微软2月安全更新补丁和多个高危漏洞风险提示

admin 2023年2月16日20:27:40评论225 views字数 17244阅读57分28秒阅读模式
微软2月安全更新补丁和多个高危漏洞风险提示

漏洞公告

微软官方发布了2月安全更新公告,包含了微软家族多个软件的安全更新补丁,包括:Microsoft Office、Windows Graphics Component、Microsoft Exchange Server、NT OS Kernel等多个CVE安全漏洞补丁。请相关用户及时更新对应补丁修复漏洞。

参考链接:

https://msrc.microsoft.com/update-guide/releaseNote/2023-Feb

根据公告,此次更新中修复的Microsoft Office安全功能绕过漏洞(CVE-2023-21715)、Windows Graphics Component权限提升漏洞(CVE-2023-21823)、Windows Common Log File System Driver权限提升漏洞(CVE-2023-23376、CVE-2023-21812)、Microsoft Exchange Server远程代码执行漏洞(CVE-2023-21529、CVE-2023-21706)、NT OS Kernel权限提升漏洞(CVE-2023-21688)、Microsoft Protected Extensible Authentication Protocol (PEAP)远程代码执行漏洞(CVE-2023-21689、CVE-2023-21690、CVE-2023-21692)、Windows Secure Channel拒绝服务漏洞(CVE-2023-21818、CVE-2023-21819)风险较大。其中CVE-2023-21715Microsoft Office安全功能绕过漏洞、CVE-2023-21823 Windows Graphics Component权限提升漏洞、CVE-2023-23376 Windows Common Log File System Driver权限提升漏洞存在在野利用,建议尽快安装安全更新补丁或采取临时缓解措施加固系统。

相关链接参考:

https://msrc.microsoft.com/update-guide/vulnerability/



影响范围


Microsoft Office安全功能绕过漏洞(CVE-2023-21715)

Microsoft 365 Apps for Enterprise for 32-bit Systems

Microsoft 365 Apps for Enterprise for 64-bit Systems


Windows Graphics Component权限提升漏洞(CVE-2023-21823)

Microsoft Office for Android

Microsoft Office for Universal

Windows 10 for 32-bit Systems

Windows 10 for x64-based Systems

Windows 10 Version 1607 for 32-bit Systems

Windows 10 Version 1607 for x64-based Systems

Windows 10 Version 1809 for 32-bit Systems

Windows 10 Version 1809 for ARM64-based Systems

Windows 10 Version 1809 for x64-based Systems

Windows 10 Version 20H2 for 32-bit Systems

Windows 10 Version 20H2 for ARM64-based Systems

Windows 10 Version 20H2 for x64-based Systems

Windows 10 Version 21H2 for 32-bit Systems

Windows 10 Version 21H2 for ARM64-based Systems

Windows 10 Version 21H2 for x64-based Systems

Windows 10 Version 22H2 for 32-bit Systems

Windows 10 Version 22H2 for ARM64-based Systems

Windows 10 Version 22H2 for x64-based Systems

Windows 11 version 21H2 for ARM64-based Systems

Windows 11 version 21H2 for x64-based Systems

Windows 11 Version 22H2 for ARM64-based Systems

Windows 11 Version 22H2 for x64-based Systems

Windows Server 2008 for 32-bit Systems Service Pack 2

Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)

Windows Server 2008 for x64-based Systems Service Pack 2

Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)

Windows Server 2008 R2 for x64-based Systems Service Pack 1

Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

Windows Server 2012

Windows Server 2012 (Server Core installation)

Windows Server 2012 R2

Windows Server 2012 R2 (Server Core installation)

Windows Server 2016

Windows Server 2016 (Server Core installation)

Windows Server 2019

Windows Server 2019 (Server Core installation)

Windows Server 2022

Windows Server 2022 (Server Core installation)


Windows Common Log File System Driver权限提升漏洞(CVE-2023-23376、CVE-2023-21812)

