Microsoft USBHUB 3.0 Device Driver Remote Code Execution Vulnerability

The remote Windows host is missing security update 5033429. It is, therefore, affected by multiple vulnerabilities

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36006)

  - Win32k Elevation of Privilege Vulnerability (CVE-2023-36011)

  - A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss     of confidentiality. (CVE-2023-20588)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5033379. It is, therefore, affected by multiple vulnerabilities

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36006)

  - Win32k Elevation of Privilege Vulnerability (CVE-2023-36011)

  - A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss     of confidentiality. (CVE-2023-20588)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5033420. It is, therefore, affected by multiple vulnerabilities

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36006)

  - Win32k Elevation of Privilege Vulnerability (CVE-2023-36011)

  - A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss     of confidentiality. (CVE-2023-20588)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5033424. It is, therefore, affected by multiple vulnerabilities

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36006)

  - A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss     of confidentiality. (CVE-2023-20588)

  - Windows Media Remote Code Execution Vulnerability (CVE-2023-21740)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5033427. It is, therefore, affected by multiple vulnerabilities

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36006)

  - A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss     of confidentiality. (CVE-2023-20588)

  - DHCP Server Service Information Disclosure Vulnerability (CVE-2023-36012)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
186788	KB5033429: Windows Server 2012 Security Update (December 2023)	Nessus	Windows : Microsoft Bulletins	high
186785	KB5033379: Windows 10 LTS 1507 Security Update (December 2023)	Nessus	Windows : Microsoft Bulletins	high
186782	KB5033420: Windows Server 2012 R2 Security Update (December 2023)	Nessus	Windows : Microsoft Bulletins	high
186781	KB5033424: Windows Server 2008 R2 Security Update (December 2023)	Nessus	Windows : Microsoft Bulletins	high
186776	KB5033427: Windows Server 2008 Security Update (December 2023)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2023-35629

medium

Tenable Plugins

high

high

high

high

high