关键词
漏洞
近日，微软官方发布了多个安全漏洞的公告，其中微软产品本身漏洞76个，影响到微软产品的其他厂商漏洞2个。包括Microsoft Windows 安全漏洞（CNNVD-202302-1085、CVE-2023-21689）、Microsoft Windows 安全漏洞（CNNVD-202302-1089、CVE-2023-21690）等多个漏洞。成功利用上述漏洞的攻击者可以在目标系统上执行任意代码、获取用户数据，提升权限等。微软多个产品和系统受漏洞影响。目前，微软官方已经发布了漏洞修复补丁，建议用户及时确认是否受到漏洞影响，尽快采取修补措施。
一、 漏洞介绍
2023年2月14日，微软发布了2023年2月份安全更新，共78个漏洞的补丁程序，CNNVD对这些漏洞进行了收录。本次更新主要涵盖了Microsoft Windows 和 Windows 组件、Microsoft Defender、Microsoft Word、Microsoft Windows Distributed File System (DFS)、Microsoft Azure Machine Learning、Microsoft Windows Cryptographic Services等。CNNVD对其危害等级进行了评价，其中超危漏洞6个，高危漏洞53个，中危漏洞18个。微软多个产品和系统版本受漏洞影响，具体影响范围可访问
https://portal.msrc.microsoft.com/zh-cn/security-guidance查询。
二、漏洞详情
此次更新共包括76个新增漏洞的补丁程序，其中超危漏洞5个，高危漏洞53个，中危漏洞18个。
|
序号 |
漏洞名称 |
CNNVD编号 |
CVE编号 |
危害等级 |
官方链接 |
|
1 |
Microsoft Windows 安全漏洞 |
CNNVD-202302-1085 |
CVE-2023-21689 |
超危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21689 |
|
2 |
Microsoft Windows 安全漏洞 |
CNNVD-202302-1089 |
CVE-2023-21690 |
超危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21690 |
|
3 |
Microsoft Windows 安全漏洞 |
CNNVD-202302-1091 |
CVE-2023-21692 |
超危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21692 |
|
4 |
Microsoft Word 安全漏洞 |
CNNVD-202302-1110 |
CVE-2023-21716 |
超危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21716 |
|
5 |
Microsoft Windows iSCSI 安全漏洞 |
CNNVD-202302-1123 |
CVE-2023-21803 |
超危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21803 |
|
6 |
Microsoft SQL Server 安全漏洞 |
CNNVD-202302-1074 |
CVE-2023-21528 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21528 |
|
7 |
Microsoft Exchange Server 安全漏洞 |
CNNVD-202302-1075 |
CVE-2023-21529 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21529 |
|
8 |
Microsoft Azure DevOps Server 安全漏洞 |
CNNVD-202302-1064 |
CVE-2023-21553 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21553 |
|
9 |
Microsoft Azure DevOps Server 安全漏洞 |
CNNVD-202302-1077 |
CVE-2023-21564 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21564 |
|
10 |
Microsoft Visual Studio 安全漏洞 |
CNNVD-202302-1065 |
CVE-2023-21566 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21566 |
|
11 |
Microsoft SQL Server 安全漏洞 |
CNNVD-202302-1076 |
CVE-2023-21568 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21568 |
|
12 |
Microsoft PostScript Printer Driver 安全漏洞 |
CNNVD-202302-1084 |
CVE-2023-21684 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21684 |
|
13 |
Microsoft WDAC OLE DB provider for SQL 安全漏洞 |
CNNVD-202302-1083 |
CVE-2023-21685 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21685 |
|
14 |
Microsoft WDAC OLE DB provider for SQL 安全漏洞 |
CNNVD-202302-1082 |
CVE-2023-21686 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21686 |
|
15 |
Microsoft Windows ALPC 安全漏洞 |
CNNVD-202302-1087 |
CVE-2023-21688 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21688 |
|
16 |
Microsoft Windows 安全漏洞 |
CNNVD-202302-1088 |
CVE-2023-21691 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21691 |
|
17 |
Microsoft Windows 安全漏洞 |
CNNVD-202302-1092 |
CVE-2023-21695 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21695 |
|
18 |
Microsoft Windows iSCSI 安全漏洞 |
CNNVD-202302-1097 |
CVE-2023-21700 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21700 |
|
19 |
Microsoft Windows Protected EAP 安全漏洞 |
CNNVD-202302-1096 |
CVE-2023-21701 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21701 |
|
20 |
Microsoft Windows iSCSI 安全漏洞 |
CNNVD-202302-1100 |
CVE-2023-21702 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21702 |
|
21 |
Microsoft ODBC Driver 安全漏洞 |
CNNVD-202302-1098 |
CVE-2023-21704 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21704 |
|
22 |
Microsoft SQL Server 安全漏洞 |
CNNVD-202302-1101 |
CVE-2023-21705 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21705 |
|
23 |
Microsoft Exchange Server 安全漏洞 |
CNNVD-202302-1102 |
CVE-2023-21706 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21706 |
|
24 |
Microsoft Exchange Server 安全漏洞 |
CNNVD-202302-1103 |
CVE-2023-21707 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21707 |