Windows 10 for 32-bit Systems

Windows 10 for x64-based Systems

Windows 10 Version 1607 for 32-bit Systems

Windows 10 Version 1607 for x64-based Systems

Windows 10 Version 1809 for 32-bit Systems

Windows 10 Version 1809 for ARM64-based Systems

Windows 10 Version 1809 for x64-based Systems

Windows 10 Version 20H2 for 32-bit Systems

Windows 10 Version 20H2 for ARM64-based Systems

Windows 10 Version 20H2 for x64-based Systems

Windows 10 Version 21H2 for 32-bit Systems

Windows 10 Version 21H2 for ARM64-based Systems

Windows 10 Version 21H2 for x64-based Systems

Windows 10 Version 22H2 for 32-bit Systems

Windows 10 Version 22H2 for ARM64-based Systems

Windows 10 Version 22H2 for x64-based Systems

Windows 11 version 21H2 for ARM64-based Systems

Windows 11 version 21H2 for x64-based Systems

Windows 11 Version 22H2 for ARM64-based Systems

Windows 11 Version 22H2 for x64-based Systems

Windows Server 2008 for 32-bit Systems Service Pack 2

Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)

Windows Server 2008 for x64-based Systems Service Pack 2

Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)

Windows Server 2008 R2 for x64-based Systems Service Pack 1

Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

Windows Server 2012

Windows Server 2012 (Server Core installation)

Windows Server 2012 R2

Windows Server 2012 R2 (Server Core installation)

Windows Server 2016

Windows Server 2016 (Server Core installation)

Windows Server 2019

Windows Server 2019 (Server Core installation)

Windows Server 2022

Windows Server 2022 (Server Core installation)


Microsoft Exchange Server远程代码执行漏洞(CVE-2023-21529)

Microsoft Exchange Server 2013 Cumulative Update 23

Microsoft Exchange Server 2016 Cumulative Update 23

Microsoft Exchange Server 2019 Cumulative Update 11

Microsoft Exchange Server 2019 Cumulative Update 12


NT OS Kernel权限提升漏洞(CVE-2023-21688)

Windows 10 for 32-bit Systems

Windows 10 for x64-based Systems

Windows 10 Version 1607 for 32-bit Systems

Windows 10 Version 1607 for x64-based Systems

Windows 10 Version 1809 for 32-bit Systems

Windows 10 Version 1809 for ARM64-based Systems

Windows 10 Version 1809 for x64-based Systems

Windows 10 Version 20H2 for 32-bit Systems

Windows 10 Version 20H2 for ARM64-based Systems

Windows 10 Version 20H2 for x64-based Systems

Windows 10 Version 21H2 for 32-bit Systems

Windows 10 Version 21H2 for ARM64-based Systems

Windows 10 Version 21H2 for x64-based Systems

Windows 10 Version 22H2 for 32-bit Systems

Windows 10 Version 22H2 for ARM64-based Systems

Windows 10 Version 22H2 for x64-based Systems

Windows 11 version 21H2 for ARM64-based Systems

Windows 11 version 21H2 for x64-based Systems

Windows 11 Version 22H2 for ARM64-based Systems

Windows 11 Version 22H2 for x64-based Systems

Windows Server 2008 for 32-bit Systems Service Pack 2

Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)

Windows Server 2008 for x64-based Systems Service Pack 2

Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)

Windows Server 2008 R2 for x64-based Systems Service Pack 1

Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

Windows Server 2012

Windows Server 2012 (Server Core installation)

Windows Server 2012 R2

Windows Server 2012 R2 (Server Core installation)

Windows Server 2016

Windows Server 2016 (Server Core installation)

Windows Server 2019

Windows Server 2019 (Server Core installation)

Windows Server 2022

Windows Server 2022 (Server Core installation)


Microsoft Protected Extensible Authentication Protocol (PEAP)远程代码执行漏洞(CVE-2023-21689、CVE-2023-21690)

Windows Server 2012 R2 (Server Core installation)

Windows Server 2012 R2

Windows Server 2012 (Server Core installation)

