KB5021235: Windows 10 Version 1607 and Windows Server 2016 Security Update (December 2022)

The remote Windows host is missing security update 5021235. It is, therefore, affected by multiple vulnerabilities

– PowerShell Remote Code Execution Vulnerability (CVE-2022-41076)

– A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. (CVE-2022-44670, CVE-2022-44676)

Note that Nessus has not tested for these issues but has instead relied only on the application’s self-reported version number.Read More