远程 Windows 主机缺少安全更新 5041578。因此，它受到多个漏洞影响

  - 支持虚拟化安全 (VBS) 的 Windows 系统中存在特权提升漏洞，包括 Azure 虚拟机 SKUS 的子集。拥有管理员权限的攻击者可以借此将当前版本的 Windows 系统文件替换为过时版本。利用此漏洞，攻击者可重新引入之前已缓解的漏洞、避开 VBS 的某些功能，并泄露受 VBS 保护的数据。(CVE-2024-21302)

  - 在 grub_font_construct_glyph() 中发现缓冲区溢出。计算 max_glyph_size 值时，恶意构建的 pf2 字体可导致溢出，为字形分配小于所需的缓冲区，这会进一步导致缓冲区溢出和基于堆的越界写入。攻击者可能利用此漏洞避开安全启动机制。(CVE-2022-2601)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

The remote Windows host is missing security update 5041585. It is, therefore, affected by multiple vulnerabilities

  - An elevation of privilege vulnerability exists in Windows based systems supporting Virtualization Based     Security (VBS) including a subset of Azure Virtual Machine SKUS. This can allow an attacker with     administrator privileges to replace current versions of Windows system files with outdated versions. By     exploiting this vulnerability, an attacker could reintroduce previously mitigated vulnerabilities,     circumvent some features of VBS, and exfiltrate data protected by VBS. (CVE-2024-21302)

  - A buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead to an     overflow when calculating the max_glyph_size value, allocating a smaller than needed buffer for the glyph,     this further leads to a buffer overflow and a heap based out-of-bounds write. An attacker may use this     vulnerability to circumvent the secure boot mechanism. (CVE-2022-2601)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5041592. It is, therefore, affected by multiple vulnerabilities

  - An elevation of privilege vulnerability exists in Windows based systems supporting Virtualization Based     Security (VBS) including a subset of Azure Virtual Machine SKUS. This can allow an attacker with     administrator privileges to replace current versions of Windows system files with outdated versions. By     exploiting this vulnerability, an attacker could reintroduce previously mitigated vulnerabilities,     circumvent some features of VBS, and exfiltrate data protected by VBS. (CVE-2024-21302)

  - A buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead to an     overflow when calculating the max_glyph_size value, allocating a smaller than needed buffer for the glyph,     this further leads to a buffer overflow and a heap based out-of-bounds write. An attacker may use this     vulnerability to circumvent the secure boot mechanism. (CVE-2022-2601)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5041828. It is, therefore, affected by multiple vulnerabilities

  - A buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead to an     overflow when calculating the max_glyph_size value, allocating a smaller than needed buffer for the glyph,     this further leads to a buffer overflow and a heap based out-of-bounds write. An attacker may use this     vulnerability to circumvent the secure boot mechanism. (CVE-2022-2601)

  - A remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled     values when parsing an HTTP response. This flaw allows an attacker to craft a specific malicious HTTP     request, leading to a completely controlled out-of-bounds write primitive and complete system compromise.
    This flaw is only exploitable during the early boot phase, an attacker needs to perform a Man-in-the-     Middle or compromise the boot server to be able to exploit this vulnerability successfully.
    (CVE-2023-40547)

  - When rendering certain unicode sequences, grub2's font code doesn't proper validate if the informed     glyph's width and height is constrained within bitmap size. As consequence an attacker can craft an input     which will lead to a out-of-bounds write into grub2's heap, leading to memory corruption and availability     issues. Although complex, arbitrary code execution could not be discarded. (CVE-2022-3775)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5041578. It is, therefore, affected by multiple vulnerabilities

  - An elevation of privilege vulnerability exists in Windows based systems supporting Virtualization Based     Security (VBS) including a subset of Azure Virtual Machine SKUS. This can allow an attacker with     administrator privileges to replace current versions of Windows system files with outdated versions. By     exploiting this vulnerability, an attacker could reintroduce previously mitigated vulnerabilities,     circumvent some features of VBS, and exfiltrate data protected by VBS. (CVE-2024-21302)

  - A buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead to an     overflow when calculating the max_glyph_size value, allocating a smaller than needed buffer for the glyph,     this further leads to a buffer overflow and a heap based out-of-bounds write. An attacker may use this     vulnerability to circumvent the secure boot mechanism. (CVE-2022-2601)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5041773. It is, therefore, affected by multiple vulnerabilities

  - An elevation of privilege vulnerability exists in Windows based systems supporting Virtualization Based     Security (VBS) including a subset of Azure Virtual Machine SKUS. This can allow an attacker with     administrator privileges to replace current versions of Windows system files with outdated versions. By     exploiting this vulnerability, an attacker could reintroduce previously mitigated vulnerabilities,     circumvent some features of VBS, and exfiltrate data protected by VBS. (CVE-2024-21302)

  - A buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead to an     overflow when calculating the max_glyph_size value, allocating a smaller than needed buffer for the glyph,     this further leads to a buffer overflow and a heap based out-of-bounds write. An attacker may use this     vulnerability to circumvent the secure boot mechanism. (CVE-2022-2601)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
205461	KB5041578：Windows 10 版本 1809/Windows Server 2019 安全更新（2024 年 8 月）	Nessus	Windows : Microsoft Bulletins	2024/8/13	2025/10/6	critical
205448	KB5041585: Windows 11 version 22H2 / Windows 11 version 23H2 Security Update (August 2024)	Nessus	Windows : Microsoft Bulletins	2024/8/13	2025/10/6	critical
205450	KB5041592: Windows 11 version 21H2 Security Update (August 2024)	Nessus	Windows : Microsoft Bulletins	2024/8/13	2025/10/6	critical
205453	KB5041828: Windows Server 2012 R2 Security Update (August 2024)	Nessus	Windows : Microsoft Bulletins	2024/8/13	2025/10/6	critical
205461	KB5041578: Windows 10 version 1809 / Windows Server 2019 Security Update (August 2024)	Nessus	Windows : Microsoft Bulletins	2024/8/13	2025/10/6	critical
205447	KB5041773: Windows 10 Version 1607 / Windows Server 2016 Security Update (August 2024)	Nessus	Windows : Microsoft Bulletins	2024/8/13	2025/10/6	critical

検出

プラグインの検索

critical

critical

critical

critical

critical

critical