KB5012670: Windows 8.1 and Windows Server 2012 R2 Security Update (April 2022)

The remote Windows host is missing security update 5012639 or cumulative update 5012670. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2022-24474, CVE-2022-24481, CVE-2022-24494,...

KB5012666: Windows Server 2012 Security Update (April 2022)

The remote Windows host is missing security update 5012666 or cumulative update 5012650. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

KB5012649: Windows 7 and Windows Server 2008 R2 Security Update (April 2022)

The remote Windows host is missing security update 5012639 or cumulative update 5012639. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2022-24474, CVE-2022-24481, CVE-2022-24494,...

PT-2022-2771 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to synchronization errors in the Windows DNS Server component, specifically a "race condition" scenario. This can be exploited by a remote attacker to execut...

PT-2022-2867 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to incorrect code generation management in the DNS server of the Microsoft Windows operating system. It allows a remote attacker to execute arbitrary code,...

PT-2022-2769 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to a synchronization error in the Windows DNS Server component, specifically a "race condition" scenario. This can be exploited by a remote attacker to execu...

Microsoft DNS Server code injection vulnerability

Microsoft DNS Server is a service of Microsoft Corporation USA. A code injection vulnerability exists in Microsoft DNS Server. The following products and versions are affected:Windows Server 2016,Windows Server 2016 Server Core installation,Windows Server 2019,Windows Server 2019 Server Core...

Microsoft Windows App Store permission licensing and access control vulnerabilities

Microsoft Windows App Store is an application store for downloading software from Microsoft Corporation USA. A vulnerability exists in the Microsoft Windows App Store with privilege license and access control issues. The following products and editions are affected: Windows 10 Version 20H2 for...

Microsoft Windows Network File System code injection vulnerability

Microsoft Windows Network File System is a file sharing solution from Microsoft that allows you to transfer files between computers running Windows Server and UNIX operating systems using the NFS protocol. A code injection vulnerability exists in Microsoft Windows Network File System. The followi...

Microsoft DNS Server code injection vulnerability

Microsoft DNS Server is a service of Microsoft Corporation USA. A code injection vulnerability exists in Microsoft DNS Server. The following products and versions are affected:Windows Server 2022 Server Core installation,Windows Server, version 20H2 Server Core installation,Windows Server...

Microsoft DNS Server code injection vulnerability

Microsoft DNS Server is a service of Microsoft Corporation USA. A code injection vulnerability exists in Microsoft DNS Server. The following products and versions are affected:Windows Server 2019,Windows Server 2019 Server Core installation,Windows Server 2022,Windows Server 2022 Server Core...

Microsoft Windows Work Folder Service competitive condition issue vulnerability

Microsoft Windows Work Folder Service is a Microsoft Corporation USA role service for file servers running Windows Server that provides users with a consistent way to access their work files from their PCs and devices. A competitive conditions issue vulnerability exists in Microsoft Windows Work...

Microsoft Win32k: Vulnerabilities in permission handling and access control mechanisms

Microsoft Win32k is a system file for Windows multi-user administration by Microsoft Corporation USA. Microsoft Windows Win32K is vulnerable to privilege license and access control issues. The following products and editions are affected:Windows Server 2019,Windows Server 2019 Server Core...

Microsoft DNS Server contention issue vulnerability

Microsoft DNS Server is a service of Microsoft Corporation USA. Microsoft DNS Server is vulnerable to a competitive conditions issue. The following products and versions are affected:Windows Server, version 20H2 Server Core Installation,Windows Server 2016,Windows Server 2016 Server Core...

Microsoft Hyper-V information leakage vulnerability

Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. An information disclosure vulnerability exists in Microsoft Hyper-V. The following products and versions are affected:Windows Server 2022,Windows...

KB5012647: Windows 10 version 1809 / Windows Server 2019 Security Update (April 2022)

The remote Windows host is missing security update 5012591. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2022-26790, CVE-2022-26828, CVE-2022-26827, CVE-2022-26807, CVE-2022-26796,...

Microsoft Hyper-V Information Leakage Vulnerability

Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. An information disclosure vulnerability exists in Microsoft Hyper-V. The following products and versions are affected:Windows Server 2022,Windows...

Microsoft DNS Server code injection vulnerability

Microsoft DNS Server is a service of Microsoft Corporation USA. A code injection vulnerability exists in Microsoft DNS Server. The following products and versions are affected:Windows Server 2019,Windows Server 2019 Server Core installation,Windows Server 2022,Windows Server 2022 Server Core...

Microsoft DNS Server code injection vulnerability

Microsoft DNS Server is a service of Microsoft Corporation USA. A code injection vulnerability exists in Microsoft DNS Server. The following products and versions are affected: Windows Server 2008 for x64-based Systems Service Pack 2,Windows Server 2008 for x64-based Systems Service Pack 2 Server...

Microsoft DNS Server code injection vulnerability

Microsoft DNS Server is a service of Microsoft Corporation USA. A code injection vulnerability exists in Microsoft DNS Server. The following products and versions are affected:Windows Server 2019,Windows Server 2019 Server Core installation,Windows Server 2022,Windows Server 2022 Server Core...