Windows Graphics Component Elevation of Privilege Vulnerability

The remote Windows host is missing security update 5022894. It is, therefore, affected by multiple vulnerabilities

  - Microsoft PostScript Printer Driver Remote Code Execution Vulnerability (CVE-2023-21684, CVE-2023-21801)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-21685,     CVE-2023-21686, CVE-2023-21799)

  - Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability (CVE-2023-21689)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5022845. It is, therefore, affected by multiple vulnerabilities

  - Microsoft PostScript Printer Driver Remote Code Execution Vulnerability (CVE-2023-21684, CVE-2023-21801)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-21685,     CVE-2023-21686, CVE-2023-21799)

  - Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability (CVE-2023-21689)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5022836. It is, therefore, affected by multiple vulnerabilities

  - Microsoft PostScript Printer Driver Remote Code Execution Vulnerability (CVE-2023-21684, CVE-2023-21801)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-21685,     CVE-2023-21686, CVE-2023-21799)

  - Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability (CVE-2023-21689)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5022838. It is, therefore, affected by multiple vulnerabilities

  - Windows iSCSI Discovery Service Remote Code Execution Vulnerability (CVE-2023-21803)

  - Microsoft PostScript Printer Driver Remote Code Execution Vulnerability (CVE-2023-21684, CVE-2023-21801)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-21685,     CVE-2023-21686, CVE-2023-21799)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5022858. It is, therefore, affected by multiple vulnerabilities

  - Windows iSCSI Discovery Service Remote Code Execution Vulnerability (CVE-2023-21803)

  - Microsoft PostScript Printer Driver Remote Code Execution Vulnerability (CVE-2023-21684, CVE-2023-21801)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-21685,     CVE-2023-21686, CVE-2023-21799)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5022895. It is, therefore, affected by multiple vulnerabilities

  - Microsoft PostScript Printer Driver Remote Code Execution Vulnerability (CVE-2023-21684, CVE-2023-21801)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-21685,     CVE-2023-21686, CVE-2023-21799)

  - Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability (CVE-2023-21689)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5022834. It is, therefore, affected by multiple vulnerabilities

  - Windows iSCSI Discovery Service Remote Code Execution Vulnerability (CVE-2023-21803)

  - Microsoft PostScript Printer Driver Remote Code Execution Vulnerability (CVE-2023-21684, CVE-2023-21801)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-21685,     CVE-2023-21686, CVE-2023-21799)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5022842. It is, therefore, affected by multiple vulnerabilities

  - Microsoft PostScript Printer Driver Remote Code Execution Vulnerability (CVE-2023-21684, CVE-2023-21801)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-21685,     CVE-2023-21686, CVE-2023-21799)

  - Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability (CVE-2023-21689)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5022840. It is, therefore, affected by multiple vulnerabilities

  - Windows iSCSI Discovery Service Remote Code Execution Vulnerability (CVE-2023-21803)

  - Microsoft PostScript Printer Driver Remote Code Execution Vulnerability (CVE-2023-21684, CVE-2023-21801)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-21685,     CVE-2023-21686, CVE-2023-21799)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
171453	KB5022894: Windows 8.1 Embedded and Windows Server 2012 R2 Security Update (February 2023)	Nessus	Windows : Microsoft Bulletins	critical
171452	KB5022845: Windows 11 Security Update (February 2023)	Nessus	Windows : Microsoft Bulletins	critical
171450	KB5022836: Windows 11 Security Update (February 2023)	Nessus	Windows : Microsoft Bulletins	critical
171448	KB5022838: Windows 10 Version 1607 and Windows Server 2016 Security Update (February 2023)	Nessus	Windows : Microsoft Bulletins	critical
171447	KB5022858: Windows 10 LTS 1507 Security Update (February 2023)	Nessus	Windows : Microsoft Bulletins	critical
171446	KB5022895: Windows Server 2012 Security Update (February 2023)	Nessus	Windows : Microsoft Bulletins	critical
171445	KB5022834: Windows 10 Version 20H2 / Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (February 2023)	Nessus	Windows : Microsoft Bulletins	critical
171444	KB5022842: Windows Server 2022 Security Update (February 2023)	Nessus	Windows : Microsoft Bulletins	critical
171441	KB5022840: Windows 10 version 1809 / Windows Server 2019 Security Update (February 2023)	Nessus	Windows : Microsoft Bulletins	critical

Detections

Analytics

CVE-2023-21804

high

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical