Tripwire Patch Priority Index for February 2023

Image

Tripwire's February 2023 Patch Priority Index (PPI) brings together important vulnerabilities for Microsoft.

First on the patch priority list this month is a patch for Microsoft Defender for Endpoint that resolves a security feature bypass vulnerability.

Next are patches for Microsoft Edge that resolve 15 vulnerabilities, including remote code execution, spoofing, and tampering vulnerabilities.

Up next on the priority list are patches for Microsoft Word, OneNote, Publisher, and Office that resolve remote code execution, spoofing, security feature bypass, and information disclosure vulnerabilities.

Up next are patches that affect components of the core Windows operating system. These patches resolve over 35 vulnerabilities, including elevation of privilege, information disclosure, security feature bypass, remote code execution, and denial of service vulnerabilities. These vulnerabilities affect core Windows, Kernel, Graphics, ODBC Driver, PostScripter Printer Driver, Windows Installer, PEAP, Secure Channel, iSCSI Service, MSHTML, Fax Service, Common Log File System Driver, and others.

Next are patches for .NET and Visual Studio Code that resolves remove code execution and denial-of-service vulnerabilities.

Lastly, administrators should focus on server-side patches for SharePoint, Exchange, Distributed File System, Dynamics, Azure DevOps, SQL Server and Active Directory. These patches resolve remote code execution, elevation of privilege, spoofing, cross-site scripting, and information disclosure vulnerabilities.