QID 91954

Date Published: 2022-11-09

QID 91954: Microsoft .NET Framework Information Disclosure Vulnerability for November 2022

An Information Disclosure Vulnerability exist in Microsoft .Net Framework.

Following KBs are covered in this detection:
KB5020690
KB5020801
KB5020688
KB5020687
KB5020689
KB5020614
KB5020686
KB5020685
KB5019970
KB5020691
KB5020681
KB5020678
KB5020679
KB5020695
KB5020694
KB5020680
KB5020622
KB5020692
This security update is rated Important for supported versions of Microsoft .NET Framework.

.NET Framework 2.0, 3.0, 3.5, 3.5.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8, and 4.8.1

QID Detection Logic (Authenticated):
Checks for vulnerable version of ntoskrnl.exe or Mscorlib.dll for the respective .Net Framework KBs

Successful exploitation allows a attacker to cause Information Disclosure Vulnerability.

CVSS V3 rated as Medium - 5.8 severity.

CVSS V2 rated as Medium - 4.6 severity.

Solution

Customers are advised to refer to CVE-2022-41064 for more details pertaining to this vulnerability.

Vendor References

KB5019970 - support.microsoft.com/help/5019970
KB5020614 - support.microsoft.com/help/5020614
KB5020622 - support.microsoft.com/help/5020622
KB5020678 - support.microsoft.com/help/5020678
KB5020679 - support.microsoft.com/help/5020679
KB5020680 - support.microsoft.com/help/5020680
KB5020681 - support.microsoft.com/help/5020681
KB5020685 - support.microsoft.com/help/5020685
KB5020686 - support.microsoft.com/help/5020686
KB5020687 - support.microsoft.com/help/5020687
KB5020688 - support.microsoft.com/help/5020688
KB5020689 - support.microsoft.com/help/5020689
KB5020690 - support.microsoft.com/help/5020690
KB5020691 - support.microsoft.com/help/5020691
KB5020692 - support.microsoft.com/help/5020692
KB5020694 - support.microsoft.com/help/5020694
KB5020695 - support.microsoft.com/help/5020695
KB5020801 - support.microsoft.com/help/5020801

CVEs related to QID 91954

CVE-2022-41064 |

Software Advisories

Advisory ID	Software	Component	Link
CVE-2022-41064			msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41064

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].