Popis
Multiple vulnerabilities were found in Microsoft Products (Extended Security Update). Malicious users can exploit these vulnerabilities to gain privileges, cause denial of service, execute arbitrary code, obtain sensitive information, bypass security restrictions.
Below is a complete list of vulnerabilities:
- An elevation of privilege vulnerability in Windows Telephony Server can be exploited remotely to gain privileges.
- A denial of service vulnerability in Windows Standards-Based Storage Management Service can be exploited remotely to cause denial of service.
- A remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in Microsoft ODBC Driver can be exploited remotely to execute arbitrary code.
- An elevation of privilege vulnerability in NTFS can be exploited remotely to gain privileges.
- An information disclosure vulnerability in Windows Kernel can be exploited remotely to obtain sensitive information.
- An elevation of privilege vulnerability in Windows Print Spooler can be exploited remotely to gain privileges.
- An elevation of privilege vulnerability in Windows Kernel can be exploited remotely to gain privileges.
- An elevation of privilege vulnerability in Windows Update Stack can be exploited remotely to gain privileges.
- A remote code execution vulnerability in Windows USB Attached SCSI (UAS) Protocol can be exploited remotely to execute arbitrary code.
- An elevation of privilege vulnerability in Windows Graphics Component can be exploited remotely to gain privileges.
- A remote code execution vulnerability in Windows Hyper-V can be exploited remotely to execute arbitrary code.
- A security feature bypass vulnerability in Windows Kerberos can be exploited remotely to bypass security restrictions.
- A remote code execution vulnerability in Windows USB Hub Driver can be exploited remotely to execute arbitrary code.
- An elevation of privilege vulnerability in Windows Error Reporting Service can be exploited remotely to gain privileges.
- An elevation of privilege vulnerability in Windows Installer can be exploited remotely to gain privileges.
- A denial of service vulnerability in Windows Kernel can be exploited remotely to cause denial of service.
- An information disclosure vulnerability in RFDS can be exploited remotely to obtain sensitive information.
Oficiální doporučení
- CVE-2024-26197
- CVE-2024-21441
- CVE-2024-21450
- CVE-2024-26161
- CVE-2024-26162
- CVE-2024-21446
- CVE-2024-26166
- CVE-2024-26159
- CVE-2024-21440
- CVE-2024-26177
- CVE-2024-21433
- CVE-2024-21444
- CVE-2024-26176
- CVE-2024-26173
- CVE-2024-21432
- CVE-2024-21430
- CVE-2024-26174
- CVE-2024-21437
- CVE-2024-21407
- CVE-2024-21427
- CVE-2024-21429
- CVE-2024-21451
- CVE-2024-26169
- CVE-2024-21436
- CVE-2024-26181
- CVE-2023-28746
- CVE-2024-26178
Vykořisťování
Public exploits exist for this vulnerability.
Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.
Související produkty
- Microsoft-Windows
- Microsoft-Windows-Server
- Microsoft-Windows-Server-2012
- Microsoft-Windows-Server-2008
seznam CVE
- CVE-2024-21439 high
- CVE-2024-26197 high
- CVE-2024-21441 critical
- CVE-2024-21450 critical
- CVE-2024-26161 critical
- CVE-2024-26162 critical
- CVE-2024-21446 critical
- CVE-2024-26166 critical
- CVE-2024-26159 critical
- CVE-2024-21440 critical
- CVE-2024-26177 high
- CVE-2024-21433 high
- CVE-2024-21444 critical
- CVE-2024-26176 critical
- CVE-2024-26173 critical
- CVE-2024-21432 high
- CVE-2024-21430 high
- CVE-2024-26174 high
- CVE-2024-21437 critical
- CVE-2024-21407 critical
- CVE-2024-21427 critical
- CVE-2024-21429 high
- CVE-2024-21451 critical
- CVE-2024-26169 critical
- CVE-2024-21436 critical
- CVE-2024-26181 high
- CVE-2023-28746 high
- CVE-2024-26178 critical
seznam KB
Zobrazit více
Zjistěte statistiky zranitelností šířících se ve vaší oblasti statistics.securelist.com
Našli jste v popisu této chyby zabezpečení nepřesnost? Dej nám vědět!