The Windows installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute     unauthorized arbitrary commands.
    
  - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges.

  - A denial of service (DoS) vulnerability. An attacker can exploit this issue to cause the affected component     to deny system or application services.

  - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive     information.

The remote Windows host is missing security update 5007245 or cumulative update 5007245. It is, therefore, affected by multiple vulnerabilities:

  - An elevation of privilege vulnerability. An attacker can     exploit this to gain elevated privileges.
    (CVE-2021-41366, CVE-2021-41367, CVE-2021-41370,     CVE-2021-41377, CVE-2021-41379, CVE-2021-42278,     CVE-2021-42282, CVE-2021-42283, CVE-2021-42285,     CVE-2021-42287, CVE-2021-42291)

  - An information disclosure vulnerability. An attacker can     exploit this to disclose potentially sensitive     information. (CVE-2021-38631, CVE-2021-38665,     CVE-2021-41371)

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2021-38666,     CVE-2021-42275)

The remote Windows host is missing security update 5007206.
It is, therefore, affected by multiple vulnerabilities:

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2021-26443,     CVE-2021-38666, CVE-2021-41378, CVE-2021-42275,     CVE-2021-42276, CVE-2021-42279)

  - An information disclosure vulnerability. An attacker can     exploit this to disclose potentially sensitive     information. (CVE-2021-38631, CVE-2021-38665,     CVE-2021-41371)

  - An elevation of privilege vulnerability. An attacker can     exploit this to gain elevated privileges.
    (CVE-2021-36957, CVE-2021-41366, CVE-2021-41367,     CVE-2021-41370, CVE-2021-41377, CVE-2021-41379,     CVE-2021-42277, CVE-2021-42278, CVE-2021-42280,     CVE-2021-42282, CVE-2021-42283, CVE-2021-42285,     CVE-2021-42287, CVE-2021-42291)

  - A security feature bypass vulnerability exists. An     attacker can exploit this and bypass the security     feature and perform unauthorized actions compromising     the integrity of the system/application.
    (CVE-2021-42288)

  - A denial of service (DoS) vulnerability. An attacker can     exploit this issue to cause the affected component to     deny system or application services. (CVE-2021-41356,     CVE-2021-42274, CVE-2021-42284)

The remote Windows host is missing security update.  See Vendor Advisory for KB5007205

The remote Windows host is missing security update 5007186.
It is, therefore, affected by multiple vulnerabilities:

  - An elevation of privilege vulnerability. An attacker can     exploit this to gain elevated privileges.
    (CVE-2021-36957, CVE-2021-41366, CVE-2021-41367,     CVE-2021-41370, CVE-2021-41377, CVE-2021-41379,     CVE-2021-42277, CVE-2021-42280, CVE-2021-42283,     CVE-2021-42285, CVE-2021-42286)

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2021-26443,     CVE-2021-38666, CVE-2021-41378, CVE-2021-42275,     CVE-2021-42276, CVE-2021-42279)

  - An information disclosure vulnerability. An attacker can     exploit this to disclose potentially sensitive     information. (CVE-2021-38631, CVE-2021-38665,     CVE-2021-41371)

  - A security feature bypass vulnerability exists. An     attacker can exploit this and bypass the security     feature and perform unauthorized actions compromising     the integrity of the system/application.
    (CVE-2021-42288)

  - A denial of service (DoS) vulnerability. An attacker can     exploit this issue to cause the affected component to     deny system or application services. (CVE-2021-41356,     CVE-2021-42274, CVE-2021-42284)

The remote Windows host is missing security update 5007189.
It is, therefore, affected by multiple vulnerabilities:

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2021-26443,     CVE-2021-38666, CVE-2021-41378, CVE-2021-42275,     CVE-2021-42276, CVE-2021-42279)

  - An information disclosure vulnerability. An attacker can     exploit this to disclose potentially sensitive     information. (CVE-2021-38631, CVE-2021-38665,     CVE-2021-41371)

  - An elevation of privilege vulnerability. An attacker can     exploit this to gain elevated privileges.
    (CVE-2021-36957, CVE-2021-41366, CVE-2021-41367,     CVE-2021-41370, CVE-2021-41377, CVE-2021-41379,     CVE-2021-42277, CVE-2021-42280, CVE-2021-42283,     CVE-2021-42285)

  - A security feature bypass vulnerability exists. An     attacker can exploit this and bypass the security     feature and perform unauthorized actions compromising     the integrity of the system/application.
    (CVE-2021-42288)

  - A denial of service (DoS) vulnerability. An attacker can     exploit this issue to cause the affected component to     deny system or application services. (CVE-2021-41356,     CVE-2021-42284)

The remote Windows host is missing security update 5007233 or cumulative update 5007236. It is, therefore, affected by multiple vulnerabilities:

  - An information disclosure vulnerability. An attacker can     exploit this to disclose potentially sensitive     information. (CVE-2021-38631, CVE-2021-38665,     CVE-2021-41371)

  - An elevation of privilege vulnerability. An attacker can     exploit this to gain elevated privileges.
    (CVE-2021-41367, CVE-2021-41370, CVE-2021-41377,     CVE-2021-41379, CVE-2021-42278, CVE-2021-42282,     CVE-2021-42283, CVE-2021-42285, CVE-2021-42287,     CVE-2021-42291)

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2021-38666,     CVE-2021-42275)

The remote Windows host is missing security update 5007192.
It is, therefore, affected by multiple vulnerabilities:

