The remote Windows host is missing security update 5019970. It is, therefore, affected by multiple vulnerabilities

  - AMD: CVE-2022-23824 IBPB and Return Address Predictor Interactions (CVE-2022-23824)

  - Windows Group Policy Elevation of Privilege Vulnerability (CVE-2022-37992, CVE-2022-41086)

  - Windows Hyper-V Denial of Service Vulnerability (CVE-2022-38015)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5019964. It is, therefore, affected by multiple vulnerabilities

  - AMD: CVE-2022-23824 IBPB and Return Address Predictor Interactions (CVE-2022-23824)

  - Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability (CVE-2022-37966)

  - Windows Kerberos Elevation of Privilege Vulnerability (CVE-2022-37967)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Microsoft .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by an information disclosure vulnerability in the System.Data.SqlClient and Microsoft.Data.SqlClient packages. A timeout occurring under high load can cause incorrect data to be returned as the result of an asynchronously executed query.

ID	Name	Product	Family	Published	Updated	Severity
167104	KB5019970: Windows 10 LTS 1507 Security Update (November 2022)	Nessus	Windows : Microsoft Bulletins	11/8/2022	1/3/2023	high
167111	KB5019964: Windows 10 Version 1607 and Windows Server 2016 Security Update (November 2022)	Nessus	Windows : Microsoft Bulletins	11/8/2022	11/16/2023	high
167254	Security Updates for Microsoft .NET Framework (November 2022)	Nessus	Windows : Microsoft Bulletins	11/10/2022	10/5/2023	medium

Detections

Analytics

Plugins Search

high

high

medium