WID-SEC-W-2023-1178

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Microsoft Windows und Microsoft Windows Server: Mehrere Schwachstellen

view advisory published 2023-05-09

Ein Angreifer kann mehrere Schwachstellen in Microsoft Windows und Microsoft Windows Server ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und seine Privilegien zu erweitern

01

describes (28)

Related CVEs.

IDseverity exploitable
CVE-2023-29341US——
AV1 Video Extension Remote Code Execution Vulnerability
CVE-2023-29340US——
AV1 Video Extension Remote Code Execution Vulnerability
CVE-2023-29336US—OT criticalKEV
Win32k Elevation of Privilege Vulnerability
CVE-2023-29325UShigh7.5—
Windows OLE Remote Code Execution Vulnerability
CVE-2023-29324USmedium6.5Exploit
Windows MSHTML Platform Security Feature Bypass Vulnerability
CVE-2023-28290US——
Microsoft Remote Desktop app for Windows Information Disclosure Vulnerability
CVE-2023-28283US——
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVE-2023-28251US——
Windows Driver Revocation List Security Feature Bypass Vulnerability
CVE-2023-24949US——
Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-24948US——
Windows Bluetooth Driver Elevation of Privilege Vulnerability
CVE-2023-24947US——
Windows Bluetooth Driver Remote Code Execution Vulnerability
CVE-2023-24946US——
Windows Backup Service Elevation of Privilege Vulnerability
CVE-2023-24945US——
Windows iSCSI Target Service Information Disclosure Vulnerability
CVE-2023-24944US——
Windows Bluetooth Driver Information Disclosure Vulnerability
CVE-2023-24943US——
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
CVE-2023-24942US——
Remote Procedure Call Runtime Denial of Service Vulnerability
CVE-2023-24941US——
Windows Network File System Remote Code Execution Vulnerability
CVE-2023-24940US——
Windows Pragmatic General Multicast (PGM) Denial of Service Vulnerability
CVE-2023-24939US——
Server for NFS Denial of Service Vulnerability
CVE-2023-24932US—OT elevatedExploit
Secure Boot Security Feature Bypass Vulnerability
showing 20 of 28
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan