Descrição
Multiple vulnerabilities were found in Microsoft Products (Extended Security Update). Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, gain privileges.
Below is a complete list of vulnerabilities:
- A remote code execution vulnerability in Windows Encrypting File System (EFS) can be exploited remotely to execute arbitrary code.
- An information disclosure vulnerability in Microsoft Local Security Authority Server (lsasrv) can be exploited remotely to obtain sensitive information.
- An elevation of privilege vulnerability in Windows Remote Access Connection Manager can be exploited remotely to gain privileges.
- An elevation of privilege vulnerability in Windows Remote Access can be exploited remotely to gain privileges.
- An elevation of privilege vulnerability in Windows Installer can be exploited remotely to gain privileges.
- An elevation of privilege vulnerability in Windows NTFS can be exploited remotely to gain privileges.
- An elevation of privilege vulnerability in Windows Common Log File System Driver can be exploited remotely to gain privileges.
- A remote code execution vulnerability in Windows Fax Service can be exploited remotely to execute arbitrary code.
- A memory corruption vulnerability in iSNS Server can be exploited remotely to execute arbitrary code.
- An elevation of privilege vulnerability in Windows Encrypting File System (EFS) can be exploited remotely to gain privileges.
- An information disclosure vulnerability in Windows Common Log File System Driver can be exploited remotely to obtain sensitive information.
- An information disclosure vulnerability in Microsoft Message Queuing can be exploited remotely to obtain sensitive information.
- A remote code execution vulnerability in Remote Desktop Client can be exploited remotely to execute arbitrary code.
- An elevation of privilege vulnerability in Windows Digital TV Tuner can be exploited remotely to gain privileges.
- An elevation of privilege vulnerability in Windows Media Center can be exploited remotely to gain privileges.
- An elevation of privilege vulnerability in Windows Print Spooler can be exploited remotely to gain privileges.
- A remote code execution vulnerability in Windows Event Tracing can be exploited remotely to execute arbitrary code.
- An elevation of privilege vulnerability in Windows Digital Media Receiver can be exploited remotely to gain privileges.
Comunicados originais
- CVE-2021-43216
- CVE-2021-43223
- CVE-2021-43238
- CVE-2021-43883
- CVE-2021-43229
- CVE-2021-43226
- CVE-2021-43234
- CVE-2021-43215
- CVE-2021-43893
- CVE-2021-43230
- CVE-2021-43224
- CVE-2021-43222
- CVE-2021-43233
- CVE-2021-43245
- CVE-2021-40441
- CVE-2021-41333
- CVE-2021-43236
- CVE-2021-43207
- CVE-2021-43232
- CVE-2021-43248
Exploração
Public exploits exist for this vulnerability.
Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.
Produtos relacionados
- Microsoft-Windows
- Microsoft-Windows-Server
- Microsoft-Windows-Server-2012
- Microsoft-Windows-7
- Microsoft-Windows-Server-2008
Lista de CVE
- CVE-2021-43217 critical
- CVE-2021-43216 high
- CVE-2021-43223 critical
- CVE-2021-43238 critical
- CVE-2021-43883 critical
- CVE-2021-43229 critical
- CVE-2021-43226 critical
- CVE-2021-43232 critical
- CVE-2021-43234 critical
- CVE-2021-43215 critical
- CVE-2021-43893 critical
- CVE-2021-43230 critical
- CVE-2021-43224 high
- CVE-2021-43222 critical
- CVE-2021-43233 critical
- CVE-2021-43245 critical
- CVE-2021-40441 critical
- CVE-2021-43248 critical
- CVE-2021-41333 critical
- CVE-2021-43236 critical
- CVE-2021-43207 critical
Lista de KB
Saiba mais
Descubra as estatísticas das vulnerabilidades que se espalham em sua região statistics.securelist.com
Encontrou uma imprecisão na descrição desta vulnerabilidade? Avise-nos!