Tablet Windows User Interface Application Core Remote Code Execution Vulnerability

The remote Windows host is missing security update 5029253. It is, therefore, affected by multiple vulnerabilities

  - Microsoft Message Queuing Remote Code Execution Vulnerability (CVE-2023-35385, CVE-2023-36910,     CVE-2023-36911)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36882)

  - Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability (CVE-2023-35387)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5029263. It is, therefore, affected by multiple vulnerabilities

  - Microsoft Message Queuing Remote Code Execution Vulnerability (CVE-2023-35385, CVE-2023-36910,     CVE-2023-36911)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36882)

  - Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability (CVE-2023-35387)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
179495	KB5029253: Windows 11 version 21H2 Security Update (August 2023)	Nessus	Windows : Microsoft Bulletins	critical
179491	KB5029263: Windows 11 version 22H2 Security Update (August 2023)	Nessus	Windows : Microsoft Bulletins	critical

Detections

Analytics

CVE-2023-36898

high

Tenable Plugins

critical

critical