Windows 10 1507 Security Vulnerabilities - 2023

CVE-2022-35743

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

CVE-2022-35744

Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability

CVE-2022-35745

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

CVE-2022-35746

Windows Digital Media Receiver Elevation of Privilege Vulnerability

CVE-2022-35747

Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability

CVE-2022-35749

Windows Digital Media Receiver Elevation of Privilege Vulnerability

CVE-2022-35750

Win32k Elevation of Privilege Vulnerability

CVE-2022-35751

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2022-35752

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

CVE-2022-35753

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

CVE-2022-35754

Unified Write Filter Elevation of Privilege Vulnerability

CVE-2022-35755

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2022-35756

Windows Kerberos Elevation of Privilege Vulnerability

CVE-2022-35758

Windows Kernel Memory Information Disclosure Vulnerability

CVE-2022-35759

Windows Local Security Authority (LSA) Denial of Service Vulnerability

CVE-2022-38396

HP Factory Preinstalled Images on certain systems that shipped with Windows 10 versions 20H2 and earlier OS versions might allow escalation of privilege via execution of certain files outside the restricted path. This potential vulnerability was remediated starting with Windows 10 versions 21H2 on ...

CVE-2023-1017

An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of service (crashing the TPM chip/process o...

CVE-2023-1018

An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can read or access sensitive data stored in the TPM.

CVE-2023-20569

A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure.

CVE-2023-20588

A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality.

CVE-2023-21524

Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability

CVE-2023-21525

Remote Procedure Call Runtime Denial of Service Vulnerability

CVE-2023-21526

Windows Netlogon Information Disclosure Vulnerability

CVE-2023-21527

Windows iSCSI Service Denial of Service Vulnerability

CVE-2023-21532

Windows GDI Elevation of Privilege Vulnerability

CVE-2023-21535

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

CVE-2023-21537

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability

CVE-2023-21541

Windows Task Scheduler Elevation of Privilege Vulnerability

CVE-2023-21542

Windows Installer Elevation of Privilege Vulnerability

CVE-2023-21543

Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

CVE-2023-21546

Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

CVE-2023-21547

Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability

CVE-2023-21548

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

CVE-2023-21549

Windows SMB Witness Service Elevation of Privilege Vulnerability

CVE-2023-21552

Windows GDI Elevation of Privilege Vulnerability

CVE-2023-21554

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVE-2023-21555

Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

CVE-2023-21556

Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

CVE-2023-21557

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

CVE-2023-21558

Windows Error Reporting Service Elevation of Privilege Vulnerability

CVE-2023-21560

Windows Boot Manager Security Feature Bypass Vulnerability

CVE-2023-21561

Microsoft Cryptographic Services Elevation of Privilege Vulnerability

CVE-2023-21563

BitLocker Security Feature Bypass Vulnerability

CVE-2023-21674

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

CVE-2023-21675

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-21677

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

CVE-2023-21678

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2023-21679

Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

CVE-2023-21680

Windows Win32k Elevation of Privilege Vulnerability

CVE-2023-21681

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability