vulnerability -- CVE-2023-1018
    
  • Remote Procedure Call Runtime Remote Code Execution Vulnerability -- CVE-2023-21708
    
  • Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability -- CVE-2023-23404
    
  • Windows Hyper-V Denial of Service Vulnerability -- CVE-2023-23411
    
  • Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability -- CVE-2023-23415
    
  • Windows Cryptographic Services Remote Code Execution Vulnerability -- CVE-2023-23416
    
• Windows Server 2019: 52 vulnerabilities: 7 critical and 44 important and 1 moderate
  • Same as Windows Server 2016.
    
•  Windows Server 2022:  54 vulnerabilities: 8 critical and 45 important and 1 moderate
  • HTTP Protocol Stack Remote Code Execution Vulnerability -- CVE-2023-23392
    
  • CERT/CC: CVE-2023-1017 TPM2.0 Module Library Elevation of Privilege Vulnerability -- CVE-2023-1017
    
  • CERT/CC: CVE-2023-1018 TPM2.0 Module Library Elevation of Privilege Vulnerability -- CVE-2023-1018
    
  • Remote Procedure Call Runtime Remote Code Execution Vulnerability -- CVE-2023-21708
    
  • Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability -- CVE-2023-23404
    
  • Windows Hyper-V Denial of Service Vulnerability -- CVE-2023-23411
    
  • Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability -- CVE-2023-23415
    
  • Windows Cryptographic Services Remote Code Execution Vulnerability -- CVE-2023-23416
    

...

Continue Reading