Security News > 2023 > February > February 2023 Patch Tuesday forecast: A Valentine’s date

February 2023 Patch Tuesday forecast: A Valentine’s date
2023-02-10 13:03

Patch Tuesday falls on Valentine's Day this year but will it be a special date? While there have been ongoing cyber-attacks of all kinds, it has been relatively quiet on the release of new patches from Microsoft.

VMware released a patch back in 2021 which addressed CVE-2021-21974, a heap-overflow vulnerability, which can allow remote code execution.

It's been a quiet month for releases since last Patch Tuesday.

These releases will not install via Windows update but can be obtained through the Microsoft Update Catalog.

February 2023 Patch Tuesday forecast Microsoft delivered on my prediction to address a large number of CVEs last month for the Windows 7 and Server 2008 ESU closeout.

Adobe released their large quarterly update for Acrobat and Reader last Patch Tuesday, so only expect a minor update this month.


News URL

https://www.helpnetsecurity.com/2023/02/10/february-2023-patch-tuesday-forecast/

Related Vulnerability

DATE CVE VULNERABILITY TITLE RISK
2021-02-24 CVE-2021-21974 Out-of-bounds Write vulnerability in VMWare Cloud Foundation and Esxi
OpenSLP as used in ESXi (7.0 before ESXi70U1c-17325551, 6.7 before ESXi670-202102401-SG, 6.5 before ESXi650-202102101-SG) has a heap-overflow vulnerability.
low complexity
vmware CWE-787
5.8