February 14, 2023-KB5022735 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows Server 2022

None None...

KB5022842: Windows Server 2022 Security Update (February 2023)

The remote Windows host is missing security update 5022842. It is, therefore, affected by multiple vulnerabilities - Microsoft PostScript Printer Driver Remote Code Execution Vulnerability CVE-2023-21684, CVE-2023-21801 - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution...

Microsoft Windows Cryptographic Services security vulnerabilities

Microsoft Windows Cryptographic Services is an encryption service provider program from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Cryptographic Services. The following products and editions are affected:Windows 10 Version 1809 for x64-based Systems,Windows 10...

Microsoft Windows HTTP.Sys security vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows HTTP.sys. The following products and versions are affected: Windows Server 2022,Windows Server 2022 Server Core installation,Windows 1...

Microsoft Windows Active Directory security vulnerabilities

Microsoft Windows Active Directory is a centralized directory management service responsible for architecting medium- to large-scale network environments from the U.S. company Microsoft. Stores information about objects on the network and makes it easy for administrators and users to find and use...

Microsoft Windows Common Log File System Driver security vulnerabilities

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. A...

Microsoft Windows Distributed File System (DFS) security vulnerabilities

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation. A security vulnerability exists in the Microsoft Windows Distributed File System DFS. The following products and editions are affected:Windows 10 Version 1809 for 32-bit...

Microsoft Windows Cryptographic Services security vulnerabilities

Microsoft Windows Cryptographic Services is an encryption service provider program from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Cryptographic Services. The following products and versions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10...

Microsoft Windows MSHTML Platform security vulnerabilities

Microsoft Windows MSHTML Platform is an application from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows MSHTML Platform. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based Systems,Windo...

Microsoft Windows iSCSI security vulnerabilities

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows iSCSI. The following products and editions are affected:Windows Server 2012,Windows Server 2012 Server Core installation,Windows Serve...

Microsoft Windows iSCSI security vulnerabilities

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows iSCSI. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-bas...

Microsoft Graphics Component security vulnerabilities

Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. A security vulnerability exists in Microsoft Graphics Component. The following products and versions are affected: Windows Server 2022,Windows Server 2022 Server Core installation,Windows 10 Version 20H2 f...

CVE-2022-42973

A CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause local privilege escalation when local attacker connects to the database. Affected Products: APC Easy UPS Online Monitoring Software Windows 7, 10, 11 & Windows Server 2016, 2019, 2022 - Versions prior to V2.5-GA, APC...

Design/Logic Flaw

A CWE-732: Incorrect Permission Assignment for Critical Resource vulnerability exists that could cause local privilege escalation when a local attacker modifies the webroot directory. Affected Products: APC Easy UPS Online Monitoring Software Windows 7, 10, 11 & Windows Server 2016, 2019, 2022 -...

Hardcoded credentials

A CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause local privilege escalation when local attacker connects to the database. Affected Products: APC Easy UPS Online Monitoring Software Windows 7, 10, 11 & Windows Server 2016, 2019, 2022 - Versions prior to V2.5-GA, APC...

Authentication flaw

A CWE-306: Missing Authentication for Critical Function The software does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources. Affected Products: APC Easy UPS Online Monitoring Software Windows 7, 10, 11 & Windows...

CVE-2022-42972

A CWE-732: Incorrect Permission Assignment for Critical Resource vulnerability exists that could cause local privilege escalation when a local attacker modifies the webroot directory. Affected Products: APC Easy UPS Online Monitoring Software Windows 7, 10, 11 & Windows Server 2016, 2019, 2022 -...

November 8, 2022—KB5019081 (OS Build 20348.1249)

None None...

CVE-2023-21768

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability...

KB5022291: Windows Server 2022 Security Update (January 2023)

The remote Windows host is missing security update 5022291. It is, therefore, affected by multiple vulnerabilities - Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2023-21732 - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2023-21681 - Window...