Test ID:	1.3.6.1.4.1.25623.1.0.832354
Category:	Windows : Microsoft Bulletins
Title:	Microsoft Windows Multiple Vulnerabilities (KB5009566)
Summary:	This host is missing an important security; update according to Microsoft KB5009566
Description:	Summary: This host is missing an important security update according to Microsoft KB5009566 Vulnerability Insight: Multiple flaws exist due to: - Windows Modern Execution Server Remote Code Execution Vulnerability. - Windows Resilient File System (ReFS) Remote Code Execution Vulnerability. - HTTP Protocol Stack Remote Code Execution Vulnerability. For more information about the vulnerabilities refer to Reference links. Vulnerability Impact: Successful exploitation would allow an attacker to elevate privileges, execute arbitrary commands, bypass security feature, disclose information and conduct DoS attacks. Affected Software/OS: Microsoft Windows 11 version 21H2 for x64-based Systems. Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2022-21889 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21889 Common Vulnerability Exposure (CVE) ID: CVE-2022-21888 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21888 Common Vulnerability Exposure (CVE) ID: CVE-2022-21885 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21885 Common Vulnerability Exposure (CVE) ID: CVE-2022-21963 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21963 Common Vulnerability Exposure (CVE) ID: CVE-2022-21913 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21913 Common Vulnerability Exposure (CVE) ID: CVE-2022-21959 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21959 Common Vulnerability Exposure (CVE) ID: CVE-2022-21908 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21908 Common Vulnerability Exposure (CVE) ID: CVE-2022-21907 http://packetstormsecurity.com/files/166730/Microsoft-HTTP-Protocol-Stack-Denial-Of-Service.html https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21907 Common Vulnerability Exposure (CVE) ID: CVE-2022-21906 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21906 Common Vulnerability Exposure (CVE) ID: CVE-2022-21960 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21960 Common Vulnerability Exposure (CVE) ID: CVE-2022-21924 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21924 Common Vulnerability Exposure (CVE) ID: CVE-2022-21882 http://packetstormsecurity.com/files/166169/Win32k-ConsoleControl-Offset-Confusion-Privilege-Escalation.html https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21882 Common Vulnerability Exposure (CVE) ID: CVE-2022-21897 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21897 Common Vulnerability Exposure (CVE) ID: CVE-2022-21962 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21962 Common Vulnerability Exposure (CVE) ID: CVE-2022-21896 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21896 Common Vulnerability Exposure (CVE) ID: CVE-2022-21887 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21887 Common Vulnerability Exposure (CVE) ID: CVE-2022-21901 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21901 Common Vulnerability Exposure (CVE) ID: CVE-2022-21881 http://packetstormsecurity.com/files/168097/Race-Against-The-Sandbox.html https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21881 Common Vulnerability Exposure (CVE) ID: CVE-2022-21900 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21900 Common Vulnerability Exposure (CVE) ID: CVE-2022-21894 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21894 Common Vulnerability Exposure (CVE) ID: CVE-2022-21883 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21883 Common Vulnerability Exposure (CVE) ID: CVE-2022-21928 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21928 Common Vulnerability Exposure (CVE) ID: CVE-2022-21892 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21892 Common Vulnerability Exposure (CVE) ID: CVE-2022-21874 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21874 Common Vulnerability Exposure (CVE) ID: CVE-2022-21961 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21961 Common Vulnerability Exposure (CVE) ID: CVE-2022-21958 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21958 Common Vulnerability Exposure (CVE) ID: CVE-2022-21905 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21905 Common Vulnerability Exposure (CVE) ID: CVE-2022-21902 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21902 Common Vulnerability Exposure (CVE) ID: CVE-2022-21893 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21893 Common Vulnerability Exposure (CVE) ID: CVE-2022-21890 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21890 Common Vulnerability Exposure (CVE) ID: CVE-2022-21843 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21843 Common Vulnerability Exposure (CVE) ID: CVE-2022-21880 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21880 Common Vulnerability Exposure (CVE) ID: CVE-2022-21877 