Win32k Elevation of Privilege Vulnerability

The remote Windows host is missing security update 5033375. It is, therefore, affected by multiple vulnerabilities

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36006)

  - Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (CVE-2023-36696)

  - Local Security Authority Subsystem Service Elevation of Privilege Vulnerability (CVE-2023-36391)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5033383. It is, therefore, affected by multiple vulnerabilities

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36006)

  - Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (CVE-2023-36696)

  - Win32k Elevation of Privilege Vulnerability (CVE-2023-35631, CVE-2023-36011)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5033369. It is, therefore, affected by multiple vulnerabilities

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36006)

  - Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (CVE-2023-36696)

  - Win32k Elevation of Privilege Vulnerability (CVE-2023-35631, CVE-2023-36011)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
186790	KB5033375: Windows 11 version 22H2 / Windows 11 version 23H2 Security Update (December 2023)	Nessus	Windows : Microsoft Bulletins	high
186779	KB5033383: Windows 11 version 22H2 Security Update (December 2023)	Nessus	Windows : Microsoft Bulletins	high
186778	KB5033369: Windows 11 version 21H2 Security Update (December 2023)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2023-35631

high

Tenable Plugins

high

high

high