Microsoft April 2023 Security Updates

April 2023 Security Updates
Updates this Month
This release consists of security updates for the following products, features and roles.
.NET Core
Azure Machine Learning
Azure Service Connector
Microsoft Bluetooth Driver
Microsoft Defender for Endpoint
Microsoft Dynamics
Microsoft Dynamics 365 Customer Voice
Microsoft Edge (Chromium-based)
Microsoft Graphics Component
Microsoft Message Queuing
Microsoft Office
Microsoft Office Publisher
Microsoft Office SharePoint
Microsoft Office Word
Microsoft PostScript Printer Driver
Microsoft Printer Drivers
Microsoft WDAC OLE DB provider for SQL
Microsoft Windows DNS
Visual Studio
Visual Studio Code
Windows Active Directory
Windows ALPC
Windows Ancillary Function Driver for WinSock
Windows Boot Manager
Windows Clip Service
Windows CNG Key Isolation Service
Windows Common Log File System Driver
Windows DHCP Server
Windows Enroll Engine
Windows Error Reporting
Windows Group Policy
Windows Internet Key Exchange (IKE) Protocol
Windows Kerberos
Windows Kernel
Windows Layer 2 Tunneling Protocol
Windows Lock Screen
Windows Netlogon
Windows Network Address Translation (NAT)
Windows Network File System
Windows Network Load Balancing
Windows NTLM
Windows PGM
Windows Point-to-Point Protocol over Ethernet (PPPoE)
Windows Point-to-Point Tunneling Protocol
Windows Raw Image Extension
Windows RDP Client
Windows Registry
Windows RPC API
Windows Secure Boot
Windows Secure Channel
Windows Secure Socket Tunneling Protocol (SSTP)
Windows Transport Security Layer (TLS)
Windows Win32K
Please note the following information regarding the security updates:
Security Update Guide Blog Posts
Date Blog Post
January 11, 2022 Coming Soon: New Security Update Guide Notification System
February 9, 2021 Continuing to Listen: Good News about the Security Update Guide API
January 13, 2021 Security Update Guide Supports CVEs Assigned by Industry Partners
December 8, 2020 Security Update Guide: Let’s keep the conversation going
November 9, 2020 Vulnerability Descriptions in the New Version of the Security Update Guide
Relevant Information
The new Hotpatching feature is now generally available. Please see Hotpatching feature for Windows Server Azure Edition virtual machines (VMs) for more information.
Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the Microsoft Update Catalog. For information on lifecycle and support dates for Windows 10 operating systems, please see Windows Lifecycle Facts Sheet.
Microsoft is improving Windows Release Notes. For more information, please see What's next for Windows release notes.
A list of the latest servicing stack updates for each operating system can be found in ADV990001. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.
In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.
Customers running Windows 7, Windows Server 2008 R2, or Windows Server 2008 need to purchase the Extended Security Update to continue receiving security updates. See 4522133 for more information.
FAQs, Mitigations, and Workarounds
The following CVEs have FAQs, Mitigations, or Workarounds. You can see these in more detail from the Vulnerabilities tab by selecting FAQs, Mitigations and Workarounds columns in the Edit Columns panel.
CVE-2023-21554
CVE-2023-21727
CVE-2023-21729
CVE-2023-23375
CVE-2023-23384
CVE-2023-24860
CVE-2023-24883
CVE-2023-24884
CVE-2023-24885
CVE-2023-24886
CVE-2023-24887
CVE-2023-24893
CVE-2023-24912
CVE-2023-24914
CVE-2023-24924
CVE-2023-24925
CVE-2023-24926
CVE-2023-24927
CVE-2023-24928
CVE-2023-24929
CVE-2023-24935
CVE-2023-28216
CVE-2023-28218
CVE-2023-28219
CVE-2023-28220
CVE-2023-28221
CVE-2023-28222
CVE-2023-28223
CVE-2023-28224
CVE-2023-28225
CVE-2023-28226
CVE-2023-28227
CVE-2023-28228
CVE-2023-28229
CVE-2023-28231
CVE-2023-28232
CVE-2023-28233
CVE-2023-28234
CVE-2023-28235
CVE-2023-28236
CVE-2023-28237
CVE-2023-28238
CVE-2023-28240
CVE-2023-28243
CVE-2023-28244
CVE-2023-28246
CVE-2023-28247
CVE-2023-28248
CVE-2023-28249
CVE-2023-28250
CVE-2023-28251
CVE-2023-28252
CVE-2023-28253
CVE-2023-28254
CVE-2023-28255
CVE-2023-28256
CVE-2023-28260
CVE-2023-28262
CVE-2023-28263
CVE-2023-28266
CVE-2023-28267
CVE-2023-28268
CVE-2023-28269
CVE-2023-28270
CVE-2023-28271
CVE-2023-28272
CVE-2023-28273
CVE-2023-28274
CVE-2023-28275
CVE-2023-28276
CVE-2023-28277
CVE-2023-28278
CVE-2023-28284
CVE-2023-28285
CVE-2023-28287
CVE-2023-28288
CVE-2023-28291
CVE-2023-28292
CVE-2023-28295
CVE-2023-28296
CVE-2023-28297
CVE-2023-28300
CVE-2023-28301
CVE-2023-28304
CVE-2023-28305
CVE-2023-28306
CVE-2023-28307
CVE-2023-28308
CVE-2023-28309
CVE-2023-28311
CVE-2023-28312
CVE-2023-28313
CVE-2023-28314
Known Issues
You can see these in more detail from the Deployments tab by selecting Known Issues column in the Edit Columns panel.
For more information about Windows Known Issues, please see Windows message center (links to currently-supported versions of Windows are in the left pane).
KB Article Applies To
5002375 SharePoint Server Subscription Edition
5025221 Windows 10, version 20H2, Windows 10, version 21H2, Windows 10, version 22H2
5025224 Windows 11 version 21H2
5025229 Windows 10, Version 1809, Windows Server 2019
5025230 Windows Server 2022
5025239 Windows 11 version 22H2
5025271 Windows Server 2008 (Monthly Rollup)
5025273 Windows Server 2008 (Security-only update)
5025277 Windows Server 2008 R2 (Security-only update)
5025279 Windows Server 2008 R2 (Monthly Rollup)
Released: Apr 11, 2023
April 2023 Security Updates - Release Notes - Security Update Guide - Microsoft

