Windows 10 20H2 Security Vulnerabilities - February 2023

CVE-2022-38396

HP Factory Preinstalled Images on certain systems that shipped with Windows 10 versions 20H2 and earlier OS versions might allow escalation of privilege via execution of certain files outside the restricted path. This potential vulnerability was remediated starting with Windows 10 versions 21H2 on ...

CVE-2023-1017

An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of service (crashing the TPM chip/process o...

CVE-2023-1018

An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can read or access sensitive data stored in the TPM.

CVE-2023-21684

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

CVE-2023-21685

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2023-21686

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2023-21688

NT OS Kernel Elevation of Privilege Vulnerability

CVE-2023-21689

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

CVE-2023-21690

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

CVE-2023-21691

Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability

CVE-2023-21692

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

CVE-2023-21693

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

CVE-2023-21694

Windows Fax Service Remote Code Execution Vulnerability

CVE-2023-21695

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

CVE-2023-21697

Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability

CVE-2023-21699

Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability

CVE-2023-21700

Windows iSCSI Discovery Service Denial of Service Vulnerability

CVE-2023-21701

Microsoft Protected Extensible Authentication Protocol (PEAP) Denial of Service Vulnerability

CVE-2023-21702

Windows iSCSI Service Denial of Service Vulnerability

CVE-2023-21797

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVE-2023-21798

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVE-2023-21799

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2023-21801

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

CVE-2023-21802

Windows Media Remote Code Execution Vulnerability

CVE-2023-21803

Windows iSCSI Discovery Service Remote Code Execution Vulnerability

CVE-2023-21804

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2023-21805

Windows MSHTML Platform Remote Code Execution Vulnerability

CVE-2023-21811

Windows iSCSI Service Denial of Service Vulnerability

CVE-2023-21812

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2023-21813

Windows Secure Channel Denial of Service Vulnerability

CVE-2023-21816

Windows Active Directory Domain Services API Denial of Service Vulnerability

CVE-2023-21817

Windows Kerberos Elevation of Privilege Vulnerability

CVE-2023-21818

Windows Secure Channel Denial of Service Vulnerability

CVE-2023-21819

Windows Secure Channel Denial of Service Vulnerability

CVE-2023-21820

Windows Distributed File System (DFS) Remote Code Execution Vulnerability

CVE-2023-21822

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2023-21823

Windows Graphics Component Remote Code Execution Vulnerability

CVE-2023-23376

Windows Common Log File System Driver Elevation of Privilege Vulnerability