Windows Server 2012

Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

Windows Server 2008 R2 for x64-based Systems Service Pack 1

Windows Server 2016 (Server Core installation)

Windows Server 2016

Windows 10 Version 1607 for x64-based Systems

Windows 10 Version 1607 for 32-bit Systems

Windows 10 for x64-based Systems

Windows 10 for 32-bit Systems

Windows 10 Version 22H2 for 32-bit Systems

Windows 10 Version 22H2 for ARM64-based Systems

Windows 10 Version 22H2 for x64-based Systems

Windows 11 Version 22H2 for ARM64-based Systems

Windows 10 Version 21H2 for x64-based Systems

Windows 10 Version 21H2 for ARM64-based Systems

Windows 10 Version 21H2 for 32-bit Systems

Windows 11 version 21H2 for ARM64-based Systems

Windows 11 version 21H2 for x64-based Systems

Windows 10 Version 20H2 for ARM64-based Systems

Windows 10 Version 20H2 for 32-bit Systems

Windows 10 Version 20H2 for x64-based Systems

Windows Server 2022 (Server Core installation)

Windows Server 2022

Windows Server 2019 (Server Core installation)

Windows Server 2019

Windows 10 Version 1809 for ARM64-based Systems

Windows 10 Version 1809 for x64-based Systems

Windows 10 Version 1809 for 32-bit Systems


Microsoft Protected Extensible Authentication Protocol (PEAP)远程代码执行漏洞(CVE-2023-21692)

Windows 10 for 32-bit Systems

Windows 10 for x64-based Systems

Windows 10 Version 1607 for 32-bit Systems

Windows 10 Version 1607 for x64-based Systems

Windows 10 Version 1809 for 32-bit Systems

Windows 10 Version 1809 for ARM64-based Systems

Windows 10 Version 1809 for x64-based Systems

Windows 10 Version 20H2 for 32-bit Systems

Windows 10 Version 20H2 for ARM64-based Systems

Windows 10 Version 20H2 for x64-based Systems

Windows 10 Version 21H2 for 32-bit Systems

Windows 10 Version 21H2 for ARM64-based Systems

Windows 10 Version 21H2 for x64-based Systems

Windows 10 Version 22H2 for 32-bit Systems

Windows 10 Version 22H2 for ARM64-based Systems

Windows 10 Version 22H2 for x64-based Systems

Windows 11 version 21H2 for ARM64-based Systems

Windows 11 version 21H2 for x64-based Systems

Windows 11 Version 22H2 for ARM64-based Systems

Windows 11 Version 22H2 for x64-based Systems

Windows Server 2008 R2 for x64-based Systems Service Pack 1

Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

Windows Server 2012

Windows Server 2012 (Server Core installation)

Windows Server 2012 R2

Windows Server 2012 R2 (Server Core installation)

Windows Server 2016

Windows Server 2016 (Server Core installation)

Windows Server 2019

Windows Server 2019 (Server Core installation)

Windows Server 2022

Windows Server 2022 (Server Core installation)

Windows Server 2019 (Server Core installation)

Windows Server 2022

Windows Server 2022 (Server Core installation)


Microsoft Exchange Server远程代码执行漏洞(CVE-2023-21706)

Microsoft Exchange Server 2013 Cumulative Update 23

Microsoft Exchange Server 2016 Cumulative Update 23

Microsoft Exchange Server 2019 Cumulative Update 11

Microsoft Exchange Server 2019 Cumulative Update 12


Windows Secure Channel拒绝服务漏洞(CVE-2023-21818)

