Critical 1 exploited CVE WID-SEC-2023-1178 28 CVEs

Microsoft Windows und Microsoft Windows Server: Mehrere Schwachstellen

Published May 9, 2023 · Updated May 6, 2024 · Revision 5 · de-DE

Vendor: Dell Vendor: Hitachi Vendor: IGEL Vendor: Microsoft Vendor: Xerox Product: FreeFlow Print Server Product: NetWorker Product: OS Product: Storage Product: Windows 10 Product: Windows 11 Product: Windows Server 2008 R2 Product: Windows Server 2008 Service Pack 2 Product: Windows Server 2012 Product: Windows Server 2012 R2 Product: Windows Server 2016 Product: Windows Server 2019 Product: Windows Server 2022 Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Microsoft Windows und Microsoft Windows Server ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und seine Privilegien zu erweitern

Product

Windows ist ein Betriebssystem von Microsoft.

Vulnerabilities 28

High 7.8

CVE-2023-29336 Exploited Public exploit EPSS 41%

Win32k Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

Microsoft Windows Server 2016 Windows Server 2016 (Server Core installation) Windows 10 Version 1607 Windows

May 9, 2023
KEV May 9, 2023
Critical 9.8

CVE-2023-24941 EPSS 95%

Windows Network File System Remote Code Execution Vulnerability

Windows Network File System Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

May 9, 2023
Critical 9.8

CVE-2023-24943

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

May 9, 2023
High 8.8

CVE-2023-24947

Windows Bluetooth Driver Remote Code Execution Vulnerability

Windows Bluetooth Driver Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

May 9, 2023
High 8.1

CVE-2023-24903

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

May 9, 2023
High 8.1

CVE-2023-28283

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

May 9, 2023
High 8.1

CVE-2023-29325 EPSS 84%

Windows OLE Remote Code Execution Vulnerability

Windows OLE Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

May 9, 2023
High 7.8

CVE-2023-24902

Win32k Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

Microsoft Windows 11 version 22H2 Windows 11 version 21H2 Windows

May 9, 2023
High 7.8

CVE-2023-24905

Remote Desktop Client Remote Code Execution Vulnerability

Remote Desktop Client Remote Code Execution Vulnerability

Microsoft Windows 10 Version 21H2 Windows 10 Version 22H2 Windows 11 version 22H2 Windows

May 9, 2023
High 7.8

CVE-2023-24946

Windows Backup Service Elevation of Privilege Vulnerability

Windows Backup Service Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

May 9, 2023
High 7.8

CVE-2023-24949 EPSS 25%

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

May 9, 2023
High 7.8

CVE-2023-29340

AV1 Video Extension Remote Code Execution Vulnerability

AV1 Video Extension Remote Code Execution Vulnerability

Microsoft AV1 Video Extension

May 9, 2023
High 7.8

CVE-2023-29341

AV1 Video Extension Remote Code Execution Vulnerability

AV1 Video Extension Remote Code Execution Vulnerability

Microsoft AV1 Video Extension

May 9, 2023
High 7.5

CVE-2023-24898

Windows SMB Denial of Service Vulnerability

Windows SMB Denial of Service Vulnerability

Microsoft Windows Server 2022 Windows

May 9, 2023
High 7.5

CVE-2023-24901

Windows NFS Portmapper Information Disclosure Vulnerability

Windows NFS Portmapper Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

May 9, 2023
High 7.5

CVE-2023-24939

Server for NFS Denial of Service Vulnerability

Server for NFS Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

May 9, 2023
High 7.5

CVE-2023-24940

Windows Pragmatic General Multicast (PGM) Denial of Service Vulnerability

Windows Pragmatic General Multicast (PGM) Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

May 9, 2023
High 7.5

CVE-2023-24942

Remote Procedure Call Runtime Denial of Service Vulnerability

Remote Procedure Call Runtime Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

May 9, 2023
High 7.4

CVE-2023-24948

Windows Bluetooth Driver Elevation of Privilege Vulnerability

Windows Bluetooth Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

May 9, 2023
High 7.1

CVE-2023-24904

Windows Installer Elevation of Privilege Vulnerability

Windows Installer Elevation of Privilege Vulnerability

Microsoft Windows Server 2008 R2 Service Pack 1 Windows Server 2008 R2 Service Pack 1 (Server Core installation) Windows Server 2008 Service Pack 2 Windows

May 9, 2023
High 7.0

CVE-2023-24899

Windows Graphics Component Elevation of Privilege Vulnerability

Windows Graphics Component Elevation of Privilege Vulnerability

Microsoft Windows Server 2022 Windows 11 version 22H2 Windows 11 version 21H2 Windows

May 9, 2023
Medium 6.7

CVE-2023-24932 Public exploit EPSS 12%

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

May 9, 2023
Medium 6.5

CVE-2023-24944

Windows Bluetooth Driver Information Disclosure Vulnerability

Windows Bluetooth Driver Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

May 9, 2023
Medium 6.5

CVE-2023-29324 Public exploit

Windows MSHTML Platform Security Feature Bypass Vulnerability

Windows MSHTML Platform Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

May 9, 2023
Medium 5.9

CVE-2023-24900

Windows NTLM Security Support Provider Information Disclosure Vulnerability

Windows NTLM Security Support Provider Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

May 9, 2023
Medium 5.5

CVE-2023-24945

Windows iSCSI Target Service Information Disclosure Vulnerability

Windows iSCSI Target Service Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

May 9, 2023
Medium 5.5

CVE-2023-28251

Windows Driver Revocation List Security Feature Bypass Vulnerability

Windows Driver Revocation List Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

May 9, 2023
Medium 5.3

CVE-2023-28290

Microsoft Remote Desktop app for Windows Information Disclosure Vulnerability

Microsoft Remote Desktop app for Windows Information Disclosure Vulnerability

Microsoft Microsoft Remote Desktop

May 9, 2023

Revision history

2024-05-06 #5
Neue Updates von Dell aufgenommen
2023-09-25 #4
Neue Updates von HITACHI aufgenommen
2023-06-20 #3
Neue Updates von XEROX aufgenommen
2023-05-14 #2
Neue Updates von IGEL aufgenommen
2023-05-09 #1
Initiale Fassung

References

Microsoft Leitfaden für Sicherheitsupdates vom 2023-05-09
https://msrc.microsoft.com/update-guide
IGEL Security Notice ISN-2023-06 vom 2023-05-12
https://kb.igel.com/securitysafety/en/isn-2023-06-uefi-secure-boot-malware-and-igel-os-88016851.html
XEROX Security Advisory XRX23-010 vom 2023-06-21
https://securitydocs.business.xerox.com/wp-content/uploads/2023/06/Xerox-Security-Bulletin-XRX23-010-Xerox%C2%AE-FreeFlow%C2%AE-Print-Server-v2_Windows%C2%AE-10.pdf
Hitachi Vulnerability Information HITACHI-SEC-2023-305 vom 2023-09-26
https://www.hitachi.com/products/it/storage-solutions/sec_info/2023/05.html
Dell Security Advisory DSA-2024-207 vom 2024-05-06
https://www.dell.com/support/kbdoc/de-de/000224798/dsa-2024-207-security-update-for-dell-networker-for-bmr-iso-vulnerability
Dell Security Advisory DSA-2024-207 vom 2024-05-07
https://www.dell.com/support/kbdoc/000224798/dsa-2024-=