DIESER SERVICE KANN ÜBERSETZUNGEN VON GOOGLE ENTHALTEN. GOOGLE ÜBERNIMMT KEINERLEI VERANTWORTUNG FÜR DIE ÜBERSETZUNGEN. DARUNTER FÄLLT JEGLICHE VERANTWORTUNG IN BEZUG AUF RICHTIGKEIT UND ZUVERLÄSSIGKEIT SOWIE JEGLICHE STILLSCHWEIGENDEN GEWÄHRLEISTUNGEN DER MARKTGÄNGIGKEIT, NICHT-VERLETZUNG VON RECHTEN DRITTER ODER DER EIGNUNG FÜR EINEN BESTIMMTEN ZWECK. Die Website von Kaspersky Lab wurde für Ihre Bequemlichkeit mithilfe einer Übersetzungssoftware von Google Translate übersetzt. Es wurden angemessene Bemühungen für die Bereitstellung einer akkuraten Übersetzung unternommen. Bitte beachten Sie, dass automatisierte Übersetzungen nicht perfekt sind und menschliche Übersetzer in keinem Fall ersetzen sollen. Übersetzungen werden den Nutzern der Kaspersky-Lab-Website als Service und "wie sie sind" zur Verfügung gestellt. Die Richtigkeit, Zuverlässigkeit oder Korrektheit jeglicher Übersetzungen aus dem Englischen in eine andere Sprache wird weder ausdrücklich noch stillschweigend garantiert. Einige Inhalte (z. B. Bilder, Videos, Flash, usw.) können aufgrund der Einschränkungen der Übersetzungssoftware möglicherweise nicht inhaltsgetreu übersetzt werden.
Kaspersky ID:
KLA11418
Erkennungsdatum:
02/12/2019
Aktualisiert:
03/29/2019

Beschreibung

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges, execute arbitrary code, bypass security restrictions.

Below is a complete list of vulnerabilities:

  1. An information disclosure vulnerability in Windows can be exploited remotely via specially crafted application to obtain sensitive information.
  2. An elevation of privilege vulnerability in Win32k can be exploited remotely via specially crafted application to gain privileges.
  3. An information disclosure vulnerability in Windows Kernel can be exploited remotely via specially crafted application to obtain sensitive information.
  4. A remote code execution vulnerability in Jet Database Engine can be exploited remotely via specially crafted file to execute arbitrary code.
  5. A remote code execution vulnerability in Jet Database Engine can be exploited remotely via specially crafted file to execute arbitrary code.
  6. An information disclosure vulnerability in Windows GDI can be exploited remotely via specially crafted document to obtain sensitive information.
  7. An information disclosure vulnerability in Windows GDI can be exploited remotely via specially crafted document to obtain sensitive information.
  8. An elevation of privilege vulnerability in Windows Storage Service can be exploited remotely via specially crafted application to gain privileges.
  9. An information disclosure vulnerability in HID can be exploited remotely via specially crafted application to obtain sensitive information.
  10. An information disclosure vulnerability in Windows GDI can be exploited remotely via specially crafted document to obtain sensitive information.
  11. A security feature bypass vulnerability in Windows can be exploited remotely to bypass security restrictions.
  12. A security feature bypass vulnerability in Windows can be exploited remotely to bypass security restrictions.
  13. An information disclosure vulnerability in Windows GDI can be exploited remotely via specially crafted document to obtain sensitive information.
  14. An information disclosure vulnerability in Windows GDI can be exploited remotely via specially crafted document to obtain sensitive information.
  15. An elevation of privilege vulnerability in Windows Kernel can be exploited remotely via specially crafted application to gain privileges.
  16. A remote code execution vulnerability in Windows DHCP Server can be exploited remotely via specially crafted packets to execute arbitrary code.
  17. A remote code execution vulnerability in Windows SMB can be exploited remotely via specially crafted packet to execute arbitrary code.
  18. A remote code execution vulnerability in GDI+ can be exploited remotely via specially crafted website to execute arbitrary code.
  19. A remote code execution vulnerability in Jet Database Engine can be exploited remotely via specially crafted file to execute arbitrary code.
  20. An information disclosure vulnerability in Win32k can be exploited remotely via specially crafted application to obtain sensitive information.
  21. An information disclosure vulnerability in Windows GDI can be exploited remotely via specially crafted document to obtain sensitive information.
  22. An information disclosure vulnerability in HID can be exploited remotely via specially crafted application to obtain sensitive information.
  23. A security feature bypass vulnerability in Windows Defender Firewall can be exploited remotely to bypass security restrictions.
  24. An information disclosure vulnerability in Windows Kernel can be exploited remotely via specially crafted application to obtain sensitive information.
  25. An information disclosure vulnerability in Windows Hyper-V can be exploited remotely via specially crafted application to obtain sensitive information.
  26. A remote code execution vulnerability in Jet Database Engine can be exploited remotely via specially crafted file to execute arbitrary code.
  27. A remote code execution vulnerability in Jet Database Engine can be exploited remotely via specially crafted file to execute arbitrary code.
  28. A security feature bypass vulnerability in Windows can be exploited remotely to bypass security restrictions.
  29. A remote code execution vulnerability in Windows SMB can be exploited remotely via specially crafted packet to execute arbitrary code.
  30. A remote code execution vulnerability in Jet Database Engine can be exploited remotely via specially crafted file to execute arbitrary code.
  31. A remote code execution vulnerability in GDI+ can be exploited remotely via specially crafted website to execute arbitrary code.

Ursprüngliche Informationshinweise

CVE Liste

  • CVE-2019-0636
    critical
  • CVE-2019-0623
    critical
  • CVE-2019-0661
    critical
  • CVE-2019-0599
    critical
  • CVE-2019-0595
    critical
  • CVE-2019-0664
    critical
  • CVE-2019-0615
    critical
  • CVE-2019-0659
    critical
  • CVE-2019-0600
    critical
  • CVE-2019-0619
    critical
  • CVE-2019-0627
    critical
  • CVE-2019-0631
    critical
  • CVE-2019-0660
    critical
  • CVE-2019-0616
    critical
  • CVE-2019-0656
    critical
  • CVE-2019-0626
    critical
  • CVE-2019-0633
    critical
  • CVE-2019-0618
    critical
  • CVE-2019-0625
    critical
  • CVE-2019-0628
    critical
  • CVE-2019-0602
    critical
  • CVE-2019-0601
    critical
  • CVE-2019-0637
    critical
  • CVE-2019-0621
    critical
  • CVE-2019-0635
    critical
  • CVE-2019-0597
    critical
  • CVE-2019-0596
    critical
  • CVE-2019-0632
    critical
  • CVE-2019-0630
    critical
  • CVE-2019-0598
    critical
  • CVE-2019-0662
    critical
  • CVE-2019-0663
    critical

KB Liste

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com

Sie haben einen Fehler in der Beschreibung der Schwachstelle gefunden? Mitteilen!
Kaspersky Next
Let´s go Next: Cybersicherheit neu gedacht
Erfahren Sie mehr
Neu: Kaspersky!
Dein digitales Leben verdient umfassenden Schutz!
Erfahren Sie mehr
Confirm changes?
Your message has been sent successfully.