The remote Windows host is missing security update 5043083. It is, therefore, affected by multiple vulnerabilities

  - Microsoft is aware of a vulnerability in Servicing Stack that has rolled back the fixes for some     vulnerabilities affecting Optional Components on Windows 10, version 1507 (initial version released July     2015). This means that an attacker could exploit these previously mitigated vulnerabilities on Windows 10,     version 1507 (Windows 10 Enterprise 2015 LTSB and Windows 10 IoT Enterprise 2015 LTSB) systems that have     installed the Windows security update released on March 12, 2024KB5035858 (OS Build 10240.20526) or other     updates released until August 2024. All later versions of Windows 10 are not impacted by this     vulnerability. This servicing stack vulnerability is addressed by installing the September 2024 Servicing     stack update (SSU KB5043936) AND the September 2024 Windows security update (KB5043083), in that order.
    Note: Windows 10, version 1507 reached the end of support (EOS) on May 9, 2017 for devices running the     Pro, Home, Enterprise, Education, and Enterprise IoT editions. Only Windows 10 Enterprise 2015 LTSB and     Windows 10 IoT Enterprise 2015 LTSB editions are still under support. (CVE-2024-43491)

  - Windows MSHTML Platform Spoofing Vulnerability (CVE-2024-43461)

  - Windows Remote Access Connection Manager Elevation of Privilege Vulnerability (CVE-2024-38240)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

KB5043083: Windows 10 LTS 1507 Security Update (September 2024)

critical Nessus Plugin ID 206908

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.7 Oct 11, 2024, 5:40 PM IAVM reference Plugin Feed: 202410111740
Version 1.6 Sep 17, 2024, 5:03 PM CISA reference Plugin Feed: 202409171703
Version 1.5 Sep 16, 2024, 7:22 PM CISA reference Plugin Feed: 202409161922
Version 1.4 Sep 13, 2024, 3:37 PM New Plugin Feed: 202409131537
Version 1.3 Sep 11, 2024, 5:35 PM CISA reference Plugin Feed: 202409111735
Version 1.2 Sep 11, 2024, 7:40 AM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:F/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:F/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True") Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202409110740
Version 1.1 Sep 10, 2024, 9:34 PM New Plugin Feed: 202409102134