|
25 |
Microsoft Exchange Server 安全漏洞 |
CNNVD-202302-1105 |
CVE-2023-21710 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21710 |
|
26 |
Microsoft SQL Server 安全漏洞 |
CNNVD-202302-1104 |
CVE-2023-21713 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21713 |
|
27 |
Microsoft Publisher 安全漏洞 |
CNNVD-202302-1106 |
CVE-2023-21715 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21715 |
|
28 |
Microsoft SharePoint 安全漏洞 |
CNNVD-202302-1109 |
CVE-2023-21717 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21717 |
|
29 |
Microsoft SQL Server 安全漏洞 |
CNNVD-202302-1108 |
CVE-2023-21718 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21718 |
|
30 |
Microsoft Azure App Service 安全漏洞 |
CNNVD-202302-1113 |
CVE-2023-21777 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21777 |
|
31 |
Microsoft Dynamics 安全漏洞 |
CNNVD-202302-1066 |
CVE-2023-21778 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21778 |
|
32 |
Microsoft ODBC Driver 安全漏洞 |
CNNVD-202302-1112 |
CVE-2023-21797 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21797 |
|
33 |
Microsoft ODBC Driver 安全漏洞 |
CNNVD-202302-1116 |
CVE-2023-21798 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21798 |
|
34 |
Microsoft WDAC OLE DB provider for SQL 安全漏洞 |
CNNVD-202302-1118 |
CVE-2023-21799 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21799 |
|
35 |
Microsoft Windows Installer 安全漏洞 |
CNNVD-202302-1117 |
CVE-2023-21800 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21800 |
|
36 |
Microsoft PostScript Printer Driver 安全漏洞 |
CNNVD-202302-1115 |
CVE-2023-21801 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21801 |
|
37 |
Microsoft Windows Codecs Library 安全漏洞 |
CNNVD-202302-1125 |
CVE-2023-21802 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21802 |
|
38 |
Microsoft Graphics Component 安全漏洞 |
CNNVD-202302-1122 |
CVE-2023-21804 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21804 |
|
39 |
Microsoft Windows MSHTML Platform 安全漏洞 |
CNNVD-202302-1121 |
CVE-2023-21805 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21805 |
|
40 |
Microsoft Power BI 安全漏洞 |
CNNVD-202302-1119 |
CVE-2023-21806 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21806 |
|
41 |
Microsoft .NET and Visual Studio 安全漏洞 |
CNNVD-202302-1068 |
CVE-2023-21808 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21808 |
|
42 |
Microsoft Defender 安全漏洞 |
CNNVD-202302-1127 |
CVE-2023-21809 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21809 |
|
43 |
Microsoft Windows iSCSI 安全漏洞 |
CNNVD-202302-1142 |
CVE-2023-21811 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21811 |
|
44 |
Microsoft Windows Common Log File System Driver 安全漏洞 |
CNNVD-202302-1133 |
CVE-2023-21812 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21812 |
|
45 |
Microsoft Windows Cryptographic Services 安全漏洞 |
CNNVD-202302-1137 |
CVE-2023-21813 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21813 |
|
46 |
Microsoft Visual Studio 安全漏洞 |
CNNVD-202302-1067 |
CVE-2023-21815 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21815 |
|
47 |
Microsoft Windows Active Directory 安全漏洞 |
CNNVD-202302-1135 |
CVE-2023-21816 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21816 |
|
48 |
Microsoft Windows Kerberos 安全漏洞 |
CNNVD-202302-1132 |
CVE-2023-21817 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21817 |
|
49 |
Microsoft Windows SChannel 安全漏洞 |
CNNVD-202302-1130 |
CVE-2023-21818 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21818 |
|
50 |
Microsoft Windows Cryptographic Services 安全漏洞 |
CNNVD-202302-1129 |
CVE-2023-21819 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21819 |
|
51 |
Microsoft Windows Distributed File System (DFS) 安全漏洞 |
CNNVD-202302-1131 |
CVE-2023-21820 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21820 |
|
52 |
Microsoft Windows Win32k 安全漏洞 |
CNNVD-202302-1138 |
CVE-2023-21822 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21822 |
|
53 |
Microsoft Graphics Component 安全漏洞 |
CNNVD-202302-1070 |
