Windows Server 2019 Security Vulnerabilities - February 2023

CVE-2023-1017

An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of service (crashing the TPM chip/process o...

CVE-2023-1018

An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can read or access sensitive data stored in the TPM.

CVE-2023-21684

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

CVE-2023-21685

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2023-21686

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2023-21688

NT OS Kernel Elevation of Privilege Vulnerability

CVE-2023-21689

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

CVE-2023-21690

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

CVE-2023-21691

Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability

CVE-2023-21692

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

CVE-2023-21693

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

CVE-2023-21694

Windows Fax Service Remote Code Execution Vulnerability

CVE-2023-21695

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

CVE-2023-21697

Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability

CVE-2023-21699

Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability

CVE-2023-21700

Windows iSCSI Discovery Service Denial of Service Vulnerability

CVE-2023-21701

Microsoft Protected Extensible Authentication Protocol (PEAP) Denial of Service Vulnerability

CVE-2023-21702

Windows iSCSI Service Denial of Service Vulnerability

CVE-2023-21797

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVE-2023-21798

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVE-2023-21799

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2023-21801

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

CVE-2023-21802

Windows Media Remote Code Execution Vulnerability

CVE-2023-21804

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2023-21805

Windows MSHTML Platform Remote Code Execution Vulnerability

CVE-2023-21811

Windows iSCSI Service Denial of Service Vulnerability

CVE-2023-21812

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2023-21813

Windows Secure Channel Denial of Service Vulnerability

CVE-2023-21816

Windows Active Directory Domain Services API Denial of Service Vulnerability

CVE-2023-21817

Windows Kerberos Elevation of Privilege Vulnerability

CVE-2023-21818

Windows Secure Channel Denial of Service Vulnerability

CVE-2023-21819

Windows Secure Channel Denial of Service Vulnerability

CVE-2023-21820

Windows Distributed File System (DFS) Remote Code Execution Vulnerability

CVE-2023-21822

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2023-21823

Windows Graphics Component Remote Code Execution Vulnerability

CVE-2023-23376

Windows Common Log File System Driver Elevation of Privilege Vulnerability