# Microsoft patches three CVEs under active exploitation

Published: 2023-02-14 · Severity: high
Canonical: https://vorant.io/reports/d1dacd9b-4fcf-5f20-b0b0-d1775bd79808/microsoft-patches-three-cves-under-active-exploitation

> Microsoft patches three CVEs confirmed exploited in the wild; apply updates immediately to prevent system compromise.

The Japanese Information-technology Promotion Agency (IPA) issued a security alert on 2023-02-15 advising immediate patching of Microsoft products following the release of updates on that date. Three vulnerabilities—CVE-2023-21823, CVE-2023-23376, and CVE-2023-21715—have been confirmed by Microsoft to be actively exploited in the wild. The advisory warns that exploitation can result in application crashes or full system compromise by attackers, with risk of widespread impact if left unpatched. Organizations should apply the Microsoft-provided patches without delay through Windows Update.

## Mentioned in this report

- Vulnerabilities: CVE-2023-21715 (KEV), CVE-2023-21823 (KEV), CVE-2023-23376 (KEV)

Source reporting: https://www.ipa.go.jp/archive/security/security-alert/2022/0215-ms.html

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/d1dacd9b-4fcf-5f20-b0b0-d1775bd79808/microsoft-patches-three-cves-under-active-exploitation.
In the app the same report carries its extracted indicators, its detections (Splunk SPL already written, plus Elastic and Microsoft KQL where they apply), live profiles of the actors and CVEs it names, and the vendor research on the same campaign. Slack alerts fire on the vendors, sectors and countries a reader follows. A new account starts with three days of all of it, no card: https://vorant.io/signup