Windows 10 for 32-bit Systems

Windows 10 for x64-based Systems

Windows 10 Version 1607 for 32-bit Systems

Windows 10 Version 1607 for x64-based Systems

Windows 10 Version 1809 for 32-bit Systems

Windows 10 Version 1809 for ARM64-based Systems

Windows 10 Version 1809 for x64-based Systems

Windows 10 Version 20H2 for 32-bit Systems

Windows 10 Version 20H2 for ARM64-based Systems

Windows 10 Version 20H2 for x64-based Systems

Windows 10 Version 21H2 for 32-bit Systems

Windows 10 Version 21H2 for ARM64-based Systems

Windows 10 Version 21H2 for x64-based Systems

Windows 10 Version 22H2 for 32-bit Systems

Windows 10 Version 22H2 for ARM64-based Systems

Windows 10 Version 22H2 for x64-based Systems

Windows 11 version 21H2 for ARM64-based Systems

Windows 11 version 21H2 for x64-based Systems

Windows Server 2008 for 32-bit Systems Service Pack 2

Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)

Windows Server 2008 for x64-based Systems Service Pack 2

Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)

Windows Server 2008 R2 for x64-based Systems Service Pack 1

Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

Windows Server 2012

Windows Server 2012 (Server Core installation)

Windows Server 2012 R2

Windows Server 2012 R2 (Server Core installation)

Windows Server 2016

Windows Server 2016 (Server Core installation)

Windows Server 2019

Windows Server 2019 (Server Core installation)

Windows Server 2022

Windows Server 2022 (Server Core installation)

Windows Server 2022 (Server Core installation)


Windows Secure Channel拒绝服务漏洞(CVE-2023-21819)

Windows 10 Version 22H2 for 32-bit Systems

Windows 10 Version 22H2 for ARM64-based Systems

Windows 10 Version 22H2 for x64-based Systems

Windows 10 Version 21H2 for x64-based Systems

Windows 10 Version 21H2 for ARM64-based Systems

Windows 10 Version 21H2 for 32-bit Systems

Windows 11 version 21H2 for ARM64-based Systems

Windows 11 version 21H2 for x64-based Systems

Windows 10 Version 20H2 for ARM64-based Systems

Windows 10 Version 20H2 for 32-bit Systems

Windows 10 Version 20H2 for x64-based Systems

Windows Server 2022 (Server Core installation)

Windows Server 2022

Windows Server 2019 (Server Core installation)

Windows Server 2019

Windows 10 Version 1809 for ARM64-based Systems

Windows 10 Version 1809 for x64-based Systems

Windows 10 Version 1809 for 32-bit Systems


2月安全公告列表,包含的其他漏洞快速阅读指引(非全部):

https://msrc.microsoft.com/update-guide/releaseNote/2023-Feb

CVE-2023-21808 | .NET 和 Visual Studio 远程代码执行漏洞

CVE-2023-21722 | .NET 拒绝服务漏洞

CVE-2023-23378 | Print 3D 远程代码执行漏洞

CVE-2023-23390 | 3D Builder 远程代码执行洞

CVE-2023-23377 | 3D Builder 远程代码执行漏洞

CVE-2023-21777 | Azure Stack Hub 上的 Azure App Service 特权提升漏洞

CVE-2023-21703 | Azure Data Box Gateway远程代码执行漏洞

CVE-2023-21553 | Azure DevOps Server远程代码执行漏洞

CVE-2023-21564 | Azure DevOps Server跨站点脚本漏洞

CVE-2023-23382 | Azure Machine Learning Compute Instance信息泄露漏洞

CVE-2019-15126 | MITRE:CVE-2019-15126 特定定时和手工制作的流量可能会导致 WLAN 设备中的内部错误(与状态转换相关)

