Microsoft addresses one actively exploited zero-day and numerous critical vulnerabilities

Threat Level

Vulnerability Report

For a detailed threat advisory, download the pdf file here

Summary

Microsoft released a patch on January 2023’s Patch Tuesday addressing 98 vulnerabilities, of which 11 are considered critical. The patch includes fixes for a range of vulnerabilities including 39 Elevation of Privilege vulnerabilities, 4 Security Feature Bypass vulnerabilities, 33 Remote Code Execution vulnerabilities, 10 Information Disclosure vulnerabilities, 10 Denial of Service vulnerabilities, and 2 Spoofing vulnerabilities.