ID de Prueba:	1.3.6.1.4.1.25623.1.0.832867
Categoría:	Windows : Microsoft Bulletins
Título:	Microsoft Windows Multiple Vulnerabilities (KB5035853)
Resumen:	This host is missing an important security; update according to Microsoft KB5035853
Descripción:	Summary: This host is missing an important security update according to Microsoft KB5035853 Vulnerability Insight: These vulnerabilities exist: - CVE-2024-26174: Windows Kernel Information Disclosure Vulnerability - CVE-2024-21451: Microsoft ODBC Driver Remote Code Execution Vulnerability Please see the references for more information on the vulnerabilities. Vulnerability Impact: Successful exploitation will allow an attacker to elevate privileges, execute arbitrary commands, disclose information, bypass security restrictions and conduct denial of service attacks. Affected Software/OS: - Microsoft Windows 11 version 22H2 for x64-based Systems - Microsoft Windows 11 Version 23H2 for x64-based Systems Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2024-21430 Windows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21430 Common Vulnerability Exposure (CVE) ID: CVE-2023-28746 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EIUICU6CVJUIB6BPJ7P5QTPQR5VOBHFK/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZON4TLXG7TG4A2XZG563JMVTGQW4SF3A/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H63LGAQXPEVJOES73U4XK65I6DASOAAG/ https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00898.html https://lists.debian.org/debian-lts-announce/2024/05/msg00003.html http://www.openwall.com/lists/oss-security/2024/03/12/13 Common Vulnerability Exposure (CVE) ID: CVE-2024-26174 Windows Kernel Information Disclosure Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26174 Common Vulnerability Exposure (CVE) ID: CVE-2024-26170 Windows Composite Image File System (CimFS) Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26170 Common Vulnerability Exposure (CVE) ID: CVE-2024-26161 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26161 Common Vulnerability Exposure (CVE) ID: CVE-2024-21451 Microsoft ODBC Driver Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21451 Common Vulnerability Exposure (CVE) ID: CVE-2024-21443 Windows Kernel Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21443 Common Vulnerability Exposure (CVE) ID: CVE-2024-21442 Windows USB Print Driver Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21442 Common Vulnerability Exposure (CVE) ID: CVE-2024-21441 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21441 Common Vulnerability Exposure (CVE) ID: CVE-2024-21439 Windows Telephony Server Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21439 Common Vulnerability Exposure (CVE) ID: CVE-2024-21438 Microsoft AllJoyn API Denial of Service Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21438 Common Vulnerability Exposure (CVE) ID: CVE-2024-21437 Windows Graphics Component Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21437 Common Vulnerability Exposure (CVE) ID: CVE-2024-21435 Windows OLE Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21435 Common Vulnerability Exposure (CVE) ID: CVE-2024-21434 Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21434 Common Vulnerability Exposure (CVE) ID: CVE-2024-21433 Windows Print Spooler Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21433 Common Vulnerability Exposure (CVE) ID: CVE-2024-21429 Windows USB Hub Driver Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21429 Common Vulnerability Exposure (CVE) ID: CVE-2024-26190 Microsoft QUIC Denial of Service Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26190 Common Vulnerability Exposure (CVE) ID: CVE-2024-26185 Windows Compressed Folder Tampering Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26185 Common Vulnerability Exposure (CVE) ID: CVE-2024-26181 Windows Kernel Denial of Service Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26181 Common Vulnerability Exposure (CVE) ID: CVE-2024-26178 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26178 Common Vulnerability Exposure (CVE) ID: CVE-2024-26177 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26177 Common Vulnerability Exposure (CVE) ID: CVE-2024-26176 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26176 Common Vulnerability Exposure (CVE) ID: CVE-2024-26173 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26173 Common Vulnerability Exposure (CVE) ID: CVE-2024-26169 Windows Error Reporting Service Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26169 Common Vulnerability Exposure (CVE) ID: CVE-2024-26166 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26166 Common Vulnerability Exposure (CVE) ID: CVE-2024-26162 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26162 Common Vulnerability Exposure (CVE) ID: CVE-2024-26160 Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26160 Common Vulnerability Exposure (CVE) ID: CVE-2024-26159 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26159 Common Vulnerability Exposure (CVE) ID: CVE-2024-21450 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21450 Common Vulnerability Exposure (CVE) ID: CVE-2024-21446 NTFS Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21446 Common Vulnerability Exposure (CVE) ID: CVE-2024-21445 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21445 Common Vulnerability Exposure (CVE) ID: CVE-2024-21444 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21444 Common Vulnerability Exposure (CVE) ID: CVE-2024-21440 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21440 Common Vulnerability Exposure (CVE) ID: CVE-2024-21436 Windows Installer Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21436 Common Vulnerability Exposure (CVE) ID: CVE-2024-21432 Windows Update Stack Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21432 Common Vulnerability Exposure (CVE) ID: CVE-2024-21431 Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21431 Common Vulnerability Exposure (CVE) ID: CVE-2024-21427 Windows Kerberos Security Feature Bypass Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21427 Common Vulnerability Exposure (CVE) ID: CVE-2024-21408 Windows Hyper-V Denial of Service Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21408 Common Vulnerability Exposure (CVE) ID: CVE-2024-21407 Windows Hyper-V Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21407
Copyright	Copyright (C) 2024 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.