近日，微软官方发布了多个安全漏洞的公告，其中微软产品本身漏洞76个，影响到微软产品的其他厂商漏洞2个。包括Microsoft Windows 安全漏洞（CNNVD-202302-1085、CVE-2023-21689）、Microsoft Windows 安全漏洞（CNNVD-202302-1089、CVE-2023-21690）等多个漏洞。成功利用上述漏洞的攻击者可以在目标系统上执行任意代码、获取用户数据，提升权限等。微软多个产品和系统受漏洞影响。目前，微软官方已经发布了漏洞修复补丁，建议用户及时确认是否受到漏洞影响，尽快采取修补措施。
一、 漏洞介绍
2023年2月14日，微软发布了2023年2月份安全更新，共78个漏洞的补丁程序，CNNVD对这些漏洞进行了收录。本次更新主要涵盖了Microsoft Windows 和 Windows 组件、Microsoft Defender、Microsoft Word、Microsoft Windows Distributed File System (DFS)、Microsoft Azure Machine Learning、Microsoft Windows Cryptographic Services等。CNNVD对其危害等级进行了评价，其中超危漏洞6个，高危漏洞53个，中危漏洞18个。微软多个产品和系统版本受漏洞影响，具体影响范围可访问
https://portal.msrc.microsoft.com/zh-cn/security-guidance查询。
二、漏洞详情
此次更新共包括76个新增漏洞的补丁程序，其中超危漏洞5个，高危漏洞53个，中危漏洞18个。
序号 | 漏洞名称 | CNNVD编号 | CVE编号 | 危害等级 | 官方链接 |
1 | Microsoft Windows 安全漏洞 | CNNVD-202302-1085 | CVE-2023-21689 | 超危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21689 |
2 | Microsoft Windows 安全漏洞 | CNNVD-202302-1089 | CVE-2023-21690 | 超危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21690 |
3 | Microsoft Windows 安全漏洞 | CNNVD-202302-1091 | CVE-2023-21692 | 超危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21692 |
4 | Microsoft Word 安全漏洞 | CNNVD-202302-1110 | CVE-2023-21716 | 超危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21716 |
5 | Microsoft Windows iSCSI 安全漏洞 | CNNVD-202302-1123 | CVE-2023-21803 | 超危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21803 |
6 | Microsoft SQL Server 安全漏洞 | CNNVD-202302-1074 | CVE-2023-21528 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21528 |
7 | Microsoft Exchange Server 安全漏洞 | CNNVD-202302-1075 | CVE-2023-21529 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21529 |
8 | Microsoft Azure DevOps Server 安全漏洞 | CNNVD-202302-1064 | CVE-2023-21553 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21553 |
9 | Microsoft Azure DevOps Server 安全漏洞 | CNNVD-202302-1077 | CVE-2023-21564 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21564 |
10 | Microsoft Visual Studio 安全漏洞 | CNNVD-202302-1065 | CVE-2023-21566 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21566 |
11 | Microsoft SQL Server 安全漏洞 | CNNVD-202302-1076 | CVE-2023-21568 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21568 |
12 | Microsoft PostScript Printer Driver 安全漏洞 | CNNVD-202302-1084 | CVE-2023-21684 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21684 |
13 | Microsoft WDAC OLE DB provider for SQL 安全漏洞 | CNNVD-202302-1083 | CVE-2023-21685 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21685 |
14 | Microsoft WDAC OLE DB provider for SQL 安全漏洞 | CNNVD-202302-1082 | CVE-2023-21686 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21686 |
15 | Microsoft Windows ALPC 安全漏洞 | CNNVD-202302-1087 | CVE-2023-21688 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21688 |
16 | Microsoft Windows 安全漏洞 | CNNVD-202302-1088 | CVE-2023-21691 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21691 |
17 | Microsoft Windows 安全漏洞 | CNNVD-202302-1092 | CVE-2023-21695 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21695 |
18 | Microsoft Windows iSCSI 安全漏洞 | CNNVD-202302-1097 | CVE-2023-21700 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21700 |
19 | Microsoft Windows Protected EAP 安全漏洞 | CNNVD-202302-1096 | CVE-2023-21701 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21701 |
20 | Microsoft Windows iSCSI 安全漏洞 | CNNVD-202302-1100 | CVE-2023-21702 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21702 |
21 | Microsoft ODBC Driver 安全漏洞 | CNNVD-202302-1098 | CVE-2023-21704 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21704 |
22 | Microsoft SQL Server 安全漏洞 | CNNVD-202302-1101 | CVE-2023-21705 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21705 |
23 | Microsoft Exchange Server 安全漏洞 | CNNVD-202302-1102 | CVE-2023-21706 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21706 |
24 | Microsoft Exchange Server 安全漏洞 | CNNVD-202302-1103 | CVE-2023-21707 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21707 |