CVE-2023-21823 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21823 |
|
54 |
Microsoft Windows Common Log File System Driver 安全漏洞 |
CNNVD-202302-1124 |
CVE-2023-23376 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23376 |
|
55 |
Microsoft 3D Builder 安全漏洞 |
CNNVD-202302-1126 |
CVE-2023-23377 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23377 |
|
56 |
Microsoft 3D Builder 安全漏洞 |
CNNVD-202302-1152 |
CVE-2023-23378 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23378 |
|
57 |
Visual Studio 安全漏洞 |
CNNVD-202302-1072 |
CVE-2023-23381 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23381 |
|
58 |
Microsoft 3D Builder 安全漏洞 |
CNNVD-202302-1120 |
CVE-2023-23390 |
高危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23390 |
|
59 |
Microsoft Visual Studio 安全漏洞 |
CNNVD-202302-1063 |
CVE-2023-21567 |
中危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21567 |
|
60 |
Microsoft Dynamics 安全漏洞 |
CNNVD-202302-1078 |
CVE-2023-21570 |
中危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21570 |
|
61 |
Microsoft Dynamics 安全漏洞 |
CNNVD-202302-1080 |
CVE-2023-21571 |
中危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21571 |
|
62 |
Microsoft Dynamics 安全漏洞 |
CNNVD-202302-1079 |
CVE-2023-21572 |
中危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21572 |
|
63 |
Microsoft Dynamics 安全漏洞 |
CNNVD-202302-1081 |
CVE-2023-21573 |
中危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21573 |
|
64 |
Microsoft Windows HTTP.sys 安全漏洞 |
CNNVD-202302-1086 |
CVE-2023-21687 |
中危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21687 |
|
65 |
Microsoft PostScript Printer Driver 安全漏洞 |
CNNVD-202302-1090 |
CVE-2023-21693 |
中危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21693 |
|
66 |
Microsoft Windows Fax and Scan Service 安全漏洞 |
CNNVD-202302-1093 |
CVE-2023-21694 |
中危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21694 |
|
67 |
Microsoft Internet Storage Name Service 安全漏洞 |
CNNVD-202302-1094 |
CVE-2023-21697 |
中危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21697 |
|
68 |
Microsoft Internet Storage Name Service 安全漏洞 |
CNNVD-202302-1095 |
CVE-2023-21699 |
中危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21699 |
|
69 |
Microsoft Azure Data Box Gateway 安全漏洞 |
CNNVD-202302-1099 |
CVE-2023-21703 |
中危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21703 |
|
70 |
Microsoft Office 安全漏洞 |
CNNVD-202302-1107 |
CVE-2023-21714 |
中危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21714 |
|
71 |
Microsoft Office OneNote 安全漏洞 |
CNNVD-202302-1111 |
CVE-2023-21721 |
中危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21721 |
|
72 |
Microsoft .NET Framework 安全漏洞 |
CNNVD-202302-1114 |
CVE-2023-21722 |
中危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21722 |
|
73 |
Microsoft Dynamics 365和Microsoft Dynamics 安全漏洞 |
CNNVD-202302-1128 |
CVE-2023-21807 |
中危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21807 |
|
74 |
Microsoft Defender 安全漏洞 |
CNNVD-202302-1141 |
CVE-2023-23379 |
中危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23379 |
|
75 |
Microsoft Azure Machine Learning 安全漏洞 |
CNNVD-202302-1140 |
CVE-2023-23382 |
中危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23382 |
|
76 |
Microsoft Visual Studio 安全漏洞 |
CNNVD-202302-1202 |
CVE-2023-41953 |
中危 |
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-41953 |
此次更新共包括2个影响微软产品的其他厂商漏洞的补丁程序，其中超危漏洞1个，低危漏洞1个。
|
序号 |
漏洞名称 |
CNNVD编号 |
CVE编号 |
危害等级 |
厂商 |
官方链接 |
|
1 |
Git 输入验证错误漏洞 |
CNNVD-202301-1326 |
CVE-2022-23521 |
超危 |
个人开发者 |
https://github.com/git/git/commit/508386c6c5857b4faa2c3e491f422c98cc69ae76 |
|
2 |
Broadcom WiFi Chipset Drivers 加密问题漏洞 |
CNNVD-202002-123 |
CVE-2019-15126 |
低危 |
Broadcom |
https://www.huawei.com/cn/psirt/security-notices/huawei-sn-20200228-01-kr00k-cn |
三、修复建议
目前，微软官方已经发布补丁修复了上述漏洞，建议用户及时确认漏洞影响，尽快采取修补措施。微软官方补丁下载地址：
https://msrc.microsoft.com/update-guide/en-us
END
阅读推荐
【安全圈】AMD 发布超频工具 Ryzen Master 2.10.1.2287 更新，修复提权漏洞
【安全圈】GoAnywhere MFT黑客攻击导致社区卫生系统数据泄露
安全圈
←扫码关注我们
网罗圈内热点 专注网络安全
实时资讯一手掌握！
好看你就分享 有用就点个赞
支持「安全圈」就点个三连吧！
- 左青龙
- 微信扫一扫
-
- 右白虎
- 微信扫一扫
-
评论