Beschreibung
Multiple vulnerabilities were found in Microsoft Products (Extended Security Update). Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, gain privileges.
Below is a complete list of vulnerabilities:
- A remote code execution vulnerability in Windows Encrypting File System (EFS) can be exploited remotely to execute arbitrary code.
- An information disclosure vulnerability in Microsoft Local Security Authority Server (lsasrv) can be exploited remotely to obtain sensitive information.
- An elevation of privilege vulnerability in Windows Remote Access Connection Manager can be exploited remotely to gain privileges.
- An elevation of privilege vulnerability in Windows Remote Access can be exploited remotely to gain privileges.
- An elevation of privilege vulnerability in Windows Installer can be exploited remotely to gain privileges.
- An elevation of privilege vulnerability in Windows NTFS can be exploited remotely to gain privileges.
- An elevation of privilege vulnerability in Windows Common Log File System Driver can be exploited remotely to gain privileges.
- A remote code execution vulnerability in Windows Fax Service can be exploited remotely to execute arbitrary code.
- A memory corruption vulnerability in iSNS Server can be exploited remotely to execute arbitrary code.
- An elevation of privilege vulnerability in Windows Encrypting File System (EFS) can be exploited remotely to gain privileges.
- An information disclosure vulnerability in Windows Common Log File System Driver can be exploited remotely to obtain sensitive information.
- An information disclosure vulnerability in Microsoft Message Queuing can be exploited remotely to obtain sensitive information.
- A remote code execution vulnerability in Remote Desktop Client can be exploited remotely to execute arbitrary code.
- An elevation of privilege vulnerability in Windows Digital TV Tuner can be exploited remotely to gain privileges.
- An elevation of privilege vulnerability in Windows Media Center can be exploited remotely to gain privileges.
- An elevation of privilege vulnerability in Windows Print Spooler can be exploited remotely to gain privileges.
- A remote code execution vulnerability in Windows Event Tracing can be exploited remotely to execute arbitrary code.
- An elevation of privilege vulnerability in Windows Digital Media Receiver can be exploited remotely to gain privileges.
Ursprüngliche Informationshinweise
- CVE-2021-43216
- CVE-2021-43223
- CVE-2021-43238
- CVE-2021-43883
- CVE-2021-43229
- CVE-2021-43226
- CVE-2021-43234
- CVE-2021-43215
- CVE-2021-43893
- CVE-2021-43230
- CVE-2021-43224
- CVE-2021-43222
- CVE-2021-43233
- CVE-2021-43245
- CVE-2021-40441
- CVE-2021-41333
- CVE-2021-43236
- CVE-2021-43207
- CVE-2021-43232
- CVE-2021-43248
Ausnutzung
Public exploits exist for this vulnerability.
Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.
Betroffene Produkte
- Microsoft-Windows
- Microsoft-Windows-Server
- Microsoft-Windows-Server-2012
- Microsoft-Windows-7
- Microsoft-Windows-Server-2008
CVE Liste
- CVE-2021-43217 critical
- CVE-2021-43216 high
- CVE-2021-43223 critical
- CVE-2021-43238 critical
- CVE-2021-43883 critical
- CVE-2021-43229 critical
- CVE-2021-43226 critical
- CVE-2021-43232 critical
- CVE-2021-43234 critical
- CVE-2021-43215 critical
- CVE-2021-43893 critical
- CVE-2021-43230 critical
- CVE-2021-43224 high
- CVE-2021-43222 critical
- CVE-2021-43233 critical
- CVE-2021-43245 critical
- CVE-2021-40441 critical
- CVE-2021-43248 critical
- CVE-2021-41333 critical
- CVE-2021-43236 critical
- CVE-2021-43207 critical
KB Liste
Mehr erfahren
Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com
Sie haben einen Fehler in der Beschreibung der Schwachstelle gefunden? Mitteilen!