25 | Microsoft Exchange Server 安全漏洞 | CNNVD-202302-1105 | CVE-2023-21710 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21710 |
26 | Microsoft SQL Server 安全漏洞 | CNNVD-202302-1104 | CVE-2023-21713 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21713 |
27 | Microsoft Publisher 安全漏洞 | CNNVD-202302-1106 | CVE-2023-21715 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21715 |
28 | Microsoft SharePoint 安全漏洞 | CNNVD-202302-1109 | CVE-2023-21717 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21717 |
29 | Microsoft SQL Server 安全漏洞 | CNNVD-202302-1108 | CVE-2023-21718 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21718 |
30 | Microsoft Azure App Service 安全漏洞 | CNNVD-202302-1113 | CVE-2023-21777 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21777 |
31 | Microsoft Dynamics 安全漏洞 | CNNVD-202302-1066 | CVE-2023-21778 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21778 |
32 | Microsoft ODBC Driver 安全漏洞 | CNNVD-202302-1112 | CVE-2023-21797 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21797 |
33 | Microsoft ODBC Driver 安全漏洞 | CNNVD-202302-1116 | CVE-2023-21798 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21798 |
34 | Microsoft WDAC OLE DB provider for SQL 安全漏洞 | CNNVD-202302-1118 | CVE-2023-21799 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21799 |
35 | Microsoft Windows Installer 安全漏洞 | CNNVD-202302-1117 | CVE-2023-21800 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21800 |
36 | Microsoft PostScript Printer Driver 安全漏洞 | CNNVD-202302-1115 | CVE-2023-21801 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21801 |
37 | Microsoft Windows Codecs Library 安全漏洞 | CNNVD-202302-1125 | CVE-2023-21802 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21802 |
38 | Microsoft Graphics Component 安全漏洞 | CNNVD-202302-1122 | CVE-2023-21804 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21804 |
39 | Microsoft Windows MSHTML Platform 安全漏洞 | CNNVD-202302-1121 | CVE-2023-21805 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21805 |
40 | Microsoft Power BI 安全漏洞 | CNNVD-202302-1119 | CVE-2023-21806 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21806 |
41 | Microsoft .NET and Visual Studio 安全漏洞 | CNNVD-202302-1068 | CVE-2023-21808 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21808 |
42 | Microsoft Defender 安全漏洞 | CNNVD-202302-1127 | CVE-2023-21809 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21809 |
43 | Microsoft Windows iSCSI 安全漏洞 | CNNVD-202302-1142 | CVE-2023-21811 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21811 |
44 | Microsoft Windows Common Log File System Driver 安全漏洞 | CNNVD-202302-1133 | CVE-2023-21812 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21812 |
45 | Microsoft Windows Cryptographic Services 安全漏洞 | CNNVD-202302-1137 | CVE-2023-21813 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21813 |
46 | Microsoft Visual Studio 安全漏洞 | CNNVD-202302-1067 | CVE-2023-21815 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21815 |
47 | Microsoft Windows Active Directory 安全漏洞 | CNNVD-202302-1135 | CVE-2023-21816 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21816 |
48 | Microsoft Windows Kerberos 安全漏洞 | CNNVD-202302-1132 | CVE-2023-21817 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21817 |
49 | Microsoft Windows SChannel 安全漏洞 | CNNVD-202302-1130 | CVE-2023-21818 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21818 |
50 | Microsoft Windows Cryptographic Services 安全漏洞 | CNNVD-202302-1129 | CVE-2023-21819 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21819 |
51 | Microsoft Windows Distributed File System (DFS) 安全漏洞 | CNNVD-202302-1131 | CVE-2023-21820 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21820 |
52 | Microsoft Windows Win32k 安全漏洞 | CNNVD-202302-1138 | CVE-2023-21822 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21822 |