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21877 https://www.zerodayinitiative.com/advisories/ZDI-22-048/ Common Vulnerability Exposure (CVE) ID: CVE-2022-21876 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21876 https://www.zerodayinitiative.com/advisories/ZDI-22-051/ Common Vulnerability Exposure (CVE) ID: CVE-2022-21873 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21873 Common Vulnerability Exposure (CVE) ID: CVE-2022-21872 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21872 Common Vulnerability Exposure (CVE) ID: CVE-2022-21870 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21870 Common Vulnerability Exposure (CVE) ID: CVE-2022-21866 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21866 Common Vulnerability Exposure (CVE) ID: CVE-2022-21864 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21864 Common Vulnerability Exposure (CVE) ID: CVE-2022-21862 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21862 Common Vulnerability Exposure (CVE) ID: CVE-2022-21861 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21861 Common Vulnerability Exposure (CVE) ID: CVE-2022-21858 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21858 Common Vulnerability Exposure (CVE) ID: CVE-2022-21857 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21857 Common Vulnerability Exposure (CVE) ID: CVE-2022-21838 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21838 https://www.zerodayinitiative.com/advisories/ZDI-22-049/ Common Vulnerability Exposure (CVE) ID: CVE-2022-21836 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21836 Common Vulnerability Exposure (CVE) ID: CVE-2022-21835 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21835 Common Vulnerability Exposure (CVE) ID: CVE-2022-21834 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21834 Common Vulnerability Exposure (CVE) ID: CVE-2022-21833 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21833 Common Vulnerability Exposure (CVE) ID: CVE-2022-21915 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21915 Common Vulnerability Exposure (CVE) ID: CVE-2022-21914 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21914 Common Vulnerability Exposure (CVE) ID: CVE-2022-21916 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21916 Common Vulnerability Exposure (CVE) ID: CVE-2022-21918 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21918 Common Vulnerability Exposure (CVE) ID: CVE-2022-21919 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21919 Common Vulnerability Exposure (CVE) ID: CVE-2021-36976 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SE5NJQNM22ZE5Z55LPAGCUHSBQZBKMKC/ http://seclists.org/fulldisclosure/2022/Mar/27 http://seclists.org/fulldisclosure/2022/Mar/28 http://seclists.org/fulldisclosure/2022/Mar/29 https://security.gentoo.org/glsa/202208-26 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32375 https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libarchive/OSV-2021-557.yaml Common Vulnerability Exposure (CVE) ID: CVE-2021-22947 https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf https://security.netapp.com/advisory/ntap-20211029-0003/ https://support.apple.com/kb/HT213183 Debian Security Information: DSA-5197 (Google Search) https://www.debian.org/security/2022/dsa-5197 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/APOAK4X73EJTAPTSVT7IRVDMUWVXNWGD/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RWLEC6YVEM2HWUBX67SDGPSY4CQB72OE/ https://security.gentoo.org/glsa/202212-01 https://hackerone.com/reports/1334763 https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://www.oracle.com/security-alerts/cpuoct2021.html https://lists.debian.org/debian-lts-announce/2021/09/msg00022.html https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html Common Vulnerability Exposure (CVE) ID: CVE-2022-21852 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21852 Common Vulnerability Exposure (CVE) ID: CVE-2022-21851 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21851 Common Vulnerability Exposure (CVE) ID: CVE-2022-21850 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21850 Common Vulnerability Exposure (CVE) ID: CVE-2022-21849 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21849 Common Vulnerability Exposure (CVE) ID: CVE-2022-21848 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21848 Common Vulnerability Exposure (CVE) ID: CVE-2022-21871 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21871 Common Vulnerability Exposure (CVE) ID: CVE-2022-21920 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21920 Common Vulnerability Exposure (CVE) ID: CVE-2022-21921 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21921 Common Vulnerability Exposure (CVE) ID: CVE-2022-21922 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21922 Common Vulnerability Exposure (CVE) ID: CVE-2022-21847 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21847
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.