Microsoft March 2023 Patch Tuesday Fixes 80 Vulnerabilities

In March 2023 Patch Tuesday Releases, Microsoft addressed 80 CVEs, of which nine were rated as critical, including 2 Zero-day, 66 as important, and one as moderate. This count also includes two CVEs (CVE-2023-1017 and CVE-2023-1018 ) found in a third-party Trusted Platform Module (TPM2.0) Library. It is essential to use a vulnerability management tool often to check for vulnerabilities in your IT infrastructure.

This month’s Microsoft March 2023 Patch Tuesday security patches cover various products and versions, including Azure, Microsoft Edge (Chromium-based), Visual Studio, and various Windows components such as Windows Kernel, TPM, and Windows Win32K. The products affected include Microsoft Bluetooth Driver, Microsoft Graphics Component, and Office applications such as Excel, Outlook, and SharePoint. Additionally, vulnerabilities were identified in Windows services such as Windows Bluetooth Service, Windows Cryptographic Services, and Windows HTTP Protocol Stack, among others. Vulnerability Management Software can prevent such attacks from occurring.

Zero-day Vulnerabilities in Microsoft March 2023 Patch Tuesday

Microsoft March 2023 Patch Tuesday, fixed two zero-day vulnerabilities.

CVE-2023-23397 – Microsoft Outlook Elevation of Privilege Vulnerability could allow attackers to access the Net-NTLMv2 hash of a victim’s Windows account by sending a specially crafted email. The flaw, which is triggered automatically when the email is retrieved and processed by the email server, has been rated as critical by Microsoft. As a matter of fact, the company warned that STRONTIUM, a Russian state-sponsored hacking group, had already exploited the vulnerability to steal emails from targeted accounts. Nonetheless, CERT-UA, Microsoft Incident, and Microsoft Threat Intelligence reported the vulnerability.

CVE-2023-24880 – Windows SmartScreen Security Feature Bypass Vulnerability could be exploited to bypass the Windows Mark of the Web security warning. This vulnerability was a bypass to a previous zero-day, CVE-2022-44698, that was also exploited by Magniber and fixed by Microsoft in December. Although, it is found that the Magniber operation switched to using malformed authenticode signatures in MSI files to bypass the fix. Moreover, Microsoft says that the vulnerability was disclosed by researchers from Google’s Threat Analysis Group and Microsoft.

Critical Vulnerabilities Uncovered by Microsoft March 2023 Patch Tuesday

Tag	CVE Number	CVE Title	Max Severity
Microsoft Dynamics	CVE-2022-41127	Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability	Critical
Windows HTTP Protocol Stack	CVE-2023-23392	HTTP Protocol Stack Remote Code Execution Vulnerability	Critical
Microsoft Office Outlook	CVE-2023-23397	Microsoft Outlook Elevation of Privilege Vulnerability	Critical
Windows Remote Procedure Call	CVE-2023-21708	Remote Procedure Call Runtime Remote Code Execution Vulnerability	Critical
Remote Access Service Point-to-Point Tunneling Protocol	CVE-2023-23404	Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability	Critical
Role: Windows Hyper-V	CVE-2023-23411	Windows Hyper-V Denial of Service Vulnerability	Critical
Internet Control Message Protocol (ICMP)	CVE-2023-23415	Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability	Critical
Windows Cryptographic Services	CVE-2023-23416	Windows Cryptographic Services Remote Code Execution Vulnerability	Critical
Windows TPM	CVE-2023-1017	CERT/CC: CVE-2023-1017 TPM2.0 Module Library Elevation of Privilege Vulnerability	Critical
Windows TPM	CVE-2023-1018	CERT/CC: CVE-2023-1018 TPM2.0 Module Library Elevation of Privilege Vulnerability	Critical

Microsoft security bulletin summary for March 2023

This release includes security updates for the following products, features, and roles.

Azure
Internet Control Message Protocol (ICMP)
Microsoft Bluetooth Driver
Microsoft Graphics Component
Microsoft Office Excel
Microsoft Office Outlook
Microsoft Office SharePoint
Microsoft OneDrive
Microsoft Printer Drivers
Microsoft Windows Codecs Library
Remote Access Service Point-to-Point Tunneling Protocol
Role: DNS Server
Role: Windows Hyper-V
Visual Studio
Windows Accounts Control
Windows Bluetooth Service
Windows Central Resource Manager
Windows Cryptographic Services
Windows Defender
Windows HTTP Protocol Stack
Windows Kernel
Windows Partition Management Driver
Windows Point-to-Point Protocol over Ethernet (PPPoE)
Windows Remote Procedure Call
Windows Remote Procedure Call Runtime
Windows Resilient File System (ReFS)
Windows Secure Channel
Windows SmartScreen
Windows TPM
Windows Win32K

Microsoft March 2023 Patch Tuesday affected products:

Product: Microsoft Office.
CVE/Advisory: CVE-2023-24910 , CVE-2023-23391 , CVE-2023-23397 , CVE-2023-23399 , CVE-2023-23398 , CVE-2023-23396
Impact: Elevation of Privilege, Spoofing, Remote Code Execution and then Denial of Service

These were the highlights of Microsoft March 2023 Patch Tuesday.

However, SanerNow VM and SanerNow PM can detect and automatically fix these vulnerabilities by applying security updates. Therefore, use SanerNow and keep your systems updated and secure.

Share this article