KB5029263: Windows 11 version 22H2 Security Update (August 2023)

The remote Windows host is missing security update 5029263. It is, therefore, affected by multiple vulnerabilities - Microsoft Message Queuing Remote Code Execution Vulnerability CVE-2023-35385, CVE-2023-36910, CVE-2023-36911 - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution...

KB5029308: Windows Server 2012 Security Update (August 2023)

The remote Windows host is missing security update 5029308. It is, therefore, affected by multiple vulnerabilities - Microsoft Message Queuing Remote Code Execution Vulnerability CVE-2023-35385, CVE-2023-36910, CVE-2023-36911 - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution...

KB5029304: Windows Server 2012 R2 Security Update (August 2023)

The remote Windows host is missing security update 5029304. It is, therefore, affected by multiple vulnerabilities - Microsoft Message Queuing Remote Code Execution Vulnerability CVE-2023-35385, CVE-2023-36910, CVE-2023-36911 - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution...

PT-2023-4294 · Microsoft · Ole Db +1

Name of the Vulnerable Software and Affected Versions: Microsoft OLE DB affected versions not specified Description: The issue is related to insufficient input validation in Microsoft OLE DB, allowing remote attackers to execute arbitrary code and affect the system. Recommendations: At the moment...

Security Updates for Microsoft SQL Server OLE DB Driver (June 2023)

The Microsoft SQL Server driver installation on the remote host is missing a security update. It is, therefore, affected by remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for...

CVE-2023-35323

Windows OLE Remote Code Execution Vulnerability...

CVE-2023-32042

OLE Automation Information Disclosure Vulnerability...

CVE-2023-32042

OLE Automation Information Disclosure Vulnerability...

CVE-2023-32042

OLE Automation Information Disclosure Vulnerability...

Remote code execution

Windows OLE Remote Code Execution Vulnerability...

Information disclosure

OLE Automation Information Disclosure Vulnerability...

CVE-2023-35323 Windows OLE Remote Code Execution Vulnerability

...

CVE-2023-35323

CVE-2023-35323 is a Windows OLE Remote Code Execution vulnerability. Public exploits exist per third-party advisories. Microsoft released updates (e.g., KB5028182, KB5028171 and related KBs) addressing this, affecting Windows client/server platforms; apply the updated security patches to mitigate.

CVE-2023-35323 Windows OLE Remote Code Execution Vulnerability

...

CVE-2023-32042

Technical details about CVE-2023-32042 are not publicly provided in the supplied documents. No affected products, root cause, or remediation are specified here. Monitor for updates as connected sources do not elaborate.

CVE-2023-32042 OLE Automation Information Disclosure Vulnerability

...

CVE-2023-32042 OLE Automation Information Disclosure Vulnerability

...

OLE Automation Information Disclosure Vulnerability

...

Windows OLE Remote Code Execution Vulnerability

...

PT-2023-3920 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the Windows OLE technology, which allows binding and embedding objects into other documents and objects. This can lead to remote cod...