Test ID:	1.3.6.1.4.1.25623.1.0.832987
Category:	Windows : Microsoft Bulletins
Title:	Microsoft Windows Multiple Vulnerabilities (KB5037768)
Summary:	This host is missing an important security; update according to Microsoft KB5037768
Description:	Summary: This host is missing an important security update according to Microsoft KB5037768 Vulnerability Insight: These vulnerabilities exist: - CVE-2024-30040: Windows MSHTML Platform Security Feature Bypass Vulnerability - CVE-2024-30051: Windows DWM Core Library Elevation of Privilege Vulnerability Please see the references for more information on the vulnerabilities. Vulnerability Impact: Successful exploitation allows an attacker to elevate privileges, execute arbitrary commands, disclose information and bypass security restrictions. Affected Software/OS: - Microsoft Windows 10 Version 21H2 for 32-bit Systems - Microsoft Windows 10 Version 21H2 for x64-based Systems - Microsoft Windows 10 Version 22H2 for x64-based Systems - Microsoft Windows 10 Version 22H2 for 32-bit Systems Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2024-30040 Windows MSHTML Platform Security Feature Bypass Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30040 Common Vulnerability Exposure (CVE) ID: CVE-2024-30051 Windows DWM Core Library Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30051 Common Vulnerability Exposure (CVE) ID: CVE-2024-30049 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30049 Common Vulnerability Exposure (CVE) ID: CVE-2024-30038 Win32k Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30038 Common Vulnerability Exposure (CVE) ID: CVE-2024-30039 Windows Remote Access Connection Manager Information Disclosure Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30039 Common Vulnerability Exposure (CVE) ID: CVE-2024-30037 Windows Common Log File System Driver Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30037 Common Vulnerability Exposure (CVE) ID: CVE-2024-30035 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30035 Common Vulnerability Exposure (CVE) ID: CVE-2024-30034 Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30034 Common Vulnerability Exposure (CVE) ID: CVE-2024-30033 Windows Search Service Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30033 Common Vulnerability Exposure (CVE) ID: CVE-2024-30032 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30032 Common Vulnerability Exposure (CVE) ID: CVE-2024-30031 Windows CNG Key Isolation Service Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30031 Common Vulnerability Exposure (CVE) ID: CVE-2024-30029 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30029 Common Vulnerability Exposure (CVE) ID: CVE-2024-30028 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30028 Common Vulnerability Exposure (CVE) ID: CVE-2024-30027 NTFS Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30027 Common Vulnerability Exposure (CVE) ID: CVE-2024-30025 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30025 Common Vulnerability Exposure (CVE) ID: CVE-2024-30024 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30024 Common Vulnerability Exposure (CVE) ID: CVE-2024-29994 Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29994 Common Vulnerability Exposure (CVE) ID: CVE-2024-26238 Microsoft PLUGScheduler Scheduled Task Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26238 Common Vulnerability Exposure (CVE) ID: CVE-2024-30050 Windows Mark of the Web Security Feature Bypass Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30050 Common Vulnerability Exposure (CVE) ID: CVE-2024-30023 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30023 Common Vulnerability Exposure (CVE) ID: CVE-2024-30022 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30022 Common Vulnerability Exposure (CVE) ID: CVE-2024-30021 Windows Mobile Broadband Driver Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30021 Common Vulnerability Exposure (CVE) ID: CVE-2024-30020 Windows Cryptographic Services Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30020 Common Vulnerability Exposure (CVE) ID: CVE-2024-30018 Windows Kernel Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30018 Common Vulnerability Exposure (CVE) ID: CVE-2024-30017 Windows Hyper-V Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30017 Common Vulnerability Exposure (CVE) ID: CVE-2024-30016 Windows Cryptographic Services Information Disclosure Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30016 Common Vulnerability Exposure (CVE) ID: CVE-2024-30015 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30015 Common Vulnerability Exposure (CVE) ID: CVE-2024-30014 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30014 Common Vulnerability Exposure (CVE) ID: CVE-2024-30012 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30012 Common Vulnerability Exposure (CVE) ID: CVE-2024-30009 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30009 Common Vulnerability Exposure (CVE) ID: CVE-2024-30008 Windows DWM Core Library Information Disclosure Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30008 Common Vulnerability Exposure (CVE) ID: CVE-2024-30006 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30006 Common Vulnerability Exposure (CVE) ID: CVE-2024-30005 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30005 Common Vulnerability Exposure (CVE) ID: CVE-2024-30004 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30004 Common Vulnerability Exposure (CVE) ID: CVE-2024-30003 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30003 Common Vulnerability Exposure (CVE) ID: CVE-2024-30002 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30002 Common Vulnerability Exposure (CVE) ID: CVE-2024-30001 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30001 Common Vulnerability Exposure (CVE) ID: CVE-2024-30000 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30000 Common Vulnerability Exposure (CVE) ID: CVE-2024-29999 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29999 Common Vulnerability Exposure (CVE) ID: CVE-2024-29998 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29998 Common Vulnerability Exposure (CVE) ID: CVE-2024-29997 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29997 Common Vulnerability Exposure (CVE) ID: CVE-2024-29996 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29996
Copyright	Copyright (C) 2024 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.