Test ID:	1.3.6.1.4.1.25623.1.0.832581
Category:	Windows : Microsoft Bulletins
Title:	Microsoft Windows Multiple Vulnerabilities (KB5032196)
Summary:	This host is missing an important security; update according to Microsoft KB5032196
Description:	Summary: This host is missing an important security update according to Microsoft KB5032196 Vulnerability Insight: Multiple flaws exist due to: - Windows SmartScreen Security Feature Bypass Vulnerability. - Windows Search Service Elevation of Privilege Vulnerability. Please see the references for more information about the vulnerabilities. Vulnerability Impact: Successful exploitation will allow an attacker to elevate privileges, execute arbitrary commands, bypass security restrictions, disclose information and conduct DoS attacks on an affeted system. Affected Software/OS: - Microsoft Windows 10 Version 1809 for 32-bit Systems - Microsoft Windows 10 Version 1809 for x64-based Systems - Microsoft Windows Server 2019 Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-36025 Windows SmartScreen Security Feature Bypass Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36025 Common Vulnerability Exposure (CVE) ID: CVE-2023-36394 Windows Search Service Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36394 Common Vulnerability Exposure (CVE) ID: CVE-2023-36424 Windows Common Log File System Driver Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36424 Common Vulnerability Exposure (CVE) ID: CVE-2023-36393 Windows User Interface Application Core Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36393 Common Vulnerability Exposure (CVE) ID: CVE-2023-36028 Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36028 Common Vulnerability Exposure (CVE) ID: CVE-2023-36719 Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36719 Common Vulnerability Exposure (CVE) ID: CVE-2023-36403 Windows Kernel Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36403 http://packetstormsecurity.com/files/176209/Windows-Kernel-Race-Conditions.html Common Vulnerability Exposure (CVE) ID: CVE-2023-36423 Microsoft Remote Registry Service Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36423 Common Vulnerability Exposure (CVE) ID: CVE-2023-36392 DHCP Server Service Denial of Service Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36392 Common Vulnerability Exposure (CVE) ID: CVE-2023-36427 Windows Hyper-V Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36427 Common Vulnerability Exposure (CVE) ID: CVE-2023-36404 Windows Kernel Information Disclosure Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36404 http://packetstormsecurity.com/files/176110/Windows-Kernel-Information-Disclosure.html Common Vulnerability Exposure (CVE) ID: CVE-2023-36395 Windows Deployment Services Denial of Service Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36395 Common Vulnerability Exposure (CVE) ID: CVE-2023-36408 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36408 Common Vulnerability Exposure (CVE) ID: CVE-2023-36047 Windows Authentication Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36047 Common Vulnerability Exposure (CVE) ID: CVE-2023-24023 https://dl.acm.org/doi/10.1145/3576915.3623066 https://www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/bluffs-vulnerability/ Common Vulnerability Exposure (CVE) ID: CVE-2023-36405 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36405 Common Vulnerability Exposure (CVE) ID: CVE-2023-36400 Windows HMAC Key Derivation Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36400 Common Vulnerability Exposure (CVE) ID: CVE-2023-36705 Windows Installer Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36705 Common Vulnerability Exposure (CVE) ID: CVE-2023-36401 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36401 Common Vulnerability Exposure (CVE) ID: CVE-2023-36428 Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36428 Common Vulnerability Exposure (CVE) ID: CVE-2023-36402 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36402 Common Vulnerability Exposure (CVE) ID: CVE-2023-36425 Windows Distributed File System (DFS) Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36425 Common Vulnerability Exposure (CVE) ID: CVE-2023-36397 Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36397 Common Vulnerability Exposure (CVE) ID: CVE-2023-36017 Windows Scripting Engine Memory Corruption Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36017 Common Vulnerability Exposure (CVE) ID: CVE-2023-36033 Windows DWM Core Library Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36033 Common Vulnerability Exposure (CVE) ID: CVE-2023-36036 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36036 Common Vulnerability Exposure (CVE) ID: CVE-2023-36398 Windows NTFS Information Disclosure Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36398
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.