Guidance on Microsoft Signed Drivers Being Used Maliciously

🗓️ 13 Dec 2022 08:00:00Reported by MicrosoftType

mscve

mscve🔗 msrc.microsoft.com👁 24 Views

Microsoft drivers used maliciously, suspends accounts, releases security updates, recommends action

Vulners

Node

microsoft windows_server_2012_r2Range<6.3.9600.20778

OR

microsoft windows_server_2012_r2Range<6.3.9600.20778

OR

microsoft windows_server_2012_r2Range<6.3.9600.20778

OR

microsoft windows_server_2012_r2Range<6.3.9600.20778

OR

microsoft windows_server_2012Range<6.2.9200.24075

OR

microsoft windows_server_2012Range<6.2.9200.24075

OR

microsoft windows_server_2012Range<6.2.9200.24075

OR

microsoft windows_server_2012Range<6.2.9200.24075

OR

microsoft windows_server_2008_r2Range<6.1.7601.26321

OR

microsoft windows_server_2008_r2Range<6.1.7601.26321

OR

microsoft windows_server_2008_r2Range<6.1.7601.26321

OR

microsoft windows_server_2008_r2Range<6.1.7601.26321

OR

microsoft windows_server_2008_sp2Range<6.0.6003.21872

OR

microsoft windows_server_2008_sp2Range<6.0.6003.21872

OR

microsoft windows_server_2008_sp2Range<6.0.6003.21872

OR

microsoft windows_server_2008_sp2Range<6.0.6003.21872

OR

microsoft windows_server_2008_sp2Range<6.0.6003.21872

OR

microsoft windows_server_2008_sp2Range<6.0.6003.21872

OR

microsoft windows_server_2008_sp2Range<6.0.6003.21872

OR

microsoft windows_server_2008_sp2Range<6.0.6003.21872

OR

microsoft windows_rt_8.1Range<6.3.9600.20778

OR

microsoft windows_8.1Range<6.3.9600.20778

OR

microsoft windows_8.1Range<6.3.9600.20778

OR

microsoft windows_8.1Range<6.3.9600.20778

OR

microsoft windows_8.1Range<6.3.9600.20778

OR

microsoft windows_7Range<6.1.7601.26321

OR

microsoft windows_7Range<6.1.7601.26321

OR

microsoft windows_7Range<6.1.7601.26321

OR

microsoft windows_7Range<6.1.7601.26321

OR

microsoft windows_server_2016Range<10.0.14393.5648

OR

microsoft windows_server_2016Range<10.0.14393.5648

OR

microsoft windows_10_1607Range<10.0.14393.5648

OR

microsoft windows_10_1607Range<10.0.14393.5648

OR

microsoft windows_10_1507Range<10.0.10240.19685

OR

microsoft windows_10_1507Range<10.0.10240.19685

OR

microsoft windows_10_22h2Range<10.0.19045.2486

OR

microsoft windows_10_22h2Range<10.0.19045.2486

OR

microsoft windows_10_22h2Range<10.0.19045.2486

OR

microsoft windows_11_22h2Range<10.0.22621.1105

OR

microsoft windows_11_22h2Range<10.0.22621.1105

OR

microsoft windows_10_21h2Range<10.0.19044.2486

OR

microsoft windows_10_21h2Range<10.0.19044.2486

OR

microsoft windows_10_21h2Range<10.0.19044.2486

OR

microsoft windows_11_21h2Range<10.0.22000.1455

OR

microsoft windows_11_21h2Range<10.0.22000.1455

OR

microsoft windows_10_20h2Range<10.0.19042.2486

OR

microsoft windows_10_20h2Range<10.0.19042.2486

OR

microsoft windows_server_2022Range<10.0.20348.1487

OR

microsoft windows_server_2022Range<10.0.20348.1487

OR

microsoft windows_10_21h1Range<10.0.19043.2486

OR

microsoft windows_10_21h1Range<10.0.19043.2486

OR

microsoft windows_10_21h1Range<10.0.19043.2486

OR

microsoft windows_server_2019Range<10.0.17763.3887

OR

microsoft windows_server_2019Range<10.0.17763.3887

OR

microsoft windows_10_1809Range<10.0.17763.3887

OR

microsoft windows_10_1809Range<10.0.17763.3887

OR

microsoft windows_10_1809Range<10.0.17763.3887

10 Jan 2023 08:00Current

7.5High risk

Vulners AI Score7.5

microsoft malicious drivers suspension security updates recommendations investigation post-exploitation anti-virus endpoint detection hvci threat intelligence