Description
Multiple serious vulnerabilities have been found in Microsoft Windows. Malicious user can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions and execute arbitrary code.
Below is a complete list of vulnerabilities:
- An incorrect validating of untrusted file by Device Guard can be exploited remotely via specially crafted file to bypass security restrictions;
- A vulnerability in RPC can be exploited remotely via specially crafted application to execute arbitrary code;
- An information disclosure vulnerability in “its://” protocol handler can be exploited remotely to obtain sensitive information.
Original advisories
Exploitation
Public exploits exist for this vulnerability.
Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.
Related products
- Microsoft-Windows
- Microsoft-Windows-Server-2012
- Microsoft-Windows-8
- Microsoft-Windows-7
- Microsoft-Windows-Server-2008
- Microsoft-Windows-10
CVE list
- CVE-2017-11885 critical
- CVE-2017-11899 critical
- CVE-2017-11927 warning
KB list
- 4053578
- 4053579
- 4053580
- 4053581
- 4054517
- 4054519
- 4054520
- 4054522
- 4054523
- 4103723
- 4103716
- 4103731
- 4103715
- 4103730
- 4103726
- 4103727
- 4103725
Read more
Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com
Found an inaccuracy in the description of this vulnerability? Let us know!