April 2023 Security Updates​

Updates this Month​

This release consists of security updates for the following products, features and roles.

• .NET Core
• Azure Machine Learning
• Azure Service Connector
• Microsoft Bluetooth Driver
• Microsoft Defender for Endpoint
• Microsoft Dynamics
• Microsoft Dynamics 365 Customer Voice
• Microsoft Edge (Chromium-based)
• Microsoft Graphics Component
• Microsoft Message Queuing
• Microsoft Office
• Microsoft Office Publisher
• Microsoft Office SharePoint
• Microsoft Office Word
• Microsoft PostScript Printer Driver
• Microsoft Printer Drivers
• Microsoft WDAC OLE DB provider for SQL
• Microsoft Windows DNS
• Visual Studio
• Visual Studio Code
• Windows Active Directory
• Windows ALPC
• Windows Ancillary Function Driver for WinSock
• Windows Boot Manager
• Windows Clip Service
• Windows CNG Key Isolation Service
• Windows Common Log File System Driver
• Windows DHCP Server
• Windows Enroll Engine
• Windows Error Reporting
• Windows Group Policy
• Windows Internet Key Exchange (IKE) Protocol
• Windows Kerberos
• Windows Kernel
• Windows Layer 2 Tunneling Protocol
• Windows Lock Screen
• Windows Netlogon
• Windows Network Address Translation (NAT)
• Windows Network File System
• Windows Network Load Balancing
• Windows NTLM
• Windows PGM
• Windows Point-to-Point Protocol over Ethernet (PPPoE)
• Windows Point-to-Point Tunneling Protocol
• Windows Raw Image Extension
• Windows RDP Client
• Windows Registry
• Windows RPC API
• Windows Secure Boot
• Windows Secure Channel
• Windows Secure Socket Tunneling Protocol (SSTP)
• Windows Transport Security Layer (TLS)
• Windows Win32K

