Kaspersky ID:
KLA11165
Detect Date:
01/03/2018
Updated:
01/22/2024

Description

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, cause denial of service.

Below is a complete list of vulnerabilities:

  1. An elevation of privilege vulnerability in Windows Subsystem for Linux can be exploited remotely via specially crafted application to gain privileges.
  2. An elevation of privilege vulnerability in Windows Kernel can be exploited remotely via specially crafted application to gain privileges.
  3. An information disclosure vulnerability in Windows Kernel can be exploited remotely via specially crafted application to obtain sensitive information.
  4. An elevation of privilege vulnerability in Windows can be exploited remotely via specially crafted application to gain privileges.
  5. An elevation of privilege vulnerability in SMB Server can be exploited remotely via specially crafted file to gain privileges.
  6. A denial of service vulnerability in Windows IPSec can be exploited remotely to cause denial of service.
  7. An information disclosure vulnerability in OpenType Font Driver can be exploited remotely via specially crafted fonts to obtain sensitive information.
  8. An elevation of privilege vulnerability in OpenType Font Driver can be exploited remotely via specially crafted application to obtain sensitive information.

Original advisories

Exploitation

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

CVE list

  • CVE-2018-0743
    warning
  • CVE-2018-0744
    warning
  • CVE-2018-0745
    warning
  • CVE-2018-0746
    warning
  • CVE-2018-0747
    warning
  • CVE-2018-0748
    warning
  • CVE-2018-0749
    warning
  • CVE-2018-0751
    warning
  • CVE-2018-0752
    warning
  • CVE-2018-0753
    high
  • CVE-2018-0754
    warning
  • CVE-2018-0788
    high

KB list

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com

Found an inaccuracy in the description of this vulnerability? Let us know!
Kaspersky Next
Let’s go Next: redefine your business’s cybersecurity
Learn more
New Kaspersky!
Your digital life deserves complete protection!
Learn more
Confirm changes?
Your message has been sent successfully.