Multiple vulnerabilities in Microsoft Windows

Beschreibung

Multiple serious vulnerabilities have been found in Microsoft Windows. Malicious user can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions and execute arbitrary code.

Below is a complete list of vulnerabilities:

1. An incorrect validating of untrusted file by Device Guard can be exploited remotely via specially crafted file to bypass security restrictions;
2. A vulnerability in RPC can be exploited remotely via specially crafted application to execute arbitrary code;
3. An information disclosure vulnerability in „its://“ protocol handler can be exploited remotely to obtain sensitive information.

Ursprüngliche Informationshinweise

• CVE-2017-11885

• CVE-2017-11899
• CVE-2017-11927

Betroffene Produkte

• Microsoft-Windows
• Microsoft-Windows-Server-2012
• Microsoft-Windows-8
• Microsoft-Windows-7
• Microsoft-Windows-Server-2008
• Microsoft-Windows-10

CVE Liste

KB Liste

• 4052303
• 4053473
• 4053578
• 4053579
• 4053580
• 4053581
• 4054517
• 4054518
• 4054519
• 4054520
• 4054521
• 4054522
• 4054523
• 4103723
• 4103716
• 4103731
• 4103715
• 4103712
• 4103730
• 4103726
• 4103718
• 4103727
• 4103725
• 4130957

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com