CVE-2023-21535

CVE-2023-21535 is a Windows SSTP Remote Code Execution vulnerability. The affected component is Secure Socket Tunneling Protocol (SSTP); root cause details are not expanded beyond “SSTP RCE” in the provided documents, but the CVE is rated high (CVSS 8.1) with network access, high confidentiality/...

CVE-2023-21535 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

...

CVE-2023-21548 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

...

CVE-2023-21548

CVE-2023-21548 is a Windows SSTP remote code execution vulnerability. The connected NC Sc doc lists it under Windows SSTP with CVSS 8.10 (network context) and labels it as a SSTP issue; no explicit root-cause details or affected product versions are provided beyond “Windows SSTP.” The initial doc...

CVE-2023-21535 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

...

KLA20158 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, execute arbitrary code, bypass security restrictions, obtain sensitive information. Below is a complete list of...

Update now! Two zero-days fixed in 2022's last patch Tuesday

In numbers, the patch Tuesday of December 2022 is a relatively light one for Windows users. Microsoft patched 48 vulnerabilities with only six considered critical. But numbers are only half the story. Two of the updates are zero-days with one of them known to be actively exploited. Windows...

CVE-2022-44676

Windows Secure Socket Tunneling Protocol SSTP Remote Code Execution Vulnerability...

CVE-2022-44670

Windows Secure Socket Tunneling Protocol SSTP Remote Code Execution Vulnerability...

Remote code execution

Windows Secure Socket Tunneling Protocol SSTP Remote Code Execution Vulnerability...

Microsoft Patch Tuesday for December 2022 — Snort rules and prominent vulnerabilities

Microsoft released its monthly security update on Tuesday, disclosing 48 vulnerabilities. Of these vulnerabilities, 6 are classified as "Critical", 41 are classified as "Important", with the remaining vulnerability classified as "Moderate." One of the critical vulnerabilities, which Microsoft...

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

...

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

...

CVE-2022-44670 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

...

CVE-2022-44676 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

...

PT-2022-5857 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Secure Socket Tunneling Protocol SSTP in Windows operating systems, specifically concerning synchronization errors when using a shared...

CVE-2022-44676

Technical details for CVE-2022-44676 are not provided in the supplied documents. Public availability of affected products, root cause, and fixes cannot be confirmed here; monitor for updates from official sources.

CVE-2022-44670 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

...

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in several components of Windows. The vulnerabilities allow a malicious party to perform attacks that result in the following categories of damage: Denial-of-Service DoS Circumvention of security measure Remote code execution Administrator/Root rights Remote co...

CVE-2022-44670

CVE-2022-44670 affects Windows SSTP and allows remote code execution via a race condition in the SSTP/RAS handshake. An unauthenticated attacker could send a crafted SSTP connection request to a RAS server to achieve RCE. Public details in connected sources describe exploit path and patch context...