Windows Server 2022 23H2 Security Vulnerabilities - 2023

CVE-2023-20588

A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality.

CVE-2023-21740

Windows Media Remote Code Execution Vulnerability

CVE-2023-24023

Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 through 5.4 allow certain man-in-the-middle attacks that force a short key length, and might lead to discovery of the encryption key and live injection, aka BLUFFS.

CVE-2023-35622

Windows DNS Spoofing Vulnerability

CVE-2023-35628

Windows MSHTML Platform Remote Code Execution Vulnerability

CVE-2023-35630

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

CVE-2023-35631

Win32k Elevation of Privilege Vulnerability

CVE-2023-36403

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-36404

Windows Kernel Information Disclosure Vulnerability

CVE-2023-36405

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-36406

Windows Hyper-V Information Disclosure Vulnerability

CVE-2023-36407

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2023-36408

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2023-36424

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2023-36425

Windows Distributed File System (DFS) Remote Code Execution Vulnerability

CVE-2023-36427

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2023-36428

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

CVE-2023-36696

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2023-36705

Windows Installer Elevation of Privilege Vulnerability

CVE-2023-36719

Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability