The security updates for April 2023 have been released by Microsoft.

April 2023 Security Updates

Updates this Month

This release consists of security updates for the following products, features and roles.

• .NET Core
• Azure Machine Learning
• Azure Service Connector
• Microsoft Bluetooth Driver
• Microsoft Defender for Endpoint
• Microsoft Dynamics
• Microsoft Dynamics 365 Customer Voice
• Microsoft Edge (Chromium-based)
• Microsoft Graphics Component
• Microsoft Message Queuing
• Microsoft Office
• Microsoft Office Publisher
• Microsoft Office SharePoint
• Microsoft Office Word
• Microsoft PostScript Printer Driver
• Microsoft Printer Drivers
• Microsoft WDAC OLE DB provider for SQL
• Microsoft Windows DNS
• Visual Studio
• Visual Studio Code
• Windows Active Directory
• Windows ALPC
• Windows Ancillary Function Driver for WinSock
• Windows Boot Manager
• Windows Clip Service
• Windows CNG Key Isolation Service
• Windows Common Log File System Driver
• Windows DHCP Server
• Windows Enroll Engine
• Windows Error Reporting
• Windows Group Policy
• Windows Internet Key Exchange (IKE) Protocol
• Windows Kerberos
• Windows Kernel
• Windows Layer 2 Tunneling Protocol
• Windows Lock Screen
• Windows Netlogon
• Windows Network Address Translation (NAT)
• Windows Network File System
• Windows Network Load Balancing
• Windows NTLM
• Windows PGM
• Windows Point-to-Point Protocol over Ethernet (PPPoE)
• Windows Point-to-Point Tunneling Protocol
• Windows Raw Image Extension
• Windows RDP Client
• Windows Registry
• Windows RPC API
• Windows Secure Boot
• Windows Secure Channel
• Windows Secure Socket Tunneling Protocol (SSTP)
• Windows Transport Security Layer (TLS)
• Windows Win32K

Please note the following information regarding the security updates:

Security Update Guide Blog Posts

Date	Blog Post
January 11, 2022	Coming Soon: New Security Update Guide Notification System
February 9, 2021	Continuing to Listen: Good News about the Security Update Guide API
January 13, 2021	Security Update Guide Supports CVEs Assigned by Industry Partners
December 8, 2020	Security Update Guide: Let’s keep the conversation going
November 9, 2020	Vulnerability Descriptions in the New Version of the Security Update Guide

Relevant Information

• The new Hotpatching feature is now generally available. Please see  Hotpatching feature for Windows Server Azure Edition virtual machines (VMs) for more information.
• Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the  Microsoft Update Catalog. For information on lifecycle and support dates for Windows 10 operating systems, please see  Windows Lifecycle Facts Sheet.
• Microsoft is improving Windows Release Notes. For more information, please see  What's next for Windows release notes.
• A list of the latest servicing stack updates for each operating system can be found in  ADV990001. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.
• In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.
• Customers running Windows 7, Windows Server 2008 R2, or Windows Server 2008 need to purchase the Extended Security Update to continue receiving security updates. See  4522133 for more information.

FAQs, Mitigations, and Workarounds

The following CVEs have FAQs, Mitigations, or Workarounds. You can see these in more detail from the Vulnerabilities tab by selecting FAQs, Mitigations and Workarounds columns in the Edit Columns panel.

• CVE-2023-21554
• CVE-2023-21727
• CVE-2023-21729
• CVE-2023-23375
• CVE-2023-23384
• CVE-2023-24860
• CVE-2023-24883
• CVE-2023-24884
• CVE-2023-24885
• CVE-2023-24886
• CVE-2023-24887
• CVE-2023-24893
• CVE-2023-24912
• CVE-2023-24914
• CVE-2023-24924
• CVE-2023-24925
• CVE-2023-24926
• CVE-2023-24927
• CVE-2023-24928
• CVE-2023-24929
• CVE-2023-24935
• CVE-2023-28216
• CVE-2023-28218
• CVE-2023-28219
• CVE-2023-28220
• CVE-2023-28221
• CVE-2023-28222
• CVE-2023-28223
• CVE-2023-28224
• CVE-2023-28225
• CVE-2023-28226
• CVE-2023-28227
• CVE-2023-28228
• CVE-2023-28229
• CVE-2023-28231
• CVE-2023-28232
• CVE-2023-28233
• CVE-2023-28234
• CVE-2023-28235
• CVE-2023-28236
• CVE-2023-28237
• CVE-2023-28238
• CVE-2023-28240
• CVE-2023-28243
• CVE-2023-28244
• CVE-2023-28246
• CVE-2023-28247
• CVE-2023-28248
• CVE-2023-28249
• CVE-2023-28250
• CVE-2023-28251
• CVE-2023-28252
• CVE-2023-28253
• CVE-2023-28254
• CVE-2023-28255
• CVE-2023-28256
• CVE-2023-28260
• CVE-2023-28262
• CVE-2023-28263
• CVE-2023-28266
• CVE-2023-28267
• CVE-2023-28268
• CVE-2023-28269
• CVE-2023-28270
• CVE-2023-28271
• CVE-2023-28272
• CVE-2023-28273
• CVE-2023-28274
• CVE-2023-28275
• CVE-2023-28276
• CVE-2023-28277
• CVE-2023-28278
• CVE-2023-28284
• CVE-2023-28285
• CVE-2023-28287
• CVE-2023-28288
• CVE-2023-28291
• CVE-2023-28292
• CVE-2023-28295
• CVE-2023-28296
• CVE-2023-28297
• CVE-2023-28300
• CVE-2023-28301
• CVE-2023-28304
• CVE-2023-28305
• CVE-2023-28306
• CVE-2023-28307
• CVE-2023-28308
• CVE-2023-28309
• CVE-2023-28311
• CVE-2023-28312
• CVE-2023-28313
• CVE-2023-28314

Known Issues

You can see these in more detail from the Deployments tab by selecting Known Issues column in the Edit Columns panel.

For more information about Windows Known Issues, please see  Windows message center (links to currently-supported versions of Windows are in the left pane).

KB Article	Applies To
5002375	SharePoint Server Subscription Edition
5025221	Windows 10, version 20H2, Windows 10, version 21H2, Windows 10, version 22H2
5025224	Windows 11 version 21H2
5025229	Windows 10, Version 1809, Windows Server 2019
5025230	Windows Server 2022
5025239	Windows 11 version 22H2
5025271	Windows Server 2008 (Monthly Rollup)
5025273	Windows Server 2008 (Security-only update)
5025277	Windows Server 2008 R2 (Security-only update)
5025279	Windows Server 2008 R2 (Monthly Rollup)