查看原文
其他

CNNVD关于微软多个安全漏洞的通报

CNNVD CNNVD安全动态 2023-01-14


    近日,微软官方发布了多个安全漏洞的公告,其中微软产品本身漏洞101个,影响到微软产品的其他厂商漏洞0个。包括Microsoft Windows Local Security Authority Subsystem Service 安全漏洞(CNNVD-202301-725、CVE-2023-21524)、Microsoft Windows iSCSI 安全漏洞(CNNVD-202301-810、CVE-2023-21527)等多个漏洞。成功利用上述漏洞的攻击者可以在目标系统上执行任意代码、获取用户数据,提升权限等。微软多个产品和系统受漏洞影响。目前,微软官方已经发布了漏洞修复补丁,建议用户及时确认是否受到漏洞影响,尽快采取修补措施。

一、 漏洞介绍

    2023年1月10日,微软发布了2023年1月份安全更新,共101个漏洞的补丁程序,CNNVD对这些漏洞进行了收录。本次更新主要涵盖了Microsoft Windows 和 Windows 组件、Microsoft Windows Authentication Methods、Microsoft Lightweight Directory Access Protocol、Microsoft Windows Management Instrumentation、Microsoft Windows Local Security Authority Subsystem Service、Microsoft OLE DB Provider for SQL Server等。CNNVD对其危害等级进行了评价,其中超危漏洞1个,高危漏洞85个,中危漏洞14个,低危漏洞1个。微软多个产品和系统版本受漏洞影响,具体影响范围可访问
https://portal.msrc.microsoft.com/zh-cn/security-guidance查询。

