High 1 exploited CVE WID-SEC-2023-2328 21 CVEs

Microsoft Windows und Microsoft Windows Server: Mehrere Schwachstellen

Published Sep 12, 2023 · Updated Oct 31, 2023 · Revision 3 · de-DE

Vendor: Hitachi Vendor: Microsoft Product: Storage Product: Windows 10 Product: Windows 10 Version 1607 Product: Windows 10 Version 1809 Product: Windows 10 Version 21H2 Product: Windows 10 Version 22H2 Product: Windows 11 Product: Windows 11 version 21H2 Product: Windows 11 version 22H2 Product: Windows Server Product: Windows Server 2008 R2 SP1 Product: Windows Server 2008 SP2 Product: Windows Server 2012 Product: Windows Server 2012 R2 Product: Windows Server 2016 Product: Windows Server 2019 Product: Windows Server 2022 Platform: Windows

Summary

Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Microsoft Windows und Microsoft Windows Server ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen und seine Rechte zu erweitern.

Product

Windows ist ein Betriebssystem von Microsoft.

Vulnerabilities 21

High 7.8

CVE-2023-36802 Exploited Public exploit EPSS 28%

Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Sep 12, 2023
KEV Sep 12, 2023
High 8.8

CVE-2023-38146 Public exploit EPSS 37%

Windows Themes Remote Code Execution Vulnerability

Windows Themes Remote Code Execution Vulnerability

Microsoft Windows 11 version 22H2 Windows 11 version 21H2 Windows

Sep 12, 2023
High 8.8

CVE-2023-38147

Windows Miracast Wireless Display Remote Code Execution Vulnerability

Windows Miracast Wireless Display Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Sep 12, 2023
High 8.8

CVE-2023-38148

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

Microsoft Windows Server 2022 Windows 10 Version 21H2 Windows 10 Version 22H2 Windows

Sep 12, 2023
High 7.8

CVE-2023-35355

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Sep 12, 2023
High 7.8

CVE-2023-36804

Windows GDI Elevation of Privilege Vulnerability

Windows GDI Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Sep 12, 2023
High 7.8

CVE-2023-38139

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Sep 12, 2023
High 7.8

CVE-2023-38141

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Sep 12, 2023
High 7.8

CVE-2023-38142

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Sep 12, 2023
High 7.8

CVE-2023-38143

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Sep 12, 2023
High 7.8

CVE-2023-38144

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Sep 12, 2023
High 7.8

CVE-2023-38150

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Microsoft Windows 11 version 22H2 Windows 11 version 21H2 Windows

Sep 12, 2023
High 7.8

CVE-2023-38161

Windows GDI Elevation of Privilege Vulnerability

Windows GDI Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Sep 12, 2023
High 7.5

CVE-2023-38149

Windows TCP/IP Denial of Service Vulnerability

Windows TCP/IP Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Sep 12, 2023
High 7.5

CVE-2023-38162 EPSS 11%

DHCP Server Service Denial of Service Vulnerability

DHCP Server Service Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Sep 12, 2023
High 7.0

CVE-2023-36805

Windows MSHTML Platform Security Feature Bypass Vulnerability

Windows MSHTML Platform Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Sep 12, 2023
Medium 5.5

CVE-2023-36803

Windows Kernel Information Disclosure Vulnerability

Windows Kernel Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Sep 12, 2023
Medium 5.5

CVE-2023-38140

Windows Kernel Information Disclosure Vulnerability

Windows Kernel Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Sep 12, 2023
Medium 5.5

CVE-2023-38160

Windows TCP/IP Information Disclosure Vulnerability

Windows TCP/IP Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Sep 12, 2023
Medium 5.3

CVE-2023-36801

DHCP Server Service Information Disclosure Vulnerability

DHCP Server Service Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Sep 12, 2023
Medium 5.3

CVE-2023-38152 EPSS 24%

DHCP Server Service Information Disclosure Vulnerability

DHCP Server Service Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Sep 12, 2023

Revision history

2023-10-31 #3
Neue Updates von HITACHI aufgenommen
2023-09-14 #2
PoC für CVE-2023-38146 "Themebleed" aufgenommen
2023-09-12 #1
Initiale Fassung

References

Hitachi Vulnerability Information HITACHI-SEC-2023-309 vom 2023-11-01
https://www.hitachi.com/products/it/storage-solutions/sec_info/2023/09.html
PoC CVE-2023-38146 vom 2023-09-14
https://github.com/gabe-k/themebleed
Microsoft Leitfaden für Sicherheitsupdates vom 2023-09-12
https://msrc.microsoft.com/update-guide