CVE-2023-21697 | Windows Internet 存储名称服务 (iSNS) 服务器信息泄露漏洞

CVE-2023-21699 | Windows Internet 存储名称服务 (iSNS) 服务器信息泄露漏洞

CVE-2023-23379 | Microsoft Defender for IoT 特权提升漏洞

CVE-2023-21778 | Microsoft Dynamics Unified Service Desk远程代码执行漏洞

CVE-2023-21570 | Microsoft Dynamics 365 (本地) 跨站点脚本漏洞

CVE-2023-21571 | Microsoft Dynamics 365 (本地) 跨站点脚本漏洞

CVE-2023-21572 | Microsoft Dynamics 365 (本地) 跨站点脚本漏洞

CVE-2023-21573 | Microsoft Dynamics 365 (本地) 跨站点脚本漏洞

CVE-2023-21807 | Microsoft Dynamics 365 (本地) 跨站点脚本漏洞

CVE-2023-21720 | Microsoft Edge (Chromium-based) 篡改漏洞

CVE-2023-21794 | Microsoft Edge (Chromium-based) 欺骗漏洞

CVE-2023-23374 | Microsoft Edge(Chromium-based)远程代码执行漏洞

CVE-2023-21707 | Microsoft Exchange Server 远程代码执行漏洞

CVE-2023-21529 | Microsoft Exchange Server 远程代码执行漏洞

CVE-2023-21706 | Microsoft Exchange Server 远程代码执行漏洞

CVE-2023-21710 | Microsoft Exchange Server 远程代码执行漏洞

CVE-2023-21804 | Windows Graphics Component特权提升漏洞

CVE-2023-21823 | Windows Graphics Component特权提升漏洞

CVE-2023-21809 | Microsoft Defender for Endpoint Security 功能绕过漏洞

CVE-2023-21714 | Microsoft Office信息泄露漏洞

CVE-2023-21721 | Microsoft OneNote 欺骗漏洞

CVE-2023-21715 | Microsoft Office安全功能绕过漏洞

CVE-2023-21717 | Microsoft SharePoint Server 特权提升漏洞

CVE-2023-21716 | Microsoft Word 远程代码执行漏洞

CVE-2023-21801 | Microsoft PostScript Printer Driver远程代码执行漏洞

CVE-2023-21684 | Microsoft PostScript Printer Driver远程代码执行漏洞

CVE-2023-21693 | Microsoft PostScript Printer Driver信息泄露漏洞

CVE-2023-21685 | Microsoft WDAC OLE DB provider for SQL Server 远程代码执行漏洞

CVE-2023-21686 | Microsoft WDAC OLE DB provider for SQL Server 远程代码执行漏洞

CVE-2023-21799 | Microsoft WDAC OLE DB provider for SQL Server 远程代码执行漏洞

CVE-2023-21802 | Windows Media 远程代码执行漏洞

CVE-2023-21806 | Power BI Report Server欺骗漏洞

CVE-2023-21713 | Microsoft SQL Server 远程代码执行漏洞

CVE-2023-21528 | Microsoft SQL Server 远程代码执行漏洞

CVE-2023-21704 | Microsoft ODBC 驱动程序 SQL Server 远程代码执行漏洞

CVE-2023-21705 | Microsoft SQL Server 远程代码执行漏洞

CVE-2023-21718 | Microsoft SQL ODBC 驱动程序远程代码执行漏洞

CVE-2023-21568 | Microsoft SQL Server Integration Service (VS extension) 远程代码执行漏洞

CVE-2023-23381 | Visual Studio Code 远程代码执行漏洞

CVE-2023-21566 | Visual Studio 特权提升漏洞

CVE-2023-21567 | Visual Studio 拒绝服务漏洞

CVE-2023-21815 | Visual Studio 远程代码执行漏洞

CVE-2023-21688 | NT OS Kernel特权提升漏洞

CVE-2023-21812 | Windows Common Log File System Driver特权提升漏洞

CVE-2023-23376 | Windows Common Log File System Driver特权提升漏洞

CVE-2023-21820 | Windows 分布式文件系统 (DFS) 远程代码执行漏洞

CVE-2023-21694 | Windows Fax Service远程代码执行漏洞

CVE-2023-21687 | HTTP.sys 信息泄露漏洞

CVE-2023-21800 | Windows 安装程序特权提升漏洞

CVE-2023-21803 | Windows iSCSI 发现服务远程代码执行漏洞

CVE-2023-21700 | Windows iSCSI 发现服务拒绝服务漏洞

CVE-2023-21817 | Windows Kerberos 特权提升漏洞

CVE-2023-21805 | Windows MSHTML 平台远程代码执行漏洞

CVE-2023-21798 | Microsoft ODBC Driver远程代码执行漏洞

CVE-2023-21797 | Microsoft ODBC Driver远程代码执行漏洞

CVE-2023-21695 | Microsoft Microsoft Protected Extensible Authentication Protocol (PEAP)远程代码执行漏洞

