WID-SEC-W-2022-2303

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Microsoft Windows und Microsoft Windows Server: Mehrere Schwachstellen

view advisory published 2022-12-13

Ein Angreifer kann mehrere Schwachstellen in Microsoft Windows und Microsoft Windows Server ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen und seine Privilegien zu erweitern.

01

describes (28)

Related CVEs.

IDseverity exploitable
CVE-2022-44710US——
DirectX Graphics Kernel Elevation of Privilege Vulnerability
CVE-2022-44707US——
Windows Kernel Denial of Service Vulnerability
CVE-2022-44698US—OT criticalKEV
Windows SmartScreen Security Feature Bypass Vulnerability
CVE-2022-44697US——
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2022-44689UShigh7.8—
Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability
CVE-2022-44687US——
Raw Image Extension Remote Code Execution Vulnerability
CVE-2022-44683US——
Windows Kernel Elevation of Privilege Vulnerability
CVE-2022-44682US——
Windows Hyper-V Denial of Service Vulnerability
CVE-2022-44681US——
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-44680US——
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2022-44679US——
Windows Graphics Component Information Disclosure Vulnerability
CVE-2022-44678US——
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-44677US——
Windows Projected File System Elevation of Privilege Vulnerability
CVE-2022-44676US——
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
CVE-2022-44675US——
Windows Bluetooth Driver Elevation of Privilege Vulnerability
CVE-2022-44674US——
Windows Bluetooth Driver Information Disclosure Vulnerability
CVE-2022-44673US——
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
CVE-2022-44671US——
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2022-44670US——
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
CVE-2022-44669US——
Windows Error Reporting Elevation of Privilege Vulnerability
showing 20 of 28
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan