Test ID:	1.3.6.1.4.1.25623.1.0.832300
Category:	Windows : Microsoft Bulletins
Title:	Microsoft Windows Multiple Vulnerabilities (KB5028240)
Summary:	This host is missing an important security; update according to Microsoft KB5028240
Description:	Summary: This host is missing an important security update according to Microsoft KB5028240 Vulnerability Insight: Multiple flaws exist due to: - A Remote Code Execution Vulnerability in Windows Routing and Remote Access Service (RRAS). - A Remote Code Execution Vulnerability in Microsoft Message Queuing. - A Remote Code Execution Vulnerability in Windows DNS Server. For more information about the vulnerabilities refer to Reference links. Vulnerability Impact: Successful exploitation will allow an attacker to elevate privileges, execute arbitrary commands, disclose information and conduct DoS attacks. Affected Software/OS: Microsoft Windows Server 2008 R2 for x64-based Systems Service Pack 1. Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-35299 Windows Common Log File System Driver Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35299 Common Vulnerability Exposure (CVE) ID: CVE-2023-32053 Windows Installer Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32053 Common Vulnerability Exposure (CVE) ID: CVE-2023-35366 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35366 Common Vulnerability Exposure (CVE) ID: CVE-2023-33154 Windows Partition Management Driver Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33154 Common Vulnerability Exposure (CVE) ID: CVE-2023-32044 Microsoft Message Queuing Denial of Service Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32044 Common Vulnerability Exposure (CVE) ID: CVE-2023-35367 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35367 Common Vulnerability Exposure (CVE) ID: CVE-2023-32057 Microsoft Message Queuing Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32057 Common Vulnerability Exposure (CVE) ID: CVE-2023-32055 Active Template Library Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32055 Common Vulnerability Exposure (CVE) ID: CVE-2023-33169 Remote Procedure Call Runtime Denial of Service Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33169 Common Vulnerability Exposure (CVE) ID: CVE-2023-36874 Windows Error Reporting Service Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36874 http://packetstormsecurity.com/files/174843/Microsoft-Error-Reporting-Local-Privilege-Elevation.html Common Vulnerability Exposure (CVE) ID: CVE-2023-35310 Windows DNS Server Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35310 Common Vulnerability Exposure (CVE) ID: CVE-2023-32054 Volume Shadow Copy Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32054 Common Vulnerability Exposure (CVE) ID: CVE-2023-35365 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35365 Common Vulnerability Exposure (CVE) ID: CVE-2023-32050 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32050 Common Vulnerability Exposure (CVE) ID: CVE-2023-33168 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33168 Common Vulnerability Exposure (CVE) ID: CVE-2023-35303 USB Audio Class System Driver Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35303 Common Vulnerability Exposure (CVE) ID: CVE-2023-32038 Microsoft ODBC Driver Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32038 Common Vulnerability Exposure (CVE) ID: CVE-2023-21526 Windows Netlogon Information Disclosure Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21526 Common Vulnerability Exposure (CVE) ID: CVE-2023-35309 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35309 Common Vulnerability Exposure (CVE) ID: CVE-2023-33174 Windows Cryptographic Information Disclosure Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33174 Common Vulnerability Exposure (CVE) ID: CVE-2023-35351 Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35351 Common Vulnerability Exposure (CVE) ID: CVE-2023-35350 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35350 Common Vulnerability Exposure (CVE) ID: CVE-2023-35346 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35346 Common Vulnerability Exposure (CVE) ID: CVE-2023-35345 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35345 Common Vulnerability Exposure (CVE) ID: CVE-2023-35344 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35344 Common Vulnerability Exposure (CVE) ID: CVE-2023-35342 Windows Image Acquisition Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35342 Common Vulnerability Exposure (CVE) ID: CVE-2023-35341 Microsoft DirectMusic Information Disclosure Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35341 Common Vulnerability Exposure (CVE) ID: CVE-2023-35340 Windows CNG Key Isolation Service Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35340 Common Vulnerability Exposure (CVE) ID: CVE-2023-35338 Windows Peer Name Resolution Protocol Denial of Service Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35338 Common Vulnerability Exposure (CVE) ID: CVE-2023-35332 Windows Remote Desktop Protocol Security Feature Bypass https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35332 Common Vulnerability Exposure (CVE) ID: CVE-2023-35330 Windows Extended Negotiation Denial of Service Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35330 Common Vulnerability Exposure (CVE) ID: CVE-2023-35328 Windows Transaction Manager Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35328 Common Vulnerability Exposure (CVE) ID: CVE-2023-35322 Windows Deployment Services Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35322 Common Vulnerability Exposure (CVE) ID: CVE-2023-35321 Windows Deployment Services Denial of Service Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35321 Common Vulnerability Exposure (CVE) ID: CVE-2023-35319 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35319 Common Vulnerability Exposure (CVE) ID: CVE-2023-35318 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35318 Common Vulnerability Exposure (CVE) ID: CVE-2023-35316 Remote Procedure Call Runtime Information Disclosure Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35316 Common Vulnerability Exposure (CVE) ID: CVE-2023-35314 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35314 Common Vulnerability Exposure (CVE) ID: CVE-2023-35312 Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35312 Common Vulnerability Exposure (CVE) ID: CVE-2023-35300 Remote Procedure Call Runtime Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35300 Common Vulnerability Exposure (CVE) ID: CVE-2023-35297 Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35297 Common Vulnerability Exposure (CVE) ID: CVE-2023-32046 Windows MSHTML Platform Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32046 http://seclists.org/fulldisclosure/2023/Jul/43 Common Vulnerability Exposure (CVE) ID: CVE-2023-32045 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32045 Common Vulnerability Exposure (CVE) ID: CVE-2023-32043 Windows Remote Desktop Security Feature Bypass Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32043 Common Vulnerability Exposure (CVE) ID: CVE-2023-32042 OLE Automation Information Disclosure Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32042 Common Vulnerability Exposure (CVE) ID: CVE-2023-32035 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32035 Common Vulnerability Exposure (CVE) ID: CVE-2023-32034 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32034 Common Vulnerability Exposure (CVE) ID: CVE-2023-32033 Microsoft Failover Cluster Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32033 Common Vulnerability Exposure (CVE) ID: CVE-2023-33173 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33173 Common Vulnerability Exposure (CVE) ID: CVE-2023-33172 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33172 Common Vulnerability Exposure (CVE) ID: CVE-2023-33167 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33167 Common Vulnerability Exposure (CVE) ID: CVE-2023-33166 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33166 Common Vulnerability Exposure (CVE) ID: CVE-2023-33164 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33164 Common Vulnerability Exposure (CVE) ID: CVE-2023-33163 Windows Network Load Balancing Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33163
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.