WID-SEC-W-2023-2328

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Microsoft Windows und Microsoft Windows Server: Mehrere Schwachstellen

view advisory published 2023-09-12

Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Microsoft Windows und Microsoft Windows Server ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen und seine Rechte zu erweitern.

01

describes (21)

Related CVEs.

IDseverity exploitable
CVE-2023-38162US——
DHCP Server Service Denial of Service Vulnerability
CVE-2023-38161US——
Windows GDI Elevation of Privilege Vulnerability
CVE-2023-38160US——
Windows TCP/IP Information Disclosure Vulnerability
CVE-2023-38152US——
DHCP Server Service Information Disclosure Vulnerability
CVE-2023-38150US——
Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-38149US——
Windows TCP/IP Denial of Service Vulnerability
CVE-2023-38148US——
Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
CVE-2023-38147US——
Windows Miracast Wireless Display Remote Code Execution Vulnerability
CVE-2023-38146US—Exploit
Windows Themes Remote Code Execution Vulnerability
CVE-2023-38144US——
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2023-38143US——
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2023-38142US——
Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-38141US——
Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-38140US——
Windows Kernel Information Disclosure Vulnerability
CVE-2023-38139US——
Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-36805US——
Windows MSHTML Platform Security Feature Bypass Vulnerability
CVE-2023-36804US——
Windows GDI Elevation of Privilege Vulnerability
CVE-2023-36803US——
Windows Kernel Information Disclosure Vulnerability
CVE-2023-36802US—OT criticalKEV
Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability
CVE-2023-36801US——
DHCP Server Service Information Disclosure Vulnerability
showing 20 of 21
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan