Windows HTML Platforms Security Feature Bypass Vulnerability

The remote Windows host is missing security update 5029304. It is, therefore, affected by multiple vulnerabilities

  - Microsoft Message Queuing Remote Code Execution Vulnerability (CVE-2023-35385, CVE-2023-36910,     CVE-2023-36911)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36882)

  - Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability (CVE-2023-35387)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5029259. It is, therefore, affected by multiple vulnerabilities

  - Microsoft Message Queuing Remote Code Execution Vulnerability (CVE-2023-35385, CVE-2023-36910,     CVE-2023-36911)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36882)

  - Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability (CVE-2023-35387)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5029242. It is, therefore, affected by multiple vulnerabilities

  - Microsoft Message Queuing Remote Code Execution Vulnerability (CVE-2023-35385, CVE-2023-36910,     CVE-2023-36911)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36882)

  - Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability (CVE-2023-35387)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5029244. It is, therefore, affected by multiple vulnerabilities

  - Microsoft Message Queuing Remote Code Execution Vulnerability (CVE-2023-35385, CVE-2023-36910,     CVE-2023-36911)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36882)

  - Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability (CVE-2023-35387)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5029253. It is, therefore, affected by multiple vulnerabilities

  - Microsoft Message Queuing Remote Code Execution Vulnerability (CVE-2023-35385, CVE-2023-36910,     CVE-2023-36911)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36882)

  - Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability (CVE-2023-35387)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5029250. It is, therefore, affected by multiple vulnerabilities

  - Microsoft Message Queuing Remote Code Execution Vulnerability (CVE-2023-35385, CVE-2023-36910,     CVE-2023-36911)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36882)

  - Windows Fax Service Remote Code Execution Vulnerability (CVE-2023-35381)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5029263. It is, therefore, affected by multiple vulnerabilities

  - Microsoft Message Queuing Remote Code Execution Vulnerability (CVE-2023-35385, CVE-2023-36910,     CVE-2023-36911)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36882)

  - Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability (CVE-2023-35387)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5029247. It is, therefore, affected by multiple vulnerabilities

  - Microsoft Message Queuing Remote Code Execution Vulnerability (CVE-2023-35385, CVE-2023-36910,     CVE-2023-36911)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36882)

  - Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability (CVE-2023-35387)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
179501	KB5029304: Windows Server 2012 R2 Security Update (August 2023)	Nessus	Windows : Microsoft Bulletins	critical
179499	KB5029259: Windows 10 LTS 1507 Security Update (August 2023)	Nessus	Windows : Microsoft Bulletins	critical
179498	KB5029242: Windows 10 Version 1607 and Windows Server 2016 Security Update (August 2023)	Nessus	Windows : Microsoft Bulletins	critical
179497	KB5029244: Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (August 2023)	Nessus	Windows : Microsoft Bulletins	critical
179495	KB5029253: Windows 11 version 21H2 Security Update (August 2023)	Nessus	Windows : Microsoft Bulletins	critical
179492	KB5029250: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (August 2023)	Nessus	Windows : Microsoft Bulletins	critical
179491	KB5029263: Windows 11 version 22H2 Security Update (August 2023)	Nessus	Windows : Microsoft Bulletins	critical
179487	KB5029247: Windows 10 version 1809 / Windows Server 2019 Security Update (August 2023)	Nessus	Windows : Microsoft Bulletins	critical

Detections

Analytics

CVE-2023-35384

medium

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical