Windows Mark of the Web Security Feature Bypass Vulnerability

The remote Windows host is missing security update 5043125. It is, therefore, affected by multiple vulnerabilities

  - Windows MSHTML Platform Spoofing Vulnerability (CVE-2024-43461)

  - Windows Remote Desktop Licensing Service Spoofing Vulnerability (CVE-2024-43455)

  - Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability (CVE-2024-38260,     CVE-2024-38263, CVE-2024-43454, CVE-2024-43467)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5043083. It is, therefore, affected by multiple vulnerabilities

  - Microsoft is aware of a vulnerability in Servicing Stack that has rolled back the fixes for some     vulnerabilities affecting Optional Components on Windows 10, version 1507 (initial version released July     2015). This means that an attacker could exploit these previously mitigated vulnerabilities on Windows 10,     version 1507 (Windows 10 Enterprise 2015 LTSB and Windows 10 IoT Enterprise 2015 LTSB) systems that have     installed the Windows security update released on March 12, 2024KB5035858 (OS Build 10240.20526) or other     updates released until August 2024. All later versions of Windows 10 are not impacted by this     vulnerability. This servicing stack vulnerability is addressed by installing the September 2024 Servicing     stack update (SSU KB5043936) AND the September 2024 Windows security update (KB5043083), in that order.
    Note: Windows 10, version 1507 reached the end of support (EOS) on May 9, 2017 for devices running the     Pro, Home, Enterprise, Education, and Enterprise IoT editions. Only Windows 10 Enterprise 2015 LTSB and     Windows 10 IoT Enterprise 2015 LTSB editions are still under support. (CVE-2024-43491)

  - Windows MSHTML Platform Spoofing Vulnerability (CVE-2024-43461)

  - Windows Remote Access Connection Manager Elevation of Privilege Vulnerability (CVE-2024-38240)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5043051. It is, therefore, affected by multiple vulnerabilities

  - Windows MSHTML Platform Spoofing Vulnerability (CVE-2024-43461)

  - Windows Remote Desktop Licensing Service Spoofing Vulnerability (CVE-2024-43455)

  - Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability (CVE-2024-38260,     CVE-2024-38263, CVE-2024-43454, CVE-2024-43467)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5043050. It is, therefore, affected by multiple vulnerabilities

  - Windows MSHTML Platform Spoofing Vulnerability (CVE-2024-43461)

  - Windows Remote Desktop Licensing Service Spoofing Vulnerability (CVE-2024-43455)

  - Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability (CVE-2024-38260,     CVE-2024-38263, CVE-2024-43454, CVE-2024-43467)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5043138. It is, therefore, affected by multiple vulnerabilities

  - Windows MSHTML Platform Spoofing Vulnerability (CVE-2024-43461)

  - Windows Remote Desktop Licensing Service Spoofing Vulnerability (CVE-2024-43455)

  - Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability (CVE-2024-38260,     CVE-2024-38263, CVE-2024-43454, CVE-2024-43467)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5043064. It is, therefore, affected by multiple vulnerabilities

  - Windows MSHTML Platform Spoofing Vulnerability (CVE-2024-43461)

  - Windows Remote Access Connection Manager Elevation of Privilege Vulnerability (CVE-2024-38240)

  - Windows TCP/IP Remote Code Execution Vulnerability (CVE-2024-21416, CVE-2024-38045)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
206909	KB5043125: Windows Server 2012 Security Update (September 2024)	Nessus	Windows : Microsoft Bulletins	critical
206908	KB5043083: Windows 10 LTS 1507 Security Update (September 2024)	Nessus	Windows : Microsoft Bulletins	critical
206902	KB5043051: Windows 10 Version 1607 / Windows Server 2016 Security Update (September 2024)	Nessus	Windows : Microsoft Bulletins	critical
206898	KB5043050: Windows 10 version 1809 / Windows Server 2019 Security Update (September 2024)	Nessus	Windows : Microsoft Bulletins	critical
206896	KB5043138: Windows Server 2012 R2 Security Update (September 2024)	Nessus	Windows : Microsoft Bulletins	critical
206894	KB5043064: Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (September 2024)	Nessus	Windows : Microsoft Bulletins	critical

Detections

Analytics

CVE-2024-43487

medium

Tenable Plugins

critical

critical

critical

critical

critical

critical