Alerta temprana

TLP:CLEAR PAP:WHITE

Boletín de seguridad de Microsoft de abril 2023

Descripción

Como cada segundo martes de mes, Microsoft ha lanzado el boletín mensual de vulnerabilidades, el cual contiene 114 registros, entre los cuales se encuentran:

Número de vulnerabilidades críticas: 2
Número de vulnerabilidades altas: 66
Número de vulnerabilidades medias: 31
Número de vulnerabilidades bajas: 0
Número de vulnerabilidades zero days: 15

Productos afectados

Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Windows Server 2012
Windows Server 2012 (Server Core installation)
Windows Server 2012 R2
Windows Server 2012 R2 (Server Core installation)
Microsoft Publisher 2013 Service Pack 1 (32-bit editions)
Microsoft Publisher 2013 Service Pack 1 (64-bit editions)
Microsoft SharePoint Foundation 2013 Service Pack 1
Windows 10 for 32-bit Systems
Windows 10 for x64-based Systems
Microsoft Publisher 2016 (32-bit edition)
Microsoft Publisher 2016 (64-bit edition)
Windows Server 2016
Windows 10 Version 1607 for 32-bit Systems
Windows 10 Version 1607 for x64-based Systems
Windows Server 2016 (Server Core installation)
Microsoft SharePoint Enterprise Server 2016
Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Microsoft SQL Server 2008 for 32-bit Systems Service Pack 4 (QFE)
Microsoft SQL Server 2012 for 32-bit Systems Service Pack 4 (QFE)
Microsoft SQL Server 2012 for x64-based Systems Service Pack 4 (QFE)
Microsoft SQL Server 2017 for x64-based Systems (GDR)
Microsoft SQL Server 2008 R2 for 32-Bit Systems Service Pack 3 (QFE)
Microsoft SQL Server 2008 R2 for x64-Based Systems Service Pack 3 (QFE)
Microsoft SQL Server 2008 for x64-Based Systems Service Pack 4 (QFE)
Windows 10 Version 1809 for 32-bit Systems
Windows 10 Version 1809 for x64-based Systems
Windows 10 Version 1809 for ARM64-based Systems
Windows Server 2019
Windows Server 2019 (Server Core installation)
Microsoft Office 2019 for 32-bit editions
Microsoft Office 2019 for 64-bit editions
Microsoft Office 2019 for Mac
Microsoft SharePoint Server 2019
Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
Visual Studio Code
Microsoft Edge (Chromium-based)
Microsoft Dynamics 365 (on-premises) version 9.0
Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (GDR)
Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (GDR)
Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (CU 4)
Microsoft Publisher 2013 Service Pack 1 RT
Microsoft 365 Apps for Enterprise for 32-bit Systems
Microsoft 365 Apps for Enterprise for 64-bit Systems
Windows 10 Version 20H2 for x64-based Systems
Windows 10 Version 20H2 for 32-bit Systems
Windows 10 Version 20H2 for ARM64-based Systems
Raw Image Extension on Windows 10 for 32-bit Systems
Raw Image Extension on Windows 10 for x64-based Systems
Raw Image Extension on Windows 10 Version 20H2 for x64-based Systems
Raw Image Extension on Windows 10 Version 20H2 for 32-bit Systems
Raw Image Extension on Windows 10 Version 20H2 for ARM64-based Systems
Raw Image Extension on Windows 11 version 21H2 for x64-based Systems
Raw Image Extension on Windows 11 version 21H2 for ARM64-based Systems
Raw Image Extension on Windows 10 Version 21H2 for 32-bit Systems
Raw Image Extension on Windows 10 Version 21H2 for ARM64-based Systems
Raw Image Extension on Windows 10 Version 21H2 for x64-based Systems
Raw Image Extension on Windows 11 Version 22H2 for ARM64-based Systems
Raw Image Extension on Windows 11 Version 22H2 for x64-based Systems
Microsoft Edge for Android
Microsoft SQL Server 2019 for x64-based Systems (GDR)
Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (CU 4)
Remote Desktop client for Windows Desktop
Microsoft Malware Protection Engine
Microsoft Dynamics 365 (on-premises) version 9.1
Windows Server 2022
Windows Server 2022 (Server Core installation)
Windows 11 version 21H2 for x64-based Systems
Windows 11 version 21H2 for ARM64-based Systems
Windows 10 Version 21H2 for 32-bit Systems
Windows 10 Version 21H2 for ARM64-based Systems
Windows 10 Version 21H2 for x64-based Systems
Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
Microsoft Office LTSC for Mac 2021
Microsoft Office LTSC 2021 for 64-bit editions
Microsoft Office LTSC 2021 for 32-bit editions
Microsoft SharePoint Server Subscription Edition
Microsoft Visual Studio 2022 version 17.0
.NET 6.0
Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR)
Microsoft Visual Studio 2022 version 17.2
Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 Azure Connectivity Pack
Windows 11 Version 22H2 for ARM64-based Systems
Windows 11 Version 22H2 for x64-based Systems
Windows 10 Version 22H2 for x64-based Systems
Windows 10 Version 22H2 for ARM64-based Systems
Windows 10 Version 22H2 for 32-bit Systems
Microsoft Visual Studio 2022 version 17.4
.NET 7.0
Microsoft SQL Server 2017 for x64-based Systems (CU 31)
Microsoft SQL Server 2019 for x64-based Systems (CU 18)
Microsoft SQL Server 2022 for x64-based Systems (GDR)
Azure Machine Learning
Microsoft Visual Studio 2022 version 17.5
Send Customer Voice survey from Dynamics 365
Azure Service Connector
Microsoft ODBC Driver 18 for SQL Server
Microsoft ODBC Driver 17 for SQL Server
Microsoft OLE DB Driver 19 for SQL Server
Microsoft OLE DB Driver 18 for SQL Server
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)

Riesgo

Crítico

Soluciones

Se recomienda a usuarios y administradores implementar todas las actualizaciones y los parches lanzados por el fabricante para todos los productos señalados.

Referencias

Publicación oficial

Contacto

Para más información, cualquier otra incidencia o problema de seguridad, puede ponerse en contacto a través de nuestra dirección de correo csirt@seresco.es