Windows Server 2022 Security Vulnerabilities

CVE-2023-23393

Windows BrokerInfrastructure Service Elevation of Privilege...

CVE-2023-23394

Client Server Run-Time Subsystem (CSRSS) Information Disclosure...

CVE-2023-23385

Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege...

CVE-2023-21708

Remote Procedure Call Runtime Remote Code Execution...

CVE-2023-1017

An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of service (crashing the TPM chip/process.....

CVE-2023-1018

An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can read or access sensitive data stored in the...

CVE-2023-21823

Windows Graphics Component Remote Code Execution...

CVE-2023-21808

.NET and Visual Studio Remote Code Execution...

CVE-2023-21820

Windows Distributed File System (DFS) Remote Code Execution...

CVE-2023-21812

Windows Common Log File System Driver Elevation of Privilege...

CVE-2023-21816

Windows Active Directory Domain Services API Denial of Service...

CVE-2023-21813

Windows Secure Channel Denial of Service...

CVE-2023-21817

Windows Kerberos Elevation of Privilege...

CVE-2023-21818

Windows Secure Channel Denial of Service...

CVE-2023-23376

Windows Common Log File System Driver Elevation of Privilege...

CVE-2023-21819

Windows Secure Channel Denial of Service...

CVE-2023-21822

Windows Graphics Component Elevation of Privilege...

CVE-2023-21802

Windows Media Remote Code Execution...

CVE-2023-21811

Windows iSCSI Service Denial of Service...

CVE-2023-21799

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution...

CVE-2023-21804

Windows Graphics Component Elevation of Privilege...

CVE-2023-21805

Windows MSHTML Platform Remote Code Execution...

CVE-2023-21797

Microsoft ODBC Driver Remote Code Execution...

CVE-2023-21798

Microsoft ODBC Driver Remote Code Execution...

CVE-2023-21801

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution...

CVE-2023-21722

.NET Framework Denial of Service...

CVE-2023-21695

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution...

CVE-2023-21694

Windows Fax Service Remote Code Execution...

CVE-2023-21693

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure...

CVE-2023-21702

Windows iSCSI Service Denial of Service...

CVE-2023-21700

Windows iSCSI Discovery Service Denial of Service...

CVE-2023-21701

Microsoft Protected Extensible Authentication Protocol (PEAP) Denial of Service...

CVE-2023-21688

NT OS Kernel Elevation of Privilege...

CVE-2023-21685

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution...

CVE-2023-21691

Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure...

CVE-2023-21687

HTTP.sys Information Disclosure...

CVE-2023-21692

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution...

CVE-2023-21684

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution...

CVE-2023-21689

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution...

CVE-2023-21686

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution...

CVE-2023-21690

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution...

CVE-2022-42973

A CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause local privilege escalation when local attacker connects to the database. Affected Products: APC Easy UPS Online Monitoring Software (Windows 7, 10, 11 & Windows Server 2016, 2019, 2022 - Versions prior to V2.5-GA), APC.....

CVE-2022-42972

A CWE-732: Incorrect Permission Assignment for Critical Resource vulnerability exists that could cause local privilege escalation when a local attacker modifies the webroot directory. Affected Products: APC Easy UPS Online Monitoring Software (Windows 7, 10, 11 & Windows Server 2016, 2019, 2022 -.....

CVE-2022-42970

A CWE-306: Missing Authentication for Critical Function The software does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources. Affected Products: APC Easy UPS Online Monitoring Software (Windows 7, 10, 11 & Windows...

CVE-2022-42971

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could cause remote code execution when the attacker uploads a malicious JSP file. Affected Products: APC Easy UPS Online Monitoring Software (Windows 7, 10, 11 & Windows Server 2016, 2019, 2022 - Versions prior to....

CVE-2023-21765

Windows Print Spooler Elevation of Privilege...

CVE-2023-21771

Windows Local Session Manager (LSM) Elevation of Privilege...

CVE-2023-21774

Windows Kernel Elevation of Privilege...

CVE-2023-21768

Windows Ancillary Function Driver for WinSock Elevation of Privilege...

CVE-2023-21776

Windows Kernel Information Disclosure...