Multiple vulnerabilities in Microsoft Windows

Beschreibung

Multiple serious vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information and bypass security restrictions.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in DirectX Graphics Kernel (DXGKRNL) driver can be exploited via specially crafted application to gain privileges;
2. A remote code execution vulnerability in Windows Shell can be exploited remotely via specially crafted file to execute arbitrary code;
3. A remote code execution vulnerability in Microsoft Windows can be exploited remotely via parsing the .LNK file to execute arbitrary code;
4. A remote code execution vulnerability in „Microsoft COM for Windows“ can be exploited remotely via specially crafted file to execute arbitrary code;
5. A security feature bypass vulnerability in Active Directory Federation Services (AD FS) can be exploited remotely via specially crafted authentication request to bypass security restrictions;
6. An information disclosure vulnerability in Windows GDI component can be exploited remotely via specially crafted document to obtain sensetive information;
7. A security feature bypass vulnerability in Device Guard can be exploited locally via injecting malicious code into a script that is trusted by the Code Integrity policy to bypass security restrictions;
8. An information disclosure vulnerability in Windows kernel can be exploited via specially crafted application to obtain sensetive information;
9. An elevation of privilege vulnerability in Microsoft Windows can be exploited remotely via specially crafted application to gain privileges;
10. An elevation of privilege vulnerability in Windows Installer can be exploited locally via using of insecure library loading behavior to gain privileges;
11. An elevation of privilege vulnerability in the Network Driver Interface Specification (NDIS) can be exploited locally via specially crafted application to gain privileges;
12. An elevation of privilege vulnerability in Diagnostics Hub Standard Collector can be exploited locally via specially crafted application to gain privileges;
13. A remote code execution vulnerability in Microsoft Windows PDF Library can be exploited remotely via a specially crafted website to execute arbitrary code;
14. An elevation of privilege vulnerability in Win32k component can be exploited via specially crafted application to gain privileges;
15. A remote code execution vulnerability exists in Windows Graphics Device Interface (GDI) can be exploited remotely via specially crafted website or specially crafted document to execute arbitrary code;
16. An elevation of privilege vulnerability in Microsoft Cortana can be exploited locally via arbitrary website browsing on the lockscreen to gain privileges.

Ursprüngliche Informationshinweise

• CVE-2018-8405

• CVE-2018-8414
• CVE-2018-8345
• CVE-2018-8349
• CVE-2018-8401
• CVE-2018-8340
• CVE-2018-8398
• CVE-2018-8204
• CVE-2018-8406
• CVE-2018-8348
• CVE-2018-8347
• CVE-2018-8339
• CVE-2018-8343
• CVE-2018-8400
• CVE-2018-8394
• CVE-2018-8346
• CVE-2018-0952
• CVE-2018-8350
• CVE-2018-8404
• CVE-2018-8397
• CVE-2018-8396
• CVE-2018-8399
• CVE-2018-8253
• CVE-2018-8341
• CVE-2018-8200
• CVE-2018-8342
• ADV180018
• CVE-2018-8344
• CVE-2018-0952
• CVE-2018-8405
• CVE-2018-8345
• CVE-2018-8349
• CVE-2018-8401
• CVE-2018-8340
• CVE-2018-8406
• CVE-2018-8347
• CVE-2018-8339
• CVE-2018-8343
• CVE-2018-8400
• CVE-2018-8346
• CVE-2018-8404
• CVE-2018-8397
• CVE-2018-8399
• CVE-2018-8342
• CVE-2018-8344

CVE Liste

• CVE-2018-0952
  critical
• CVE-2018-8405
  critical
• CVE-2018-8414
  critical
• CVE-2018-8345
  critical
• CVE-2018-8349
  critical
• CVE-2018-8401
  critical
• CVE-2018-8340
  critical
• CVE-2018-8398
  critical
• CVE-2018-8204
  critical
• CVE-2018-8406
  critical
• CVE-2018-8348
  critical
• CVE-2018-8347
  critical
• CVE-2018-8339
  critical
• CVE-2018-8343
  critical
• CVE-2018-8400
  critical
• CVE-2018-8394
  critical
• CVE-2018-8346
  critical
• CVE-2018-8350
  critical
• CVE-2018-8404
  critical
• CVE-2018-8397
  critical
• CVE-2018-8396
  critical
• CVE-2018-8399
  critical
• CVE-2018-8253
  critical
• CVE-2018-8341
  critical
• CVE-2018-8200
  critical
• CVE-2018-8342
  critical
• CVE-2018-8344
  critical

KB Liste

• 4343909
• 4343885
• 4343887
• 4343892
• 4343897
• 4343898
• 4343899
• 4343900
• 4343901
• 4344104
• 4340937
• 4341832
• 4343888
• 4343674
• 4340939
• 4338380
• 4343896
• 4457984
• 4458010

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com