CVE-2023-21691 | Microsoft Protected Extensible Authentication Protocol (PEAP)信息泄露漏洞

CVE-2023-21690 | Microsoft Protected Extensible Authentication Protocol (PEAP)远程代码执行漏洞

CVE-2023-21689 | Microsoft Protected Extensible Authentication Protocol (PEAP)远程代码执行漏洞

CVE-2023-21692 | Microsoft Protected Extensible Authentication Protocol (PEAP)远程代码执行漏洞

CVE-2023-21822 | Windows Graphics Component 特权提升漏洞


漏洞描述


Microsoft Office安全功能绕过漏洞(CVE-2023-21715):
细节是否公开 POC状态
EXP状态 在野利用
未公开 未公开 已发现



Microsoft Office安全功能绕过漏洞(CVE-2023-21715),攻击者可通过构造特定的文件来利用这个漏洞,成功利用此漏洞可使被下载的文件绕过文件安全保护功能。


Windows Graphics Component权限提升漏洞(CVE-2023-21823):
细节是否公开 POC状态
EXP状态 在野利用
未公开 未公开 已发现

Windows Graphics Component权限提升漏洞(CVE-2023-21823),本地攻击者可通过在目标系统上运行恶意程序来利用此漏洞,成功利用此漏洞可在目标系统上以SYSTEM权限执行任意代码。


Windows Common Log File System Driver权限提升漏洞(CVE-2023-23376):
细节是否公开 POC状态
EXP状态 在野利用
未公开 未公开 已发现

Windows Common Log File System Driver权限提升漏洞(CVE-2023-23376),本地攻击者可通过在目标系统上运行恶意程序来利用此漏洞,成功利用此漏洞可在目标系统上以SYSTEM权限执行任意代码。


Microsoft Exchange Server远程代码执行漏洞(CVE-2023-21529):

细节是否公开 POC状态
EXP状态 在野利用
未公开 未公开 未发现
Microsoft Exchange Server远程代码执行漏洞(CVE-2023-21529),经过身份验证的攻击者可以通过诱使用户访问特制的服务器共享或网站来利用此漏洞,成功利用此漏洞的攻击者可以执行任意代码。

NT OS Kernel权限提升漏洞(CVE-2023-21688):

细节是否公开 POC状态
EXP状态 在野利用
未公开 未公开 未发现

NT OS Kernel权限提升漏洞(CVE-2023-21688),本地攻击者可通过在目标系统上运行恶意程序来利用此漏洞,成功利用此漏洞可在目标系统上以SYSTEM权限执行任意代码。

Microsoft Protected Extensible Authentication Protocol (PEAP)远程代码执行漏洞(CVE-2023-21689):

细节是否公开 POC状态
EXP状态 在野利用
未公开 未公开 未发现

Microsoft Protected Extensible Authentication Protocol (PEAP)远程代码执行漏洞(CVE-2023-21689),远程攻击者可以通过诱使用户访问特制的服务器共享或网站来利用此漏洞,成功利用此漏洞的攻击者可以执行任意代码。

Microsoft Protected Extensible Authentication Protocol (PEAP)远程代码执行漏洞(CVE-2023-21690):

细节是否公开 POC状态
EXP状态 在野利用
未公开 未公开 未发现

Microsoft Protected Extensible Authentication Protocol (PEAP)远程代码执行漏洞(CVE-2023-21690),未经身份验证的攻击者可通过网络发送特制的恶意 PEAP数据包来攻击Microsoft Protected Extensible Authentication Protocol (PEAP) 服务器。

Microsoft Protected Extensible Authentication Protocol (PEAP)远程代码执行漏洞(CVE-2023-21692):

