QID 91984

Date Published: 2023-02-15

QID 91984: Microsoft Windows Server Privilege Escalation Vulnerability

Microsoft Windows Server Security Update - Feburary 2023

QID Detection Logic (Authenticated):
Operating Systems: Windows Server 2008, Windows Server 2008 R2

The KB Articles associated with the update:
The patch version is 6.1.7601.26362 for KB5022872
The patch version is 6.1.7601.26362 for KB5022874
The patch version is 6.0.6003.21911 for KB5022890
The patch version is 6.0.6003.21911 for KB5022893

This QID checks for the file version of ntoskrnl.exe.

Successful exploitation of this vulnerability may allow a low privileged attacker to execute code with elevated permissions.

CVSS V3 rated as High - 7.8 severity.

CVSS V2 rated as Critical - 10 severity.

Solution

Please refer to the following KB Articles associated with the update:
KB5022872
KB5022874
KB5022890
KB5022893

Vendor References

KB5022872 - support.microsoft.com/en-in/help/5022872
KB5022874 - support.microsoft.com/en-in/help/5022874
KB5022890 - support.microsoft.com/en-in/help/5022890
KB5022893 - support.microsoft.com/en-in/help/5022893

CVEs related to QID 91984

CVE-2023-21800 |

Software Advisories

Advisory ID	Software	Component	Link
KB5022872			support.microsoft.com/en-in/help/5022872
KB5022874			support.microsoft.com/en-in/help/5022874
KB5022890			support.microsoft.com/en-in/help/5022890
KB5022893			support.microsoft.com/en-in/help/5022893

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].