KLA12503 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in Windows ALPC can be exploited remotely to gain privileges.
2. A remote code execution vulnerability in Windows Network File System can be exploited remotely to execute arbitrary code.

Original advisories

CVE-2022-24482

CVE-2022-24497

Exploitation

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

Microsoft-Windows

CVE list

CVE-2022-24482 high

CVE-2022-24497 critical

KB list

5012653

5012647

5012599

5012596

5012666

5012639

5012592

5012604

5012591

5012650

5012670

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

• PE

Privilege escalation. Exploitation of vulnerabilities with this impact can lead to performing by abuser actions, which are normally disallowed for current role.

Affected Products

• Windows 10 Version 20H2 for x64-based SystemsWindows 10 for 32-bit SystemsWindows Server 2012 R2Windows Server 2012 (Server Core installation)Windows 10 Version 21H1 for 32-bit SystemsWindows 10 Version 1909 for x64-based SystemsWindows Server 2016Windows RT 8.1Windows 10 Version 1809 for ARM64-based SystemsWindows Server 2022 (Server Core installation)Windows 10 Version 1809 for x64-based SystemsWindows Server 2016 (Server Core installation)Windows Server 2019Windows 10 Version 21H2 for ARM64-based SystemsWindows Server 2019 (Server Core installation)Windows 11 for x64-based SystemsWindows 10 Version 21H1 for x64-based SystemsWindows 10 Version 1607 for x64-based SystemsWindows 8.1 for 32-bit systemsWindows 8.1 for x64-based systemsWindows Server 2022Windows 11 for ARM64-based SystemsWindows 10 for x64-based SystemsWindows 10 Version 21H1 for ARM64-based SystemsWindows 10 Version 21H2 for 32-bit SystemsWindows 10 Version 1909 for 32-bit SystemsWindows 10 Version 21H2 for x64-based SystemsWindows Server 2012Windows 10 Version 20H2 for ARM64-based SystemsWindows Server, version 20H2 (Server Core Installation)Windows 10 Version 1809 for 32-bit SystemsWindows 10 Version 20H2 for 32-bit SystemsWindows 10 Version 1607 for 32-bit SystemsWindows Server 2012 R2 (Server Core installation)Windows 10 Version 1909 for ARM64-based Systems