KB5017377: Windows Server 2012 Security Update (September 2022)

The remote Windows host is missing security update 5017377. It is, therefore, affected by multiple vulnerabilities - Windows Credential Roaming Service Elevation of Privilege Vulnerability CVE-2022-30170 - Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...

CVE-2021-44426

An issue was discovered in AnyDesk before 6.2.6 and 6.3.x before 6.3.5. An upload of an arbitrary file to a victim's local /Downloads/ directory is possible if the victim is using the AnyDesk Windows client to connect to a remote machine, if an attacker is also connected remotely with AnyDesk to...

Mozilla Thunderbird < 91.13

The version of Thunderbird installed on the remote Windows host is prior to 91.13. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-37 advisory. - Members the Mozilla Fuzzing Team reported memory safety bugs present in Thunderbird 102.1 and Thunderbird 91.12...

Microsoft Edge (Chromium) < 104.0.1293.63 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 104.0.1293.63. It is, therefore, affected by multiple vulnerabilities as referenced in the August 19, 2022 advisory. - Use after free in FedCM. CVE-2022-2852 - Heap buffer overflow in Downloads. CVE-2022-2853 - Use aft...

Mozilla Thunderbird < 91.12

The version of Thunderbird installed on the remote Windows host is prior to 91.12. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-31 advisory. - When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinat...

Mozilla Firefox ESR < 91.12

The version of Firefox ESR installed on the remote Windows host is prior to 91.12. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-29 advisory. - When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinat...

Google Chrome < 103.0.5060.134 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 103.0.5060.134. It is, therefore, affected by multiple vulnerabilities as referenced in the 202207stable-channel-update-for-desktop19 advisory. - Use after free in Views in Google Chrome prior to 103.0.5060.134 allowed ...

Google Chrome < 102.0.5005.115 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 102.0.5005.115. It is, therefore, affected by multiple vulnerabilities as referenced in the 202206stable-channel-update-for-desktop advisory. - Use after free in ANGLE in Google Chrome prior to 102.0.5005.115 allowed a...

Mozilla Firefox ESR < 91.9.1

The version of Firefox ESR installed on the remote Windows host is prior to 91.9.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-19 advisory. - If an attacker was able to corrupt the methods of an Array object in JavaScript via prototype pollution, they cou...

Adobe Photoshop 22.x < 22.5.7 / 23.x < 23.3 Multiple Vulnerabilities (APSB22-20)

The version of Adobe Photoshop installed on the remote Windows host is prior to 22.5.7/23.3. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb22-20 advisory. - Adobe Photoshop versions 22.5.6 and earlierand 23.2.2 and earlier are affected by a use-after-free...

Mozilla Firefox < 99.0

The version of Firefox installed on the remote Windows host is prior to 99.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-13 advisory. - Mozilla developers and community members Nika Layzell, Andrew McCreight, Gabriele Svelto, and the Mozilla Fuzzing Team...

Apple iTunes < 12.12.3 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.12.3. It is, therefore, affected by multiple vulnerabilities as referenced in the HT213188 advisory. - Processing a maliciously crafted image may lead to arbitrary code execution CVE-2022-22611 - Processing a...

Mozilla Firefox < 97.0

The version of Firefox installed on the remote Windows host is prior to 97.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-04 advisory. - Mozilla developers Paul Adenot and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 96 and Firef...

Adobe Reader < 17.011.30207 / 20.004.30020 / 21.011.20039 Multiple Vulnerabilities (APSB22-01)

The version of Adobe Reader installed on the remote Windows host is a version prior to 17.011.30207, 20.004.30020, or 21.011.20039. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader DC version 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and earlier a...

Wireshark 3.4.x < 3.4.11 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 3.4.11. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-3.4.11 advisory. - Crash in the Gryphon dissector in Wireshark 3.4.0 to 3.4.10 allows denial of service via packet injection or...

Apache Log4j JAR Detection (Windows)

Binary data apachelog4jwininstalled.nbin...

Mozilla Firefox ESR < 91.4.0

The version of Firefox ESR installed on the remote Windows host is prior to 91.4.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-53 advisory. - Mozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson Smith, Christian...

Adobe Animate 22.x < 22.0.0 Multiple Vulnerabilities (APSB21-105)

The version of Adobe Animate installed on the remote Windows host is prior to 22.0.0. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb21-105 advisory. - Adobe Animate version 21.0.9 and earlier are affected by an out-of-bounds write vulnerability that could result ...

Microsoft Edge (Chromium) < 93.0.961.52 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 93.0.961.52. It is, therefore, affected by multiple vulnerabilities as referenced in the September 16, 2021 advisory. - Use after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker...

Podcast: Why Securing Active Directory Is a Nightmare

This week, Microsoft rushed out a fix for a Windows NT LAN Manager exploit dubbed “PetitPotam” that forces remote Windows systems to reveal password hashes that can be easily cracked. The frenzy begs the question: Why is securing Microsoft Active Directory AD such a nightmare? When security...