KB5022346: Windows 8.1 Embedded and Windows Server 2012 R2 Security Update (January 2023)

The remote Windows host is missing security update 5022346. It is, therefore, affected by multiple vulnerabilities - Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2023-21732 - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2023-21681 - Window...

EUVD-2023-25841

Windows Advanced Local Procedure Call ALPC Elevation of Privilege Vulnerability...

KLA20158 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, execute arbitrary code, bypass security restrictions, obtain sensitive information. Below is a complete list of...

Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability

Microsoft Windows Advanced Local Procedure Call ALPC contains an unspecified vulnerability that allows for privilege escalation...

CVE-2023-21674

CVE-2023-21674 affects Windows Advanced Local Procedure Call (ALPC). The documented root cause is an Elevation of Privilege in ALPC that could enable browser sandbox escape and gain SYSTEM privileges. Public exploits exist (Kaspersky notes exploitation in the wild; a GitHub PoC is referenced), in...

CVE-2022-41100

Windows Advanced Local Procedure Call ALPC Elevation of Privilege Vulnerability...

CVE-2022-41093

Windows Advanced Local Procedure Call ALPC Elevation of Privilege Vulnerability...

CVE-2022-41045

Windows Advanced Local Procedure Call ALPC Elevation of Privilege Vulnerability...

Privilege escalation

Windows Advanced Local Procedure Call ALPC Elevation of Privilege Vulnerability...

Privilege escalation

Windows Advanced Local Procedure Call ALPC Elevation of Privilege Vulnerability...

Privilege escalation

Windows Advanced Local Procedure Call ALPC Elevation of Privilege Vulnerability...

CVE-2022-41100 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

...

CVE-2022-41093 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

...

CVE-2022-41045

Technical details about CVE-2022-41045 are not provided in the supplied documents. The connected records reference related Windows updates and KEV listings but do not specify affected products, root cause, or remediation.

CVE-2022-41045 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

...

CVE-2022-41100 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

...

CVE-2022-41093 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

...

CVE-2022-41093

Technical details for CVE-2022-41093 are not publicly available in the provided documents. No affected products, root cause, or fixes are described here. Monitor official advisories for updates on impact and remediation.

CVE-2022-41100

CVE-2022-41100 is a Windows ALPC Elevation of Privilege vulnerability. The Connected/OpenVAS documents confirm the CVE exists as part of Windows vulnerability listings and include it in multiple CVE compilations, but none provide concrete details on affected product versions, root cause specifics...

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

...