The remote Windows host is missing security update 5013963. It is, therefore, affected by multiple vulnerabilities

  - Windows LDAP Remote Code Execution Vulnerability (CVE-2022-22012, CVE-2022-22013, CVE-2022-22014,     CVE-2022-29128, CVE-2022-29129, CVE-2022-29130, CVE-2022-29137, CVE-2022-29139, CVE-2022-29141)

  - Active Directory Domain Services Elevation of Privilege Vulnerability (CVE-2022-26923)

  - Remote Procedure Call Runtime Remote Code Execution Vulnerability (CVE-2022-22019)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

KB5013963: Windows 10 LTS 1507 Security Update (May 2022)

high Nessus Plugin ID 160926

Version 1.18

Version 1.17

Version 1.16

Version 1.18 Nov 27, 2024, 12:25 PM CVSS metrics ("CVSSv3 score" set to 7.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H") CVSSv3 score source (set to "CVE-2022-30138") Plugin Feed: 202411271225
Version 1.17 Jun 17, 2024, 3:35 PM Plugin metadata (add more granular CPEs to Windows OS plugins) Plugin Feed: 202406171535
Version 1.16 Nov 18, 2022, 5:52 PM CVE IAVM reference Plugin Feed: 202211181752