Microsoft Windows Multiple Vulnerabilities (KB5018457)

This host is missing an important security update according to Microsoft KB5018457 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in several components of Windows. The vulnerabilities allow a malicious party to perform attacks that result in the following categories of damage: Denial-of-Service DoS Circumvention of security measure Remote code execution User rights Access to sensitive dat...

CVE-2022-37976

Active Directory Certificate Services Elevation of Privilege Vulnerability...

CVE-2022-37976

Active Directory Certificate Services Elevation of Privilege Vulnerability...

CVE-2022-37976 Active Directory Certificate Services Elevation of Privilege Vulnerability

...

CVE-2022-37976

CVE-2022-37976 is an Elevation of Privilege in Windows Active Directory Certificate Services (AD CS). A malicious DCOM client can force a AD CS server to authenticate to it over the network, potentially using those credentials to perform a cross-protocol attack. This could allow an attacker to ob...