HTTP.sys Information Disclosure Vulnerability

The remote Windows host is missing security update 5022845. It is, therefore, affected by multiple vulnerabilities

  - Microsoft PostScript Printer Driver Remote Code Execution Vulnerability (CVE-2023-21684, CVE-2023-21801)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-21685,     CVE-2023-21686, CVE-2023-21799)

  - Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability (CVE-2023-21689)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5022836. It is, therefore, affected by multiple vulnerabilities

  - Microsoft PostScript Printer Driver Remote Code Execution Vulnerability (CVE-2023-21684, CVE-2023-21801)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-21685,     CVE-2023-21686, CVE-2023-21799)

  - Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability (CVE-2023-21689)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5022842. It is, therefore, affected by multiple vulnerabilities

  - Microsoft PostScript Printer Driver Remote Code Execution Vulnerability (CVE-2023-21684, CVE-2023-21801)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-21685,     CVE-2023-21686, CVE-2023-21799)

  - Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability (CVE-2023-21689)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
171452	KB5022845: Windows 11 Security Update (February 2023)	Nessus	Windows : Microsoft Bulletins	critical
171450	KB5022836: Windows 11 Security Update (February 2023)	Nessus	Windows : Microsoft Bulletins	critical
171444	KB5022842: Windows Server 2022 Security Update (February 2023)	Nessus	Windows : Microsoft Bulletins	critical

Detections

Analytics

CVE-2023-21687

medium

Tenable Plugins

critical

critical

critical