Windows MSHTML Platform Remote Code Execution Vulnerability

The remote Windows host is missing security update 5033373. It is, therefore, affected by multiple vulnerabilities

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36006)

  - Win32k Elevation of Privilege Vulnerability (CVE-2023-36011)

  - A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss     of confidentiality. (CVE-2023-20588)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5033375. It is, therefore, affected by multiple vulnerabilities

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36006)

  - Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (CVE-2023-36696)

  - Local Security Authority Subsystem Service Elevation of Privilege Vulnerability (CVE-2023-36391)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5033371. It is, therefore, affected by multiple vulnerabilities

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36006)

  - Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (CVE-2023-36696)

  - Win32k Elevation of Privilege Vulnerability (CVE-2023-36011)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5033429. It is, therefore, affected by multiple vulnerabilities

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36006)

  - Win32k Elevation of Privilege Vulnerability (CVE-2023-36011)

  - A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss     of confidentiality. (CVE-2023-20588)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5033372. It is, therefore, affected by multiple vulnerabilities

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36006)

  - Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (CVE-2023-36696)

  - Win32k Elevation of Privilege Vulnerability (CVE-2023-36011)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5033379. It is, therefore, affected by multiple vulnerabilities

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36006)

  - Win32k Elevation of Privilege Vulnerability (CVE-2023-36011)

  - A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss     of confidentiality. (CVE-2023-20588)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5033420. It is, therefore, affected by multiple vulnerabilities

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36006)

  - Win32k Elevation of Privilege Vulnerability (CVE-2023-36011)

  - A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss     of confidentiality. (CVE-2023-20588)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5033424. It is, therefore, affected by multiple vulnerabilities

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36006)

  - A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss     of confidentiality. (CVE-2023-20588)

  - Windows Media Remote Code Execution Vulnerability (CVE-2023-21740)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5033383. It is, therefore, affected by multiple vulnerabilities

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36006)

  - Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (CVE-2023-36696)

  - Win32k Elevation of Privilege Vulnerability (CVE-2023-35631, CVE-2023-36011)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5033369. It is, therefore, affected by multiple vulnerabilities

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36006)

  - Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (CVE-2023-36696)

  - Win32k Elevation of Privilege Vulnerability (CVE-2023-35631, CVE-2023-36011)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5033118 or Azure HotPatch 5033464. It is, therefore, affected by multiple vulnerabilities

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36006)

  - Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (CVE-2023-36696)

  - Win32k Elevation of Privilege Vulnerability (CVE-2023-36011)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
186791	KB5033373: Windows 10 Version 1607 and Windows Server 2016 Security Update (December 2023)	Nessus	Windows : Microsoft Bulletins	high
186790	KB5033375: Windows 11 version 22H2 Security Update (December 2023)	Nessus	Windows : Microsoft Bulletins	high
186789	KB5033371: Windows 10 version 1809 / Windows Server 2019 Security Update (December 2023)	Nessus	Windows : Microsoft Bulletins	high
186788	KB5033429: Windows Server 2012 Security Update (December 2023)	Nessus	Windows : Microsoft Bulletins	high
186787	KB5033372: Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (December 2023)	Nessus	Windows : Microsoft Bulletins	high
186785	KB5033379: Windows 10 LTS 1507 Security Update (December 2023)	Nessus	Windows : Microsoft Bulletins	high
186782	KB5033420: Windows Server 2012 R2 Security Update (December 2023)	Nessus	Windows : Microsoft Bulletins	high
186781	KB5033424: Windows Server 2008 R2 Security Update (December 2023)	Nessus	Windows : Microsoft Bulletins	high
186779	KB5033383: Windows 11 version 22H2 Security Update (December 2023)	Nessus	Windows : Microsoft Bulletins	high
186778	KB5033369: Windows 11 version 21H2 Security Update (December 2023)	Nessus	Windows : Microsoft Bulletins	high
186777	KB5033118: Windows 2022 / Azure Stack HCI 22H2 Security Update (December 2023)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2023-35628

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high