细节是否公开 POC状态
EXP状态 在野利用
未公开 未公开 未发现

Microsoft Protected Extensible Authentication Protocol (PEAP)远程代码执行漏洞(CVE-2023-21692),未经身份验证的攻击者可通过网络发送特制的恶意 PEAP数据包来攻击Microsoft Protected Extensible Authentication Protocol (PEAP) 服务器。

Microsoft Exchange Server远程代码执行漏洞(CVE-2023-21706):

细节是否公开 POC状态
EXP状态 在野利用
未公开 未公开 未发现

Microsoft Exchange Server远程代码执行漏洞(CVE-2023-21706),经过身份验证的攻击者可以通过诱使用户访问特制的服务器共享或网站来利用此漏洞,成功利用此漏洞的攻击者可以执行任意代码。

Windows Common Log File System Driver权限提升漏洞(CVE-2023-21812):

细节是否公开 POC状态
EXP状态 在野利用
未公开 未公开 未发现

Windows Common Log File System Driver权限提升漏洞(CVE-2023-21812),本地攻击者可通过在目标系统上运行恶意程序来利用此漏洞,成功利用此漏洞可在目标系统上以SYSTEM权限执行任意代码。

Windows Secure Channel拒绝服务漏洞(CVE-2023-21818):

细节是否公开 POC状态
EXP状态 在野利用
未公开 未公开 未发现

Windows Secure Channel拒绝服务漏洞(CVE-2023-21818),成功利用该漏洞可导致操作系统停止响应。

Windows Secure Channel拒绝服务漏洞(CVE-2023-21819):

细节是否公开 POC状态
EXP状态 在野利用
未公开 未公开 未发现
Windows Secure Channel拒绝服务漏洞(CVE-2023-21819),成功利用该漏洞可导致操作系统停止响应。




缓解措施


高危:目前漏洞细节虽未公开,但是恶意攻击者可以通过补丁对比方式分析出漏洞触发点,并进一步开发漏洞利用代码,Microsoft已发布相关安全更新,鉴于漏洞的严重性,建议受影响的用户尽快修复。安恒信息将在产品的例行更新中加入相关攻击检测和防护能力。

(一)Windows 更新:

自动更新:

Microsoft Update默认启用,当系统检测到可用更新时,将会自动下载更新并在下一次启动时安装。

手动更新:

1、点击“开始菜单”或按Windows快捷键,点击进入“设置”

2、选择“更新和安全”,进入“Windows更新”(Windows 8、Windows 8.1、Windows Server 2012以及Windows Server 2012 R2可通过控制面板进入“Windows更新”,具体步骤为“控制面板”->“系统和安全”->“Windows更新”)

3、选择“检查更新”,等待系统将自动检查并下载可用更新。

4、重启计算机,安装更新系统重新启动后,可通过进入“Windows更新”->“查看更新历史记录”查看是否成功安装了更新。

(二)目前微软针对支持的产品已发布升级补丁修复了上述漏洞,请用户参考官方通告及时下载更新补丁。

补丁获取:

https://msrc.microsoft.com/update-guide/vulnerability

Microsoft Protected Extensible Authentication Protocol (PEAP)远程代码执行漏洞(CVE-2023-21689、CVE-2023-21690、CVE-2023-21692)临时缓解措施:

Microsoft Protected Extensible Authentication Protocol (PEAP)仅当NPS在Windows Server上运行并且配置了允许PEAP的网络策略时与客户端协商。如果PEAP类型未在其网络策略中配置为允许的EAP类型,则系统不受影响。



安恒信息CERT

2023年2月


原文始发于微信公众号(安恒信息CERT):微软2月安全更新补丁和多个高危漏洞风险提示

  • 左青龙
  • 微信扫一扫
  • weinxin
  • 右白虎
  • 微信扫一扫
  • weinxin
admin
  • 本文由 发表于 2023年2月16日20:27:40
  • 转载请保留本文链接(CN-SEC中文网:感谢原作者辛苦付出):
                   微软2月安全更新补丁和多个高危漏洞风险提示https://cn-sec.com/archives/1554107.html

发表评论

匿名网友 填写信息