Please note the following information regarding the security updates:

Security Update Guide Blog Posts​

Relevant Information​

• The new Hotpatching feature is now generally available. Please see Hotpatching feature for Windows Server Azure Edition virtual machines (VMs) for more information.
• Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the Microsoft Update Catalog. For information on lifecycle and support dates for Windows 10 operating systems, please see Windows Lifecycle Facts Sheet.
• Microsoft is improving Windows Release Notes. For more information, please see What's next for Windows release notes.
• A list of the latest servicing stack updates for each operating system can be found in ADV990001. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.
• In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.
• Customers running Windows 7, Windows Server 2008 R2, or Windows Server 2008 need to purchase the Extended Security Update to continue receiving security updates. See 4522133 for more information.

FAQs, Mitigations, and Workarounds​

The following CVEs have FAQs, Mitigations, or Workarounds. You can see these in more detail from the Vulnerabilities tab by selecting FAQs, Mitigations and Workarounds columns in the Edit Columns panel.

• CVE-2023-21554
• CVE-2023-21727
• CVE-2023-21729
• CVE-2023-23375
• CVE-2023-23384
• CVE-2023-24860
• CVE-2023-24883
• CVE-2023-24884
• CVE-2023-24885
• CVE-2023-24886
• CVE-2023-24887
• CVE-2023-24893
• CVE-2023-24912
• CVE-2023-24914
• CVE-2023-24924
• CVE-2023-24925
• CVE-2023-24926
• CVE-2023-24927
• CVE-2023-24928
• CVE-2023-24929
• CVE-2023-24935
• CVE-2023-28216
• CVE-2023-28218
• CVE-2023-28219
• CVE-2023-28220
• CVE-2023-28221
• CVE-2023-28222
• CVE-2023-28223
• CVE-2023-28224
• CVE-2023-28225
• CVE-2023-28226
• CVE-2023-28227
• CVE-2023-28228
• CVE-2023-28229
• CVE-2023-28231
• CVE-2023-28232
• CVE-2023-28233
• CVE-2023-28234
• CVE-2023-28235
• CVE-2023-28236
• CVE-2023-28237
• CVE-2023-28238
• CVE-2023-28240
• CVE-2023-28243
• CVE-2023-28244
• CVE-2023-28246
• CVE-2023-28247
• CVE-2023-28248
• CVE-2023-28249
• CVE-2023-28250
• CVE-2023-28251
• CVE-2023-28252
• CVE-2023-28253
• CVE-2023-28254
• CVE-2023-28255
• CVE-2023-28256
• CVE-2023-28260
• CVE-2023-28262
• CVE-2023-28263
• CVE-2023-28266
• CVE-2023-28267
• CVE-2023-28268
• CVE-2023-28269
• CVE-2023-28270
• CVE-2023-28271
• CVE-2023-28272
• CVE-2023-28273
• CVE-2023-28274
• CVE-2023-28275
• CVE-2023-28276
• CVE-2023-28277
• CVE-2023-28278
• CVE-2023-28284
• CVE-2023-28285
• CVE-2023-28287
• CVE-2023-28288
• CVE-2023-28291
• CVE-2023-28292
• CVE-2023-28295
• CVE-2023-28296
• CVE-2023-28297
• CVE-2023-28300
• CVE-2023-28301
• CVE-2023-28304
• CVE-2023-28305
• CVE-2023-28306
• CVE-2023-28307
• CVE-2023-28308
• CVE-2023-28309
• CVE-2023-28311
• CVE-2023-28312
• CVE-2023-28313
• CVE-2023-28314

Known Issues​

You can see these in more detail from the Deployments tab by selecting Known Issues column in the Edit Columns panel.
For more information about Windows Known Issues, please see Windows message center (links to currently-supported versions of Windows are in the left pane).
Released: Apr 11, 2023