Windows Telephony Serverの脆弱性により権限が昇格されるおそれ
Summary
2024年4月に公表された、Windows Telephony Serverの脆弱性です。悪用されると権限を昇格されるおそれがあり、Windows 10 Version 1809、Windows Server 2019、Windows Server 2022、Windows 11 version 21H2、Windows 10 Version 21H2が影響を受けます。各製品には修正版が公開されているため、Windows Updateで最新の更新を適用してください。
AI summary
Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.
2024年4月に公表された、Windows Telephony Serverの脆弱性です。悪用されると権限を昇格されるおそれがあり、Windows 10 Version 1809、Windows Server 2019、Windows Server 2022、Windows 11 version 21H2、Windows 10 Version 21H2が影響を受けます。各製品には修正版が公開されているため、Windows Updateで最新の更新を適用してください。
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| MicrosoftWindows 10 Version 1809 |
≥ 10.0.0, < 10.0.17763.5696→ 10.0.17763.5696 |
10.0.17763.5696 |
| MicrosoftWindows Server 2019 |
≥ 10.0.17763.0, < 10.0.17763.5696→ 10.0.17763.5696 |
10.0.17763.5696 |
| MicrosoftWindows Server 2019 (Server Core installation) |
≥ 10.0.17763.0, < 10.0.17763.5696→ 10.0.17763.5696 |
10.0.17763.5696 |
| MicrosoftWindows Server 2022 |
≥ 10.0.20348.0, < 10.0.20348.2402→ 10.0.20348.2402 |
10.0.20348.2402 |
| MicrosoftWindows 11 version 21H2 |
≥ 10.0.0, < 10.0.22000.2899→ 10.0.22000.2899 |
10.0.22000.2899 |
| MicrosoftWindows 10 Version 21H2 |
≥ 10.0.19043.0, < 10.0.19044.4291→ 10.0.19044.4291 |
10.0.19044.4291 |
| MicrosoftWindows 11 version 22H2 |
≥ 10.0.22621.0, < 10.0.22621.3447→ 10.0.22621.3447 |
10.0.22621.3447 |
| MicrosoftWindows 10 Version 22H2 |
≥ 10.0.19045.0, < 10.0.19045.4291→ 10.0.19045.4291 |
10.0.19045.4291 |
| MicrosoftWindows 11 version 22H3 |
≥ 10.0.22631.0, < 10.0.22631.3447→ 10.0.22631.3447 |
10.0.22631.3447 |
| MicrosoftWindows 11 Version 23H2 |
≥ 10.0.22631.0, < 10.0.22631.3447→ 10.0.22631.3447 |
10.0.22631.3447 |
| MicrosoftWindows Server 2022, 23H2 Edition (Server Core installation) |
≥ 10.0.25398.0, < 10.0.25398.830→ 10.0.25398.830 |
10.0.25398.830 |
| MicrosoftWindows 10 Version 1507 |
≥ 10.0.10240.0, < 10.0.10240.20596→ 10.0.10240.20596 |
10.0.10240.20596 |
| MicrosoftWindows 10 Version 1607 |
≥ 10.0.14393.0, < 10.0.14393.6897→ 10.0.14393.6897 |
10.0.14393.6897 |
| MicrosoftWindows Server 2016 |
≥ 10.0.14393.0, < 10.0.14393.6897→ 10.0.14393.6897 |
10.0.14393.6897 |
| MicrosoftWindows Server 2016 (Server Core installation) |
≥ 10.0.14393.0, < 10.0.14393.6897→ 10.0.14393.6897 |
10.0.14393.6897 |
| MicrosoftWindows Server 2008 Service Pack 2 |
≥ 6.0.6003.0, < 6.0.6003.22618→ 6.0.6003.22618 |
6.0.6003.22618 |
| MicrosoftWindows Server 2008 Service Pack 2 (Server Core installation) |
≥ 6.0.6003.0, < 6.0.6003.22618→ 6.0.6003.22618 |
6.0.6003.22618 |
| MicrosoftWindows Server 2008 Service Pack 2 |
≥ 6.0.6003.0, < 6.0.6003.22618→ 6.0.6003.22618 |
6.0.6003.22618 |
| MicrosoftWindows Server 2008 R2 Service Pack 1 |
≥ 6.1.7601.0, < 6.1.7601.27067→ 6.1.7601.27067 |
6.1.7601.27067 |
| MicrosoftWindows Server 2008 R2 Service Pack 1 (Server Core installation) |
≥ 6.1.7601.0, < 6.1.7601.27067→ 6.1.7601.27067 |
6.1.7601.27067 |
| MicrosoftWindows Server 2012 |
≥ 6.2.9200.0, < 6.2.9200.24821→ 6.2.9200.24821 |
6.2.9200.24821 |
| MicrosoftWindows Server 2012 (Server Core installation) |
≥ 6.2.9200.0, < 6.2.9200.24821→ 6.2.9200.24821 |
6.2.9200.24821 |
| MicrosoftWindows Server 2012 R2 |
≥ 6.3.9600.0, < 6.3.9600.21924→ 6.3.9600.21924 |
6.3.9600.21924 |
| MicrosoftWindows Server 2012 R2 (Server Core installation) |
≥ 6.3.9600.0, < 6.3.9600.21924→ 6.3.9600.21924 |
6.3.9600.21924 |
Original description The description as published by the source.
Windows Telephony Server Elevation of Privilege Vulnerability
Source: CVE.org (CVE Program・cvelistV5) NVD
References
- patch msrc.microsoft.com