Microsoft Patch Tuesday February: Fixes over 75 vulnerabilities

Microsoft released it Patch Tuesday for February 2023 correcting over 75 security vulnerabilities, which include all three zero-day bugsthat have been used in attacks.

Five of the others flaws which earned a 9.8 CVSS score are decidedly worse.

Those five aren’t being actively exploited, though, while three less severe ones are. 

The first vulnerability under active attack, spotted by Mandiant, is a remote code execution bug in the Windows Graphics Component that would allow a miscreant to execute commands with system-level permissions. 

The second is a bug in the Windows Common Log File System Driver and would allow an attacker to elevate their access to gain system privileges. Microsoft didn’t share any details about the issue, unfortunately, but with it under active exploitation it’s a good idea to install those patches. 

The third under active exploit is serious – it could allow an attacker to bypass Office macro security policies – but Microsoft’s own explanation of the vulnerability undermines its potential danger. 

The categories of bugs fixed with the February Patch Tuesday are as follows:

• 38 vulnerabilities that allow code to be executed remotely
• 12 vulnerabilities to gain more privileges
• 10 vulnerabilities for denial-of-service attacks
• 8 information disclosure vulnerabilities
• 8 spoofing vulnerabilities
• 2 vulnerabilities to bypass security features

icrosoft Patch Tuesday: All vulnerabilities fixed

In the table below, you can see all the vulnerabilities fixed this month: