High 1 exploited CVE WID-SEC-2022-2303 28 CVEs

Microsoft Windows und Microsoft Windows Server: Mehrere Schwachstellen

Published Dec 13, 2022 · Updated Dec 27, 2022 · Revision 2 · de-DE

Vendor: Hitachi Vendor: Microsoft Product: Storage Virtual Storage Platform Product: Windows 10 Product: Windows 10 Version 1607 Product: Windows 10 Version 1809 Product: Windows 10 Version 20H2 Product: Windows 10 Version 21H1 Product: Windows 10 Version 21H2 Product: Windows 10 Version 22H2 Product: Windows 11 Product: Windows 11 version 22H2 Product: Windows 7 SP1 Product: Windows 8.1 Product: Windows Remote Desktop Client Product: Windows RT 8.1 Product: Windows Server 2008 R2 SP1 Product: Windows Server 2008 SP2 Product: Windows Server 2012 Product: Windows Server 2012 R2 Product: Windows Server 2016 Product: Windows Server 2019 Product: Windows Server 2022 Product: Windows Server 2022 Datacenter: Azure Edition Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Microsoft Windows und Microsoft Windows Server ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen und seine Privilegien zu erweitern.

Product

Windows ist ein Betriebssystem von Microsoft.
Microsoft Windows RT ist eine Version des Windows-Betriebssystems von Microsoft für Geräte basierend auf der ARM-Architektur, wie beispielsweise Tablet-Computer.

Vulnerabilities 28

Medium 5.4

CVE-2022-44698 Exploited · Ransomware EPSS 75%

Windows SmartScreen Security Feature Bypass Vulnerability

Windows SmartScreen Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows 10 Version 1809 Windows Server 2022 Windows

Dec 13, 2022
KEV Dec 13, 2022
High 8.5

CVE-2022-41076 EPSS 61%

PowerShell Remote Code Execution Vulnerability

PowerShell Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 13, 2022
High 8.1

CVE-2022-44670

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 13, 2022
High 8.1

CVE-2022-44676

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 13, 2022
High 7.8

CVE-2022-41077

Windows Fax Compose Form Elevation of Privilege Vulnerability

Windows Fax Compose Form Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 13, 2022
High 7.8

CVE-2022-41094

Windows Hyper-V Elevation of Privilege Vulnerability

Windows Hyper-V Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 13, 2022
High 7.8

CVE-2022-41121

Windows Graphics Component Elevation of Privilege Vulnerability

Windows Graphics Component Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 13, 2022
High 7.8

CVE-2022-44666 Public exploit EPSS 41%

Windows Contacts Remote Code Execution Vulnerability

Windows Contacts Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 13, 2022
High 7.8

CVE-2022-44667

Windows Media Remote Code Execution Vulnerability

Windows Media Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 13, 2022
High 7.8

CVE-2022-44668

Windows Media Remote Code Execution Vulnerability

Windows Media Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 13, 2022
High 7.8

CVE-2022-44671

Windows Graphics Component Elevation of Privilege Vulnerability

Windows Graphics Component Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 13, 2022
High 7.8

CVE-2022-44675

Windows Bluetooth Driver Elevation of Privilege Vulnerability

Windows Bluetooth Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 13, 2022
High 7.8

CVE-2022-44677

Windows Projected File System Elevation of Privilege Vulnerability

Windows Projected File System Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 13, 2022
High 7.8

CVE-2022-44678

Windows Print Spooler Elevation of Privilege Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 13, 2022
High 7.8

CVE-2022-44680

Windows Graphics Component Elevation of Privilege Vulnerability

Windows Graphics Component Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 13, 2022
High 7.8

CVE-2022-44681

Windows Print Spooler Elevation of Privilege Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 13, 2022
High 7.8

CVE-2022-44683

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 13, 2022
High 7.8

CVE-2022-44687

Raw Image Extension Remote Code Execution Vulnerability

Raw Image Extension Remote Code Execution Vulnerability

Microsoft Raw Image Extension

Dec 13, 2022
High 7.8

CVE-2022-44689

Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability

Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Linux Windows

Dec 13, 2022
High 7.8

CVE-2022-44697

Windows Graphics Component Elevation of Privilege Vulnerability

Windows Graphics Component Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 13, 2022
High 7.8

CVE-2022-44710

DirectX Graphics Kernel Elevation of Privilege Vulnerability

DirectX Graphics Kernel Elevation of Privilege Vulnerability

Microsoft Windows 11 version 22H2 Windows

Dec 13, 2022
High 7.0

CVE-2022-44669

Windows Error Reporting Elevation of Privilege Vulnerability

Windows Error Reporting Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 13, 2022
High 7.0

CVE-2022-44673

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

Microsoft Windows 10 Version 1809 Windows 10 Version 21H2 Windows 10 Version 1607 Windows

Dec 13, 2022
Medium 6.8

CVE-2022-44682

Windows Hyper-V Denial of Service Vulnerability

Windows Hyper-V Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 13, 2022
Medium 6.5

CVE-2022-44679

Windows Graphics Component Information Disclosure Vulnerability

Windows Graphics Component Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 13, 2022
Medium 6.5

CVE-2022-44707

Windows Kernel Denial of Service Vulnerability

Windows Kernel Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 13, 2022
Medium 5.5

CVE-2022-41074

Windows Graphics Component Information Disclosure Vulnerability

Windows Graphics Component Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 13, 2022
Medium 5.5

CVE-2022-44674

Windows Bluetooth Driver Information Disclosure Vulnerability

Windows Bluetooth Driver Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 13, 2022

Revision history

2022-12-27 #2
Neue Updates von HITACHI aufgenommen
2022-12-13 #1
Initiale Fassung

References

Hitachi Vulnerability Information HITACHI-SEC-2022-315 vom 2022-12-28
https://www.hitachi.co.jp/products/it/storage-solutions/global/sec_info/2022/12.html
Microsoft Leitfaden für Sicherheitsupdates vom 2022-12-13
https://msrc.microsoft.com/update-guide