VERT Threat Alert: April 2023 Patch Tuesday Analysis

Tag

CVE Count

CVEs

Microsoft PostScript Printer Driver

1

CVE-2023-28243

Windows RPC API

3

CVE-2023-21727, CVE-2023-21729, CVE-2023-28297

Windows Secure Socket Tunneling Protocol (SSTP)

1

CVE-2023-28241

Windows Error Reporting

1

CVE-2023-28221

Microsoft Office Word

1

CVE-2023-28311

Windows Transport Security Layer (TLS)

1

CVE-2023-28234

Microsoft Printer Drivers

11

CVE-2023-24924, CVE-2023-24883, CVE-2023-24925, CVE-2023-24884, CVE-2023-24926, CVE-2023-24885, CVE-2023-24927, CVE-2023-24886, CVE-2023-24928, CVE-2023-24887, CVE-2023-24929

Windows Group Policy

1

CVE-2023-28276

Azure Machine Learning

1

CVE-2023-28312

Windows Netlogon

1

CVE-2023-28268

Microsoft Dynamics

2

CVE-2023-28309, CVE-2023-28314

Microsoft Graphics Component

1

CVE-2023-24912

Windows Enroll Engine

1

CVE-2023-28226

Windows Network File System

1

CVE-2023-28247

Microsoft Office SharePoint

1

CVE-2023-28288

Windows PGM

1

CVE-2023-28250

Azure Service Connector

1

CVE-2023-28300

Visual Studio Code

1

CVE-2023-24893

SQL Server

3

CVE-2023-23384, CVE-2023-23375, CVE-2023-28304

Windows Network Load Balancing

1

CVE-2023-28240

Windows Secure Channel

2

CVE-2023-24931, CVE-2023-28233

Windows Ancillary Function Driver for WinSock

1

CVE-2023-28218

Windows Lock Screen

2

CVE-2023-28235, CVE-2023-28270

Windows Kernel

8

CVE-2023-28222, CVE-2023-28298, CVE-2023-28237, CVE-2023-28248, CVE-2023-28271, CVE-2023-28272, CVE-2023-28253, CVE-2023-28293

Microsoft Bluetooth Driver

1

CVE-2023-28227

Windows Clip Service

1

CVE-2023-28273

Windows Point-to-Point Tunneling Protocol

1

CVE-2023-28232

Microsoft Office

1

CVE-2023-28285

Windows Registry

1

CVE-2023-28246

Windows NTLM

1

CVE-2023-28225

Windows Active Directory

1

CVE-2023-28302

Windows Network Address Translation (NAT)

1

CVE-2023-28217

Windows Layer 2 Tunneling Protocol

2

CVE-2023-28219, CVE-2023-28220

Microsoft WDAC OLE DB provider for SQL

1

CVE-2023-28275

Windows CNG Key Isolation Service

1

CVE-2023-28229

Windows Boot Manager

2

CVE-2023-28269, CVE-2023-28249

Windows Raw Image Extension

2

CVE-2023-28291, CVE-2023-28292

Windows Win32K

2

CVE-2023-24914, CVE-2023-28274

Microsoft Dynamics 365 Customer Voice

1

CVE-2023-28313

.NET Core

1

CVE-2023-28260

Windows Kerberos

1

CVE-2023-28244

Microsoft Message Queuing

2

CVE-2023-21769, CVE-2023-21554

Microsoft Office Publisher

2

CVE-2023-28287, CVE-2023-28295

Microsoft Windows DNS

10

CVE-2023-28305, CVE-2023-28223, CVE-2023-28254, CVE-2023-28277, CVE-2023-28255, CVE-2023-28278, CVE-2023-28256, CVE-2023-28306, CVE-2023-28307, CVE-2023-28308

Windows DHCP Server

1

CVE-2023-28231

Windows Point-to-Point Protocol over Ethernet (PPPoE)

1

CVE-2023-28224

Microsoft Defender for Endpoint

1

CVE-2023-24860

Microsoft Edge (Chromium-based)

17

CVE-2023-1810, CVE-2023-1811, CVE-2023-1812, CVE-2023-1813, CVE-2023-1814, CVE-2023-1815, CVE-2023-1816, CVE-2023-1817, CVE-2023-1818, CVE-2023-1819, CVE-2023-1820, CVE-2023-1821, CVE-2023-1822, CVE-2023-1823, CVE-2023-28284, CVE-2023-24935, CVE-2023-28301

Windows ALPC

2

CVE-2023-28216, CVE-2023-28236

Visual Studio

4

CVE-2023-28262, CVE-2023-28263, CVE-2023-28296, CVE-2023-28299

Windows RDP Client

2

CVE-2023-28228, CVE-2023-28267

Windows Internet Key Exchange (IKE) Protocol

1

CVE-2023-28238

Windows Common Log File System Driver

2

CVE-2023-28266, CVE-2023-28252