CVE-2022-37976

Active Directory Certificate Services Elevation of Privilege Vulnerability...

CVE-2022-37976

Active Directory Certificate Services Elevation of Privilege Vulnerability...

CVE-2022-37978

Windows Active Directory Certificate Services Security Feature Bypass...

CVE-2022-37978

Windows Active Directory Certificate Services Security Feature Bypass...

Privilege escalation

Active Directory Domain Services Elevation of Privilege Vulnerability...

Privilege escalation

Active Directory Certificate Services Elevation of Privilege Vulnerability...

Security feature bypass

Windows Active Directory Certificate Services Security Feature Bypass...

Microsoft Patch Tuesday for October 2022 — Snort rules and prominent vulnerabilities

By Jon Munshaw and Vanja Svajcer. Microsoft released its monthly security update Tuesday, disclosing 83 vulnerabilities across the company’s hardware and software line, including seven critical issues in Windows’ point-to-point tunneling protocol. October's security update features 11 critical...

Windows Active Directory Certificate Services Security Feature Bypass

...

October 11, 2022—KB5018425 (OS Build 10240.19507) - EXPIRED

None None...

CVE-2022-38042: Undefined Security Weakness

Active Directory Domain Services Elevation of Privilege Vulnerability...

Microsoft Windows Active Directory Certificate Services security vulnerabilities

Microsoft Windows Active Directory is a centralized directory management service from Microsoft Corporation USA that is responsible for architecting large network environments. Microsoft Windows Active Directory is vulnerable to a certificate service security feature bypass. No details of the...

KB5018479: Windows 7 / Windows Server 2008 R2 Security Update (October 2022)

The remote Windows host is missing security update 5018479. It is, therefore, affected by multiple vulnerabilities - Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2022-38040 - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2022-37982,...

PT-2022-5785 · Microsoft · Active Directory Certificate Services +1

Name of the Vulnerable Software and Affected Versions: Active Directory Certificate Services affected versions not specified Description: The issue is related to insecure privilege management in Active Directory Certificate Services in Windows operating systems. It allows a remote attacker to...

CVE-2022-37976 Active Directory Certificate Services Elevation of Privilege Vulnerability

...

PT-2022-5295 · Microsoft · Windows Active Directory Domain Services +1

Name of the Vulnerable Software and Affected Versions: Windows Active Directory Domain Services affected versions not specified Description: The issue is related to insufficient access restrictions in the Active Directory Domain Services of the Windows operating system. It allows a remote attacke...

CVE-2022-37978: Undefined Security Weakness

Windows Active Directory Certificate Services Security Feature Bypass...

CVE-2022-37976: Undefined Security Weakness

Active Directory Certificate Services Elevation of Privilege Vulnerability...

CVE-2022-37978

CVE-2022-37978 is a Windows Active Directory Certificate Services security feature bypass (Circumvention of security measure) with CVSS v3.1 base score 7.5. Affected component: Active Directory Certificate Services in Windows. Root cause details are not fully disclosed in the provided connected d...

PT-2022-5753 · Microsoft · Windows Active Directory Certificate Services +1

Name of the Vulnerable Software and Affected Versions: Windows Active Directory Certificate Services affected versions not specified Description: The issue is related to insufficient access restrictions in the Active Directory Certificate Services component of Windows operating systems. It allows...