Searching
..

Click anywhere to stop

KLA12476
Multiple vulnerabilities in Microsoft Apps

Обновлено: 18/10/2022
Дата обнаружения
08/03/2022
Уровень угрозы
Warning
Описание

Multiple vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code.

Below is a complete list of vulnerabilities:

  1. A security feature bypass vulnerability in Microsoft Intune Portal for iOS can be exploited remotely to bypass security restrictions
  2. A remote code execution vulnerability in Paint 3D can be exploited remotely to execute arbitrary code.
Пораженные продукты

Microsoft Intune Portal
Paint 3D

Решение

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Первичный источник обнаружения
CVE-2022-24465
CVE-2022-23282
Оказываемое влияние
?
ACE 
[?]

SB 
[?]
Связанные продукты
Microsoft Intune Portal
Paint 3D