Microsoft Windows Multiple Vulnerabilities (KB5018419)

This host is missing an important security update according to Microsoft KB5018419 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

CVE-2022-38042

Active Directory Domain Services Elevation of Privilege Vulnerability...

CVE-2022-38042

Active Directory Domain Services Elevation of Privilege Vulnerability...

CVE-2022-38042

Active Directory Domain Services Elevation of Privilege Vulnerability...

CVE-2022-37978

Windows Active Directory Certificate Services Security Feature Bypass...

CVE-2022-37976

Active Directory Certificate Services Elevation of Privilege Vulnerability...

CVE-2022-37976

Active Directory Certificate Services Elevation of Privilege Vulnerability...

CVE-2022-37978

Windows Active Directory Certificate Services Security Feature Bypass...

CVE-2022-37978

Windows Active Directory Certificate Services Security Feature Bypass...

CVE-2022-37976

Active Directory Certificate Services Elevation of Privilege Vulnerability...

Privilege escalation

Active Directory Domain Services Elevation of Privilege Vulnerability...

Security feature bypass

Windows Active Directory Certificate Services Security Feature Bypass...

Privilege escalation

Active Directory Certificate Services Elevation of Privilege Vulnerability...

Microsoft Patch Tuesday for October 2022 — Snort rules and prominent vulnerabilities

By Jon Munshaw and Vanja Svajcer. Microsoft released its monthly security update Tuesday, disclosing 83 vulnerabilities across the company’s hardware and software line, including seven critical issues in Windows’ point-to-point tunneling protocol. October's security update features 11 critical...

Windows Active Directory Certificate Services Security Feature Bypass

...

October 11, 2022—KB5018425 (OS Build 10240.19507) - EXPIRED

None None...

PT-2022-5785 · Microsoft · Active Directory Certificate Services +1

Name of the Vulnerable Software and Affected Versions: Active Directory Certificate Services affected versions not specified Description: The issue is related to insecure privilege management in Active Directory Certificate Services in Windows operating systems. It allows a remote attacker to...

CVE-2022-37976 Active Directory Certificate Services Elevation of Privilege Vulnerability

...

CVE-2022-37978

CVE-2022-37978 is a Windows Active Directory Certificate Services security feature bypass (Circumvention of security measure) with CVSS v3.1 base score 7.5. Affected component: Active Directory Certificate Services in Windows. Root cause details are not fully disclosed in the provided connected d...

CVE-2022-37976

CVE-2022-37976 is an Elevation of Privilege in Windows Active Directory Certificate Services (AD CS). A malicious DCOM client can force a AD CS server to authenticate to it over the network, potentially using those credentials to perform a cross-protocol attack. This could allow an attacker to ob...