Test Kennung:	1.3.6.1.4.1.25623.1.0.821272
Kategorie:	Windows : Microsoft Bulletins
Titel:	Microsoft Windows Multiple Vulnerabilities (KB5015807)
Zusammenfassung:	This host is missing an important security; update according to Microsoft KB5015807
Beschreibung:	Summary: This host is missing an important security update according to Microsoft KB5015807 Vulnerability Insight: Multiple flaws exist due to: - A security bypass vulnerability in BitLocker. - An insufficiently protected credentials vulnerability might leak authentication or cookie header data. - An elevation of privilege vulnerability in Windows CSRSS. For more information about the vulnerabilities refer to Reference links. Vulnerability Impact: Successful exploitation will allow an attacker to elevate privileges, execute arbitrary commands, disclose information, bypass security restrictions, conduct tampering and DoS attacks on an affected system. Affected Software/OS: - Microsoft Windows 10 Version 20H2 for 32-bit Systems - Microsoft Windows 10 Version 20H2 for x64-based Systems - Microsoft Windows 10 Version 21H1 for 32-bit Systems - Microsoft Windows 10 Version 21H1 for x64-based Systems - Microsoft Windows 10 Version 21H2 for 32-bit Systems - Microsoft Windows 10 Version 21H2 for x64-based Systems Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 8.5 CVSS Vector: AV:N/AC:M/Au:S/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2022-21845 Windows Kernel Information Disclosure Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21845 Common Vulnerability Exposure (CVE) ID: CVE-2022-22022 Windows Print Spooler Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22022 Common Vulnerability Exposure (CVE) ID: CVE-2022-22023 Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22023 Common Vulnerability Exposure (CVE) ID: CVE-2022-22024 Windows Fax Service Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22024 Common Vulnerability Exposure (CVE) ID: CVE-2022-22025 Windows Internet Information Services Cachuri Module Denial of Service Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22025 Common Vulnerability Exposure (CVE) ID: CVE-2022-22026 Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22026 Common Vulnerability Exposure (CVE) ID: CVE-2022-22027 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22027 Common Vulnerability Exposure (CVE) ID: CVE-2022-22028 Windows Network File System Information Disclosure Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22028 Common Vulnerability Exposure (CVE) ID: CVE-2022-22029 Windows Network File System Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22029 Common Vulnerability Exposure (CVE) ID: CVE-2022-22031 Windows Credential Guard Domain-joined Public Key Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22031 Common Vulnerability Exposure (CVE) ID: CVE-2022-22034 Windows Graphics Component Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22034 Common Vulnerability Exposure (CVE) ID: CVE-2022-22036 Performance Counters for Windows Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22036 Common Vulnerability Exposure (CVE) ID: CVE-2022-22037 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22037 Common Vulnerability Exposure (CVE) ID: CVE-2022-22038 Remote Procedure Call Runtime Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22038 Common Vulnerability Exposure (CVE) ID: CVE-2022-22039 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22039 Common Vulnerability Exposure (CVE) ID: CVE-2022-22040 Internet Information Services Dynamic Compression Module Denial of Service Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22040 Common Vulnerability Exposure (CVE) ID: CVE-2022-22041 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22041 Common Vulnerability Exposure (CVE) ID: CVE-2022-22042 Windows Hyper-V Information Disclosure Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22042 Common Vulnerability Exposure (CVE) ID: CVE-2022-22043 Windows Fast FAT File System Driver Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22043 Common Vulnerability Exposure (CVE) ID: CVE-2022-22045 Windows.Devices.Picker.dll Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22045 Common Vulnerability Exposure (CVE) ID: CVE-2022-22047 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22047 Common Vulnerability Exposure (CVE) ID: CVE-2022-22048 BitLocker Security Feature Bypass Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22048 Common Vulnerability Exposure (CVE) ID: CVE-2022-22049 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22049 Common Vulnerability Exposure (CVE) ID: CVE-2022-22050 Windows Fax Service Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22050 Common Vulnerability Exposure (CVE) ID: CVE-2022-22711 Windows BitLocker Information Disclosure Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22711 Common Vulnerability Exposure (CVE) ID: CVE-2022-27776 Debian Security Information: DSA-5197 (Google Search) https://www.debian.org/security/2022/dsa-5197 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKKOQXPYLMBSEVDHFS32BPBR3ZQJKY5B/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7N5ZBWLNNPZKFK7Q4KEHGCJ2YELQEUJP/ https://security.gentoo.org/glsa/202212-01 https://hackerone.com/reports/1547048 https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html Common Vulnerability Exposure (CVE) ID: CVE-2022-30202 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30202 Common Vulnerability Exposure (CVE) ID: CVE-2022-30203 Windows Boot Manager Security Feature Bypass Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30203 Common Vulnerability Exposure (CVE) ID: CVE-2022-30205 Windows Group Policy Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30205 Common Vulnerability Exposure (CVE) ID: CVE-2022-30206 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30206 Common Vulnerability Exposure (CVE) ID: CVE-2022-30208 Windows Security Account Manager (SAM) Denial of Service Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30208 Common Vulnerability Exposure (CVE) ID: CVE-2022-30209 Windows IIS Server Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30209 Common Vulnerability Exposure (CVE) ID: CVE-2022-30211 Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30211 Common Vulnerability Exposure (CVE) ID: CVE-2022-30212 Windows Connected Devices Platform Service Information Disclosure Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30212 Common Vulnerability Exposure (CVE) ID: CVE-2022-30213 Windows GDI+ Information Disclosure Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30213 Common Vulnerability Exposure (CVE) ID: CVE-2022-30214 Windows DNS Server Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30214 Common Vulnerability Exposure (CVE) ID: CVE-2022-30215 Active Directory Federation Services Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30215 Common Vulnerability Exposure (CVE) ID: CVE-2022-30216 Windows Server Service Tampering Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30216 Common Vulnerability Exposure (CVE) ID: CVE-2022-30220 Windows Common Log File System Driver Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30220 Common Vulnerability Exposure (CVE) ID: CVE-2022-30221 Windows Graphics Component Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30221 Common Vulnerability Exposure (CVE) ID: CVE-2022-30222 Windows Shell Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30222 Common Vulnerability Exposure (CVE) ID: CVE-2022-30223 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30223 Common Vulnerability Exposure (CVE) ID: CVE-2022-30224 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30224 Common Vulnerability Exposure (CVE) ID: CVE-2022-30225 Windows Media Player Network Sharing Service Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30225 Common Vulnerability Exposure (CVE) ID: CVE-2022-30226 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30226 Common Vulnerability Exposure (CVE) ID: CVE-2022-33644 Xbox Live Save Service Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33644
Copyright	Copyright (C) 2022 Greenbone Networks GmbH

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.