53 | Microsoft Graphics Component 安全漏洞 | CNNVD-202302-1070 | CVE-2023-21823 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21823 |
54 | Microsoft Windows Common Log File System Driver 安全漏洞 | CNNVD-202302-1124 | CVE-2023-23376 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23376 |
55 | Microsoft 3D Builder 安全漏洞 | CNNVD-202302-1126 | CVE-2023-23377 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23377 |
56 | Microsoft 3D Builder 安全漏洞 | CNNVD-202302-1152 | CVE-2023-23378 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23378 |
57 | Visual Studio 安全漏洞 | CNNVD-202302-1072 | CVE-2023-23381 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23381 |
58 | Microsoft 3D Builder 安全漏洞 | CNNVD-202302-1120 | CVE-2023-23390 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23390 |
59 | Microsoft Visual Studio 安全漏洞 | CNNVD-202302-1063 | CVE-2023-21567 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21567 |
60 | Microsoft Dynamics 安全漏洞 | CNNVD-202302-1078 | CVE-2023-21570 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21570 |
61 | Microsoft Dynamics 安全漏洞 | CNNVD-202302-1080 | CVE-2023-21571 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21571 |
62 | Microsoft Dynamics 安全漏洞 | CNNVD-202302-1079 | CVE-2023-21572 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21572 |
63 | Microsoft Dynamics 安全漏洞 | CNNVD-202302-1081 | CVE-2023-21573 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21573 |
64 | Microsoft Windows HTTP.sys 安全漏洞 | CNNVD-202302-1086 | CVE-2023-21687 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21687 |
65 | Microsoft PostScript Printer Driver 安全漏洞 | CNNVD-202302-1090 | CVE-2023-21693 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21693 |
66 | Microsoft Windows Fax and Scan Service 安全漏洞 | CNNVD-202302-1093 | CVE-2023-21694 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21694 |
67 | Microsoft Internet Storage Name Service 安全漏洞 | CNNVD-202302-1094 | CVE-2023-21697 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21697 |
68 | Microsoft Internet Storage Name Service 安全漏洞 | CNNVD-202302-1095 | CVE-2023-21699 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21699 |
69 | Microsoft Azure Data Box Gateway 安全漏洞 | CNNVD-202302-1099 | CVE-2023-21703 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21703 |
70 | Microsoft Office 安全漏洞 | CNNVD-202302-1107 | CVE-2023-21714 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21714 |
71 | Microsoft Office OneNote 安全漏洞 | CNNVD-202302-1111 | CVE-2023-21721 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21721 |
72 | Microsoft .NET Framework 安全漏洞 | CNNVD-202302-1114 | CVE-2023-21722 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21722 |
73 | Microsoft Dynamics 365和Microsoft Dynamics 安全漏洞 | CNNVD-202302-1128 | CVE-2023-21807 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21807 |
74 | Microsoft Defender 安全漏洞 | CNNVD-202302-1141 | CVE-2023-23379 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23379 |
75 | Microsoft Azure Machine Learning 安全漏洞 | CNNVD-202302-1140 | CVE-2023-23382 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23382 |
76 | Microsoft Visual Studio 安全漏洞 | CNNVD-202302-1202 | CVE-2023-41953 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-41953 |
此次更新共包括2个影响微软产品的其他厂商漏洞的补丁程序，其中超危漏洞1个，低危漏洞1个。
序号 | 漏洞名称 | CNNVD编号 | CVE编号 | 危害等级 | 厂商 | 官方链接 |
1 | Git 输入验证错误漏洞 | CNNVD-202301-1326 | CVE-2022-23521 | 超危 | 个人开发者 | https://github.com/git/git/commit/508386c6c5857b4faa2c3e491f422c98cc69ae76 |
2 | Broadcom WiFi Chipset Drivers 加密问题漏洞 | CNNVD-202002-123 | CVE-2019-15126 | 低危 | Broadcom | https://www.huawei.com/cn/psirt/security-notices/huawei-sn-20200228-01-kr00k-cn |
三、修复建议
目前，微软官方已经发布补丁修复了上述漏洞，建议用户及时确认漏洞影响，尽快采取修补措施。微软官方补丁下载地址：
https://msrc.microsoft.com/update-guide/en-us
CNNVD将继续跟踪上述漏洞的相关情况，及时发布相关信息。如有需要，可与CNNVD联系。联系方式: cnnvdvul@itsec.gov.cn
声明：本文来自CNNVD安全动态，版权归作者所有。文章内容仅代表作者独立观点，不代表安全内参立场，转载目的在于传递更多信息。如有侵权，请联系 anquanneican@163.com。
