Guidance on Microsoft Signed Drivers Being Used Maliciously

🗓️ 11 Jul 2023 07:00:00Reported by MicrosoftType

mscve

mscve🔗 msrc.microsoft.com👁 17 Views

Microsoft drivers misused for post-exploitation, impact limited. Suspended accounts, blocked detections, and security updates released

Vulners

Node

microsoft windows_server_2012_r2Range<6.3.9600.21503

OR

microsoft windows_server_2012_r2Range<6.3.9600.21503

OR

microsoft windows_server_2012_r2Range<6.3.9600.21503

OR

microsoft windows_server_2012_r2Range<6.3.9600.21503

OR

microsoft windows_server_2012Range<6.2.9200.24414

OR

microsoft windows_server_2012Range<6.2.9200.24414

OR

microsoft windows_server_2012Range<6.2.9200.24414

OR

microsoft windows_server_2012Range<6.2.9200.24414

OR

microsoft windows_server_2008_r2Range<6.1.7601.26664

OR

microsoft windows_server_2008_r2Range<6.1.7601.26664

OR

microsoft windows_server_2008_r2Range<6.1.7601.26664

OR

microsoft windows_server_2008_r2Range<6.1.7601.26664

OR

microsoft windows_server_2008_sp2Range<6.0.6003.22216

OR

microsoft windows_server_2008_sp2Range<6.0.6003.22216

OR

microsoft windows_server_2008_sp2Range<6.0.6003.22216

OR

microsoft windows_server_2008_sp2Range<6.0.6003.22216

OR

microsoft windows_server_2008_sp2Range<6.0.6003.22216

OR

microsoft windows_server_2008_sp2Range<6.0.6003.22216

OR

microsoft windows_server_2008_sp2Range<6.0.6003.22216

OR

microsoft windows_server_2008_sp2Range<6.0.6003.22216

OR

microsoft windows_server_2016Range<10.0.14393.6167

OR

microsoft windows_server_2016Range<10.0.14393.6167

OR

microsoft windows_10_1607Range<10.0.14393.6167

OR

microsoft windows_10_1607Range<10.0.14393.6167

OR

microsoft windows_10_1507Range<10.0.10240.20107

OR

microsoft windows_10_1507Range<10.0.10240.20107

OR

microsoft windows_10_22h2Range<10.0.19045.3324

OR

microsoft windows_10_22h2Range<10.0.19045.3324

OR

microsoft windows_10_22h2Range<10.0.19045.3324

OR

microsoft windows_11_22h2Range<10.0.22621.2134

OR

microsoft windows_11_22h2Range<10.0.22621.2134

OR

microsoft windows_10_21h2Range<10.0.19044.3324

OR

microsoft windows_10_21h2Range<10.0.19044.3324

OR

microsoft windows_10_21h2Range<10.0.19044.3324

OR

microsoft windows_11_21h2Range<10.0.22000.2295

OR

microsoft windows_11_21h2Range<10.0.22000.2295

OR

microsoft windows_server_2022Range<10.0.20348.1906

OR

microsoft windows_server_2022Range<10.0.20348.1906

OR

microsoft windows_server_2019Range<10.0.17763.4737

OR

microsoft windows_server_2019Range<10.0.17763.4737

OR

microsoft windows_10_1809Range<10.0.17763.4737

OR

microsoft windows_10_1809Range<10.0.17763.4737

OR

microsoft windows_10_1809Range<10.0.17763.4737

08 Aug 2023 07:00Current

7.1High risk

Vulners AI Score7.1

microsoft post-exploitation malicious drivers administrative privileges suspended accounts security updates blocking detections windows defender microsoft partner center driver block rules hypervisor-protected code integrity