二、漏洞详情

    此次更新共包括98个新增漏洞的补丁程序,其中高危漏洞84个,中危漏洞13个,低危漏洞1个。

序号

漏洞名称

CNNVD编号

CVE编号

危害等级

官方链接

1

Microsoft Windows Local Security Authority  Subsystem Service 安全漏洞

CNNVD-202301-725

CVE-2023-21524

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21524

2

Microsoft Windows iSCSI 安全漏洞

CNNVD-202301-810

CVE-2023-21527

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21527

3

Microsoft Azure 安全漏洞

CNNVD-202301-813

CVE-2023-21531

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21531

4

Microsoft Graphics Component 安全漏洞

CNNVD-202301-726

CVE-2023-21532

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21532

5

Microsoft Windows Secure Socket Tunneling Protocol  安全漏洞

CNNVD-202301-731

CVE-2023-21535

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21535

6

Microsoft Message Queuing 安全漏洞

CNNVD-202301-814

CVE-2023-21537

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21537

7

Microsoft .NET Core 安全漏洞

CNNVD-202301-730

CVE-2023-21538

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21538

8

Microsoft Windows Authentication Methods 安全漏洞

CNNVD-202301-737

CVE-2023-21539

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21539

9

Microsoft Windows Task Scheduler 安全漏洞

CNNVD-202301-741

CVE-2023-21541

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21541

10

Microsoft Windows Installer 安全漏洞

CNNVD-202301-743

CVE-2023-21542

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21542

11

Microsoft Windows 安全漏洞

CNNVD-202301-750

CVE-2023-21543

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21543

12

Microsoft Windows 安全漏洞

CNNVD-202301-733

CVE-2023-21546

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21546

13

Microsoft Windows IKE Extension 安全漏洞

CNNVD-202301-736

CVE-2023-21547

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21547

14

Microsoft Windows Secure Socket Tunneling Protocol  安全漏洞

CNNVD-202301-748

CVE-2023-21548

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21548

15

Microsoft Windows Workstation 安全漏洞

CNNVD-202301-747

CVE-2023-21549

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21549

16

Microsoft Windows Cryptographic Services 安全漏洞

CNNVD-202301-753

CVE-2023-21551

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21551

17

Microsoft Graphics Component 安全漏洞

CNNVD-202301-755

CVE-2023-21552

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21552

18

Microsoft Windows 安全漏洞

CNNVD-202301-763

CVE-2023-21555

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21555

19

Microsoft Windows 安全漏洞

CNNVD-202301-757

CVE-2023-21556

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21556

20

Microsoft Lightweight Directory Access Protocol 安全漏洞

CNNVD-202301-758

CVE-2023-21557

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21557

21

Microsoft Windows Error Reporting 安全漏洞

CNNVD-202301-762

CVE-2023-21558

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21558

22

Microsoft Cryptographic 安全漏洞

CNNVD-202301-768

CVE-2023-21561

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21561

23

Microsoft Windows ALPC 安全漏洞

CNNVD-202301-771

CVE-2023-21674

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21674

24

Microsoft Windows 安全漏洞

CNNVD-202301-787

CVE-2023-21675

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21675

25

Microsoft Lightweight Directory Access Protocol 安全漏洞

CNNVD-202301-773

CVE-2023-21676

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21676

26

Microsoft Windows IKE Extension 安全漏洞

CNNVD-202301-776

CVE-2023-21677

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21677

27

Microsoft Windows Print Spooler Components 安全漏洞

CNNVD-202301-777

CVE-2023-21678

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21678

28

Microsoft Windows 安全漏洞

CNNVD-202301-780

CVE-2023-21679

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21679

29

Microsoft Graphics Component 安全漏洞

CNNVD-202301-782

CVE-2023-21680

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21680

30

Microsoft OLE DB Provider for SQL Server 安全漏洞

CNNVD-202301-784

CVE-2023-21681

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21681

31

Microsoft Windows 安全漏洞

CNNVD-202301-783

CVE-2023-21683

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21683

32

Microsoft DWM Core Library 安全漏洞

CNNVD-202301-781

CVE-2023-21724

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21724

33

Microsoft Windows Credential Manager 安全漏洞

CNNVD-202301-779

CVE-2023-21726

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21726

34

Microsoft Local Security Authority Server (lsasrv)  安全漏洞

CNNVD-202301-774

CVE-2023-21728

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21728

35

Microsoft Cryptographic 安全漏洞

CNNVD-202301-775

CVE-2023-21730

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21730

36

Microsoft ODBC Driver 安全漏洞

CNNVD-202301-770

CVE-2023-21732

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21732

37

Microsoft Windows Bind Filter Driver 安全漏洞

CNNVD-202301-769

CVE-2023-21733

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21733

38

Microsoft Office 安全漏洞

CNNVD-202301-766

CVE-2023-21734

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21734

39

Microsoft Office 安全漏洞

CNNVD-202301-764

CVE-2023-21735

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21735

40

Microsoft Office Visio 安全漏洞

CNNVD-202301-761

CVE-2023-21736

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21736

41

Microsoft Office Visio 安全漏洞

CNNVD-202301-759

CVE-2023-21737

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21737

42

Microsoft Office Visio 安全漏洞

CNNVD-202301-760

CVE-2023-21738

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21738

43

Microsoft Bluetooth Driver 安全漏洞

CNNVD-202301-756

CVE-2023-21739

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21739

44

Microsoft Office Visio 安全漏洞

CNNVD-202301-754

CVE-2023-21741

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21741

45

Microsoft SharePoint 安全漏洞

CNNVD-202301-752

CVE-2023-21742

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21742

46

Microsoft SharePoint 安全漏洞

CNNVD-202301-746

CVE-2023-21744

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21744

47

Microsoft Exchange Server 安全漏洞

CNNVD-202301-745

CVE-2023-21745

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21745

48

Microsoft Windows NTLM 安全漏洞

CNNVD-202301-744

CVE-2023-21746

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21746

49

Microsoft Windows Virtual Registry Provider 安全漏洞

CNNVD-202301-742

CVE-2023-21747

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21747

50

Microsoft Windows Virtual Registry Provider 安全漏洞

CNNVD-202301-739

CVE-2023-21748

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21748

51

Microsoft Windows Virtual Registry Provider 安全漏洞

CNNVD-202301-738

CVE-2023-21749

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21749

52

Microsoft Windows 安全漏洞

CNNVD-202301-735

CVE-2023-21750

