Microsoft Issues January 2023 Patch Tuesday Updates, Warns of Zero-Day Exploit

The first Patch Tuesday fixes shipped by Microsoft for 2023 have addressed a total of 98 security flaws, including one bug that the company said is being actively exploited in the wild. 11 of the 98 issues are rated Critical and 87 are rated Important in severity, with one of the vulnerabilities...

CVE-2023-21674

Windows Advanced Local Procedure Call ALPC Elevation of Privilege Vulnerability...

Privilege escalation

Windows Advanced Local Procedure Call ALPC Elevation of Privilege Vulnerability...

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

...

CVE-2023-21674 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

...

CVE-2023-21674 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

...

CVE-2023-21674

Windows Advanced Local Procedure Call ALPC Elevation of Privilege Vulnerability Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

EUVD-2023-25841

Windows Advanced Local Procedure Call ALPC Elevation of Privilege Vulnerability...

KB5022346: Windows 8.1 Embedded and Windows Server 2012 R2 Security Update (January 2023)

The remote Windows host is missing security update 5022346. It is, therefore, affected by multiple vulnerabilities - Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2023-21732 - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2023-21681 - Window...

KB5022289: Windows 10 Version 1607 and Windows Server 2016 Security Update (January 2023)

The remote Windows host is missing security update 5022289. It is, therefore, affected by multiple vulnerabilities - Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2023-21732 - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2023-21681 - Window...

CVE-2023-21674

CVE-2023-21674 affects Windows Advanced Local Procedure Call (ALPC). The documented root cause is an Elevation of Privilege in ALPC that could enable browser sandbox escape and gain SYSTEM privileges. Public exploits exist (Kaspersky notes exploitation in the wild; a GitHub PoC is referenced), in...

KLA20158 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, execute arbitrary code, bypass security restrictions, obtain sensitive information. Below is a complete list of...

Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability

Microsoft Windows Advanced Local Procedure Call ALPC contains an unspecified vulnerability that allows for privilege escalation...

CVE-2022-41100

Windows Advanced Local Procedure Call ALPC Elevation of Privilege Vulnerability...

CVE-2022-41093

Windows Advanced Local Procedure Call ALPC Elevation of Privilege Vulnerability...

CVE-2022-41045

Windows Advanced Local Procedure Call ALPC Elevation of Privilege Vulnerability...

Privilege escalation

Windows Advanced Local Procedure Call ALPC Elevation of Privilege Vulnerability...

Privilege escalation

Windows Advanced Local Procedure Call ALPC Elevation of Privilege Vulnerability...

Privilege escalation

Windows Advanced Local Procedure Call ALPC Elevation of Privilege Vulnerability...

CVE-2022-41093

Technical details for CVE-2022-41093 are not publicly available in the provided documents. No affected products, root cause, or fixes are described here. Monitor official advisories for updates on impact and remediation.