Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in several components of Windows. The vulnerabilities allow a malicious party to perform attacks that result in the following categories of damage: Denial-of-Service DoS Circumvention of security measure Remote code execution User rights Access to sensitive dat...

Microsoft Windows Multiple Vulnerabilities (KB5018457)

This host is missing an important security update according to Microsoft KB5018457 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

CVE-2022-37976

Active Directory Certificate Services Elevation of Privilege Vulnerability...

CVE-2022-37976

Active Directory Certificate Services Elevation of Privilege Vulnerability...

CVE-2022-37976: Undefined Security Weakness

Active Directory Certificate Services Elevation of Privilege Vulnerability...

CVE-2022-37976 Active Directory Certificate Services Elevation of Privilege Vulnerability

...

CVE-2022-37976

CVE-2022-37976 is an Elevation of Privilege in Windows Active Directory Certificate Services (AD CS). A malicious DCOM client can force a AD CS server to authenticate to it over the network, potentially using those credentials to perform a cross-protocol attack. This could allow an attacker to ob...