  - An information disclosure vulnerability. An attacker can     exploit this to disclose potentially sensitive     information. (CVE-2021-38631, CVE-2021-38665,     CVE-2021-41371)

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2021-38666,     CVE-2021-42275, CVE-2021-42276, CVE-2021-42279)

  - A denial of service (DoS) vulnerability. An attacker can     exploit this issue to cause the affected component to     deny system or application services. (CVE-2021-41356,     CVE-2021-42274, CVE-2021-42284)

  - An elevation of privilege vulnerability. An attacker can     exploit this to gain elevated privileges.
    (CVE-2021-36957, CVE-2021-41366, CVE-2021-41367,     CVE-2021-41370, CVE-2021-41377, CVE-2021-41379,     CVE-2021-42277, CVE-2021-42278, CVE-2021-42280,     CVE-2021-42282, CVE-2021-42283, CVE-2021-42285,     CVE-2021-42287, CVE-2021-42291)

The remote Windows host is missing security update 5007246 or cumulative update 5007263. It is, therefore, affected by multiple vulnerabilities:

  - An information disclosure vulnerability. An attacker can     exploit this to disclose potentially sensitive     information. (CVE-2021-38631, CVE-2021-41371)

  - An elevation of privilege vulnerability. An attacker can     exploit this to gain elevated privileges.
    (CVE-2021-41367, CVE-2021-41370, CVE-2021-41377,     CVE-2021-41379, CVE-2021-42278, CVE-2021-42282,     CVE-2021-42283, CVE-2021-42287, CVE-2021-42291)

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2021-38666,     CVE-2021-42275)

The remote Windows host is missing security update 5007255 or cumulative update 5007247. It is, therefore, affected by multiple vulnerabilities:

  - A denial of service (DoS) vulnerability. An attacker can     exploit this issue to cause the affected component to     deny system or application services. (CVE-2021-42284)

  - An elevation of privilege vulnerability. An attacker can     exploit this to gain elevated privileges.
    (CVE-2021-41366, CVE-2021-41367, CVE-2021-41370,     CVE-2021-41377, CVE-2021-41379, CVE-2021-42278,     CVE-2021-42282, CVE-2021-42283, CVE-2021-42285,     CVE-2021-42287, CVE-2021-42291)

  - An information disclosure vulnerability. An attacker can     exploit this to disclose potentially sensitive     information. (CVE-2021-38631, CVE-2021-38665,     CVE-2021-41371)

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2021-38666,     CVE-2021-42275)

The Windows 11 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - A denial of service (DoS) vulnerability. An attacker can     exploit this issue to cause the affected component to     deny system or application services. (CVE-2021-41356,     CVE-2021-42274, CVE-2021-42284)

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2021-26443,     CVE-2021-38666, CVE-2021-41378, CVE-2021-42276,     CVE-2021-42279)

  - An elevation of privilege vulnerability. An attacker can     exploit this to gain elevated privileges.
    (CVE-2021-36957, CVE-2021-41366, CVE-2021-41367,     CVE-2021-41370, CVE-2021-41377, CVE-2021-41379,     CVE-2021-42277, CVE-2021-42280, CVE-2021-42283,     CVE-2021-42285)

  - An information disclosure vulnerability. An attacker can     exploit this to disclose potentially sensitive     information. (CVE-2021-38631, CVE-2021-38665,     CVE-2021-41371)

ID	Name	Product	Family	Published	Updated	Severity
154987	KB5007207: Windows 10 LTS 1507 Security Update (November 2021)	Nessus	Windows : Microsoft Bulletins	11/9/2021	6/17/2024	high
154995	KB5007245: Windows Server 2012 Security Update (November 2021)	Nessus	Windows : Microsoft Bulletins	11/9/2021	6/17/2024	high
154993	KB5007206: Windows 10 Version 1809 and Windows Server 2019 Security Update (November 2021)	Nessus	Windows : Microsoft Bulletins	11/9/2021	6/17/2024	critical
154994	KB5007205: Windows 2022 Security Update (November 2021)	Nessus	Windows : Microsoft Bulletins	11/9/2021	6/17/2024	critical
154986	KB5007186: Windows 10 Version 2004 / Windows 10 Version 20H2 / Windows 10 Version 21H1 (November 2021)	Nessus	Windows : Microsoft Bulletins	11/9/2021	6/17/2024	critical
154989	KB5007189: Windows 10 Version 1909 Security Update (November 2021)	Nessus	Windows : Microsoft Bulletins	11/9/2021	6/17/2024	critical
154984	KB5007233: Windows 7 and Windows Server 2008 R2 Security Update (November 2021)	Nessus	Windows : Microsoft Bulletins	11/9/2021	6/17/2024	high
154990	KB5007192: Windows 10 Version 1607 and Windows Server 2016 Security Update (November 2021)	Nessus	Windows : Microsoft Bulletins	11/9/2021	6/17/2024	high
154983	KB5007246: Windows Server 2008 Security Update (November 2021)	Nessus	Windows : Microsoft Bulletins	11/9/2021	6/17/2024	high
154996	KB5007255: Windows 8.1 and Windows Server 2012 R2 Security Update (November 2021)	Nessus	Windows : Microsoft Bulletins	11/9/2021	6/17/2024	high
154997	KB5007215: Windows 11 Security Updates (November 2021)	Nessus	Windows : Microsoft Bulletins	11/9/2021	6/17/2024	critical

Detections

Analytics

Plugins Search

high

high

critical

critical

critical

critical

high

high

high

high

critical