ID de Prueba:	1.3.6.1.4.1.25623.1.0.832581
Categoría:	Windows : Microsoft Bulletins
Título:	Microsoft Windows Multiple Vulnerabilities (KB5032196)
Resumen:	This host is missing an important security; update according to Microsoft KB5032196
Descripción:	Summary: This host is missing an important security update according to Microsoft KB5032196 Vulnerability Insight: Multiple flaws exist due to: - Windows SmartScreen Security Feature Bypass Vulnerability. - Windows Search Service Elevation of Privilege Vulnerability. Please see the references for more information about the vulnerabilities. Vulnerability Impact: Successful exploitation will allow an attacker to elevate privileges, execute arbitrary commands, bypass security restrictions, disclose information and conduct DoS attacks on an affeted system. Affected Software/OS: - Microsoft Windows 10 Version 1809 for 32-bit Systems - Microsoft Windows 10 Version 1809 for x64-based Systems - Microsoft Windows Server 2019 Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2023-36025 Windows SmartScreen Security Feature Bypass Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36025 Common Vulnerability Exposure (CVE) ID: CVE-2023-36394 Windows Search Service Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36394 Common Vulnerability Exposure (CVE) ID: CVE-2023-36424 Windows Common Log File System Driver Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36424 Common Vulnerability Exposure (CVE) ID: CVE-2023-36393 Windows User Interface Application Core Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36393 Common Vulnerability Exposure (CVE) ID: CVE-2023-36028 Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36028 Common Vulnerability Exposure (CVE) ID: CVE-2023-36719 Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36719 Common Vulnerability Exposure (CVE) ID: CVE-2023-36403 Windows Kernel Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36403 http://packetstormsecurity.com/files/176209/Windows-Kernel-Race-Conditions.html Common Vulnerability Exposure (CVE) ID: CVE-2023-36423 Microsoft Remote Registry Service Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36423 Common Vulnerability Exposure (CVE) ID: CVE-2023-36392 DHCP Server Service Denial of Service Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36392 Common Vulnerability Exposure (CVE) ID: CVE-2023-36427 Windows Hyper-V Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36427 Common Vulnerability Exposure (CVE) ID: CVE-2023-36404 Windows Kernel Information Disclosure Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36404 http://packetstormsecurity.com/files/176110/Windows-Kernel-Information-Disclosure.html Common Vulnerability Exposure (CVE) ID: CVE-2023-36395 Windows Deployment Services Denial of Service Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36395 Common Vulnerability Exposure (CVE) ID: CVE-2023-36408 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36408 Common Vulnerability Exposure (CVE) ID: CVE-2023-36047 Windows Authentication Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36047 Common Vulnerability Exposure (CVE) ID: CVE-2023-24023 https://dl.acm.org/doi/10.1145/3576915.3623066 https://www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/bluffs-vulnerability/ Common Vulnerability Exposure (CVE) ID: CVE-2023-36405 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36405 Common Vulnerability Exposure (CVE) ID: CVE-2023-36400 Windows HMAC Key Derivation Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36400 Common Vulnerability Exposure (CVE) ID: CVE-2023-36705 Windows Installer Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36705 Common Vulnerability Exposure (CVE) ID: CVE-2023-36401 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36401 Common Vulnerability Exposure (CVE) ID: CVE-2023-36428 Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36428 Common Vulnerability Exposure (CVE) ID: CVE-2023-36402 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36402 Common Vulnerability Exposure (CVE) ID: CVE-2023-36425 Windows Distributed File System (DFS) Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36425 Common Vulnerability Exposure (CVE) ID: CVE-2023-36397 Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36397 Common Vulnerability Exposure (CVE) ID: CVE-2023-36017 Windows Scripting Engine Memory Corruption Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36017 Common Vulnerability Exposure (CVE) ID: CVE-2023-36033 Windows DWM Core Library Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36033 Common Vulnerability Exposure (CVE) ID: CVE-2023-36036 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36036 Common Vulnerability Exposure (CVE) ID: CVE-2023-36398 Windows NTFS Information Disclosure Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36398
Copyright	Copyright (C) 2023 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.