Consorzio Metis

CSIRT Toscana

CSIRT Toscana

Aggiornamenti Mensili Microsoft (AL01/230215/CSIRT-ITA)

Data:
14 Aprile 2026

Impatto Sistemico

Critico (75.12)

Sintesi

Microsoft ha rilasciato gli aggiornamenti di sicurezza mensili che risolvono un totale di 76 nuove vulnerabilità, di cui 3 di tipo 0-day .

Tipologia

  • Remote Code Execution
  • Spoofing
  • Security Feature Bypass
  • Tampering
  • Information Disclosure
  • Elevation of Privilege
  • Denial of Service

Prodotti e versioni affette

  • .NET and Visual Studio
  • .NET Framework
  • 3D Builder
  • Azure App Service
  • Azure Data Box Gateway
  • Azure DevOps
  • Azure Machine Learning
  • HoloLens
  • Internet Storage Name Service
  • Microsoft Defender for Endpoint
  • Microsoft Defender for IoT
  • Microsoft Dynamics
  • Microsoft Edge (Chromium-based)
  • Microsoft Exchange Server
  • Microsoft Graphics Component
  • Microsoft Office
  • Microsoft Office OneNote
  • Microsoft Office Publisher
  • Microsoft Office SharePoint
  • Microsoft Office Word
  • Microsoft PostScript Printer Driver
  • Microsoft WDAC OLE DB provider for SQL
  • Microsoft Windows Codecs Library
  • Power BI
  • SQL Server
  • Visual Studio
  • Windows Active Directory
  • Windows ALPC
  • Windows Common Log File System Driver
  • Windows Cryptographic Services
  • Windows Distributed File System (DFS)
  • Windows Fax and Scan Service
  • Windows HTTP.sys
  • Windows Installer
  • Windows iSCSI
  • Windows Kerberos
  • Windows MSHTML Platform
  • Windows ODBC Driver
  • Windows Protected EAP (PEAP)
  • Windows SChannel
  • Windows Win32K

Azioni di mitigazione

In linea con le dichiarazioni del vendor, si raccomanda di procedere all’aggiornamento dei prodotti impattati attraverso l’apposita funzione di Windows Update.

Riferimenti

CVE

CVE-ID
CVE-2023-21715 CVE-2023-21529 CVE-2023-23376 CVE-2023-21823
CVE-2023-21800 CVE-2019-15126 CVE-2023-21716 CVE-2023-21688
CVE-2023-23382 CVE-2023-21721 CVE-2023-21778 CVE-2023-21718
CVE-2023-21706 CVE-2023-21809 CVE-2023-21707 CVE-2023-21573
CVE-2023-21528 CVE-2023-23379 CVE-2023-21816 CVE-2023-21686
CVE-2023-21701 CVE-2023-21798 CVE-2023-21803 CVE-2023-21811
CVE-2023-21812 CVE-2023-21572 CVE-2023-21694 CVE-2023-21820
CVE-2023-21697 CVE-2023-21822 CVE-2023-21695 CVE-2023-21817
CVE-2023-23381 CVE-2023-21692 CVE-2023-21690 CVE-2023-21702
CVE-2023-21685 CVE-2023-21703 CVE-2023-21689 CVE-2023-23378
CVE-2023-21570 CVE-2023-21819 CVE-2023-21802 CVE-2023-21818
CVE-2023-21567 CVE-2023-21797 CVE-2023-21815 CVE-2023-21713
CVE-2023-21693 CVE-2023-21691 CVE-2023-21566 CVE-2023-21687
CVE-2023-21699 CVE-2023-21722 CVE-2023-21801 CVE-2023-21813
CVE-2023-21564 CVE-2023-23390 CVE-2023-21553 CVE-2023-21806
CVE-2023-21804 CVE-2023-21710 CVE-2023-21571 CVE-2023-23377
CVE-2023-21717 CVE-2023-21777 CVE-2023-21808 CVE-2023-21805
CVE-2023-21700 CVE-2023-21714 CVE-2023-21704 CVE-2023-21705
CVE-2023-21684 CVE-2023-21799 CVE-2023-21568

Change log

Versione Note Data
1.1 Aggiornata sezione “CVE” per rilevato sfruttamento della CVE-2023-21529 14/04/2026

Il presente articolo è un prodotto originale di csirt.gov.it, riproposto qui a solo scopo di aumentarne la visibilità. Può essere visualizzato in versione originale al seguente link

Ultimo aggiornamento

14 Aprile 2026, 16:00