Security Updates for Sysinternals Sysmon (December 2022)

The Sysinternals Sysmon installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2022-44704 %NASLMINLEVEL 80900 C Tenable Networ...

CVE-2022-44704 Microsoft Windows System Monitor (Sysmon) Elevation of Privilege Vulnerability

...

CVE-2022-44704

CVE-2022-44704 is a Windows Sysmon (Sysinternals) vulnerability. The root cause is a bug in Sysmon’s ClipboardChange handling via RPC, enabling a user to escalate privileges on the local system. Multiple sources describe it as an elevation of privilege flaw in Sysmon, with PoCs and public advisor...

CVE-2022-44704 Microsoft Windows System Monitor (Sysmon) Elevation of Privilege Vulnerability

...