Windows Server 2022 23h2 CVEs and Security Vulnerabilities

CVE-2024-38249

Windows Graphics Component Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 22 more

CVE-2024-38242

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS 3.4% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 17 more

CVE-2024-38241

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS 6.0% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 17 more

CVE-2024-38240

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

CVSS 3.1 · 8.1 High EPSS 1.5% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 19 more

CVE-2024-38236

DHCP Server Service Denial of Service Vulnerability

CVSS 3.1 · 7.5 High EPSS 2.3% KEV · Not listed

Vendors

Microsoft

Products

Windows Server 2008 Windows Server 2008 R2 Windows Server 2008 Sp2 and 7 more

CVE-2023-24023

kernel: Bluetooth Forward and Future Secrecy Attacks and Defenses

Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 through 5.4 allow certain man-in-the-middle attacks that force a short key length, and might lead to discovery of the encryption key and live injection, aka BLUFFS.

CVSS 3.1 · 6.4 Medium EPSS 1.3% KEV · Not listed

Vendors

Bluetooth Microsoft Redhat

Products

Bluetooth Core Specification Windows 10 1809 Windows 10 21h2 and 8 more

CVE-2023-20588

Speculative Leaks

A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality.

CVSS 3.1 · 5.5 Medium EPSS 11.2% KEV · Not listed

Vendors

Amd Debian Fedoraproject and 2 more

Products

Athlon Gold 3150g Athlon Gold 3150g Firmware Athlon Gold 3150ge and 75 more

Search vulnerabilities

Windows Graphics Component Elevation of Privilege Vulnerability

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

DHCP Server Service Denial of Service Vulnerability

kernel: Bluetooth Forward and Future Secrecy Attacks and Defenses

Speculative Leaks