Test ID:	1.3.6.1.4.1.25623.1.0.818976
Category:	Windows : Microsoft Bulletins
Title:	Microsoft Windows Multiple Vulnerabilities (KB5011503)
Summary:	This host is missing an important security; update according to Microsoft KB5011503
Description:	Summary: This host is missing an important security update according to Microsoft KB5011503 Vulnerability Insight: Multiple flaws exist due to: - An elevation of privilege vulnerability in Windows Fax and Scan Service. - An elevation of privilege vulnerability in Windows ALPC. - An elevation of privilege vulnerability in Windows Print Spooler. For more information about the vulnerabilities refer to Reference links. Vulnerability Impact: Successful exploitation will allow an attacker to elevate privileges, disclose sensitive information, conduct remote code execution, bypass security restrictions, conduct spoofing and conduct DoS attacks. Affected Software/OS: - Microsoft Windows 10 Version 1809 for 32-bit Systems - Microsoft Windows 10 Version 1809 for x64-based Systems - Microsoft Windows Server 2019 Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 9.0 CVSS Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2022-21967 Xbox Live Auth Manager for Windows Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21967 Common Vulnerability Exposure (CVE) ID: CVE-2022-21975 Windows Hyper-V Denial of Service Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21975 Common Vulnerability Exposure (CVE) ID: CVE-2022-21977 Media Foundation Information Disclosure Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21977 Common Vulnerability Exposure (CVE) ID: CVE-2022-21990 Remote Desktop Client Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21990 Common Vulnerability Exposure (CVE) ID: CVE-2022-22010 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22010 Common Vulnerability Exposure (CVE) ID: CVE-2022-23253 Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23253 Common Vulnerability Exposure (CVE) ID: CVE-2022-23278 Microsoft Defender for Endpoint Spoofing Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23278 Common Vulnerability Exposure (CVE) ID: CVE-2022-23281 Windows Common Log File System Driver Information Disclosure Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23281 Common Vulnerability Exposure (CVE) ID: CVE-2022-23283 Windows ALPC Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23283 Common Vulnerability Exposure (CVE) ID: CVE-2022-23284 Windows Print Spooler Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23284 Common Vulnerability Exposure (CVE) ID: CVE-2022-23285 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23285 Common Vulnerability Exposure (CVE) ID: CVE-2022-23286 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23286 Common Vulnerability Exposure (CVE) ID: CVE-2022-23287 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23287 Common Vulnerability Exposure (CVE) ID: CVE-2022-23288 Windows DWM Core Library Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23288 Common Vulnerability Exposure (CVE) ID: CVE-2022-23290 Windows Inking COM Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23290 Common Vulnerability Exposure (CVE) ID: CVE-2022-23291 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23291 Common Vulnerability Exposure (CVE) ID: CVE-2022-23293 Windows Fast FAT File System Driver Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23293 Common Vulnerability Exposure (CVE) ID: CVE-2022-23294 Windows Event Tracing Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23294 Common Vulnerability Exposure (CVE) ID: CVE-2022-23296 Windows Installer Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23296 Common Vulnerability Exposure (CVE) ID: CVE-2022-23297 Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23297 Common Vulnerability Exposure (CVE) ID: CVE-2022-23298 Windows NT OS Kernel Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23298 Common Vulnerability Exposure (CVE) ID: CVE-2022-23299 Windows PDEV Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23299 Common Vulnerability Exposure (CVE) ID: CVE-2022-24454 Windows Security Support Provider Interface Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24454 Common Vulnerability Exposure (CVE) ID: CVE-2022-24455 Windows CD-ROM Driver Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24455 Common Vulnerability Exposure (CVE) ID: CVE-2022-24459 Windows Fax and Scan Service Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24459 Common Vulnerability Exposure (CVE) ID: CVE-2022-24460 Tablet Windows User Interface Application Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24460 Common Vulnerability Exposure (CVE) ID: CVE-2022-24502 Windows HTML Platforms Security Feature Bypass Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24502 Common Vulnerability Exposure (CVE) ID: CVE-2022-24503 Remote Desktop Protocol Client Information Disclosure Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24503 Common Vulnerability Exposure (CVE) ID: CVE-2022-24505 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24505 Common Vulnerability Exposure (CVE) ID: CVE-2022-24507 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24507
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.