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21750

53

Microsoft Windows 安全漏洞

CNNVD-202301-734

CVE-2023-21752

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21752

54

Microsoft Windows Management Instrumentation 安全漏洞

CNNVD-202301-729

CVE-2023-21754

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21754

55

Microsoft Windows Kernel 安全漏洞

CNNVD-202301-728

CVE-2023-21755

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21755

56

Microsoft Windows 安全漏洞

CNNVD-202301-727

CVE-2023-21757

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21757

57

Microsoft Windows IKE Extension 安全漏洞

CNNVD-202301-724

CVE-2023-21758

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21758

58

Microsoft Windows Print Spooler Components 安全漏洞

CNNVD-202301-722

CVE-2023-21760

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21760

59

Microsoft Exchange Server 安全漏洞

CNNVD-202301-721

CVE-2023-21761

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21761

60

Microsoft Exchange Server 安全漏洞

CNNVD-202301-720

CVE-2023-21762

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21762

61

Microsoft Exchange Server 安全漏洞

CNNVD-202301-719

CVE-2023-21763

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21763

62

Microsoft Exchange Server 安全漏洞

CNNVD-202301-718

CVE-2023-21764

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21764

63

Microsoft Windows Print Spooler Components 安全漏洞

CNNVD-202301-717

CVE-2023-21765

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21765

64

Microsoft Windows Overlay Filter 安全漏洞

CNNVD-202301-715

CVE-2023-21767

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21767

65

Microsoft Windows Ancillary Function Driver for  WinSock 安全漏洞

CNNVD-202301-714

CVE-2023-21768

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21768

66

Microsoft Windows Local Session Manager (LSM) 安全漏洞

CNNVD-202301-713

CVE-2023-21771

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21771

67

Microsoft Windows Virtual Registry Provider 安全漏洞

CNNVD-202301-712

CVE-2023-21772

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21772

68

Microsoft Windows Virtual Registry Provider 安全漏洞

CNNVD-202301-710

CVE-2023-21773

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21773

69

Microsoft Windows Virtual Registry Provider 安全漏洞

CNNVD-202301-711

CVE-2023-21774

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21774

70

Microsoft Visual Studio Code 安全漏洞

CNNVD-202301-708

CVE-2023-21779

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21779

71

Microsoft 3D Builder 安全漏洞

CNNVD-202301-707

CVE-2023-21780

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21780

72

Microsoft 3D Builder 安全漏洞

CNNVD-202301-706

CVE-2023-21781

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21781

73

Microsoft 3D Builder 安全漏洞

CNNVD-202301-705

CVE-2023-21782

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21782

74

Microsoft 3D Builder 安全漏洞

CNNVD-202301-704

CVE-2023-21783

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21783

75

Microsoft 3D Builder 安全漏洞

CNNVD-202301-703

CVE-2023-21784

高危

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21784

76

Microsoft 3D Builder 安全漏洞

CNNVD-202301-702

CVE-2023-21785

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21785

77

Microsoft 3D Builder 安全漏洞

CNNVD-202301-701

CVE-2023-21786

高危

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21786

78

Microsoft 3D Builder 安全漏洞

CNNVD-202301-699

CVE-2023-21787

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21787

79

Microsoft 3D Builder 安全漏洞

CNNVD-202301-700

CVE-2023-21788

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21788

80

Microsoft 3D Builder 安全漏洞

CNNVD-202301-698

CVE-2023-21789

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21789

81

Microsoft 3D Builder 安全漏洞

CNNVD-202301-697

CVE-2023-21790

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21790

82

Microsoft 3D Builder 安全漏洞

CNNVD-202301-696

CVE-2023-21791

高危

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21791

83

Microsoft 3D Builder 安全漏洞

CNNVD-202301-695

CVE-2023-21792

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21792

84

Microsoft 3D Builder 安全漏洞

CNNVD-202301-694

CVE-2023-21793

高危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21793

85

Microsoft Windows 安全漏洞

CNNVD-202301-811

CVE-2023-21525

中危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21525

86

Microsoft Windows Event Tracing 安全漏洞

CNNVD-202301-812

CVE-2023-21536

中危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21536

87

Microsoft Windows Cryptographic Services 安全漏洞

CNNVD-202301-740

CVE-2023-21540

中危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21540

88

Microsoft Windows Cryptographic Services 安全漏洞

CNNVD-202301-751

CVE-2023-21550

中危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21550

89

Microsoft Windows Cryptographic Services 安全漏洞

CNNVD-202301-765

CVE-2023-21559

中危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21559

90

Microsoft Windows Boot Manager 安全漏洞

CNNVD-202301-767

CVE-2023-21560

中危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21560

91

Microsoft Windows BitLocker 安全漏洞

CNNVD-202301-772

CVE-2023-21563

中危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21563

92

Microsoft Windows Point-to-Point Tunneling  Protocol 安全漏洞

CNNVD-202301-785

CVE-2023-21682

中危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21682

93

Microsoft Windows Malicious Software Removal Tool 安全漏洞

CNNVD-202301-778

CVE-2023-21725

中危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21725

94

Microsoft SharePoint 安全漏洞

CNNVD-202301-749

CVE-2023-21743

中危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21743

95

Microsoft Windows Kernel 安全漏洞

CNNVD-202301-732

CVE-2023-21753

中危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21753

96

Microsoft Windows Overlay Filter 安全漏洞

CNNVD-202301-716

CVE-2023-21766

中危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21766

97

Microsoft Windows Virtual Registry Provider 安全漏洞

CNNVD-202301-709

CVE-2023-21776

中危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21776

98

Microsoft Windows Smart Card 安全漏洞

CNNVD-202301-723

CVE-2023-21759

低危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21759

    此次更新共包括3个更新漏洞的补丁程序,其中超危漏洞1个,高危漏洞1个,中危漏洞1个。

序号

漏洞名称

CNNVD编号

CVE编号

危害等级

官方链接

1

Microsoft Graphics Component 安全漏洞

CNNVD-202212-3050

CVE-2022-47211

超危

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-47211

2

Microsoft Graphics Component 安全漏洞

CNNVD-202211-2255

CVE-2022-41113

高危

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41113

3

Microsoft Windows BitLocker 安全漏洞

CNNVD-202211-2254

CVE-2022-41099

中危

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41099


三、修复建议

    目前,微软官方已经发布补丁修复了上述漏洞,建议用户及时确认漏洞影响,尽快采取修补措施。微软官方补丁下载地址:
    https://msrc.microsoft.com/update-guide/en-us
    CNNVD将继续跟踪上述漏洞的相关情况,及时发布相关信息。如有需要,可与CNNVD联系。联系方式: cnnvdvul@itsec.gov.cn


您可能也对以下帖子感兴趣

文章有问题?点此查看未经处理的缓存