Multiple vulnerabilities in Microsoft Windows

Description

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service, gain privileges, execute arbitrary code, bypass security restrictions, spoof user interface.

Below is a complete list of vulnerabilities:

1. An information disclosure vulnerability in Windows GDI can be exploited remotely via specially crafted document to obtain sensitive information.
2. A denial of service vulnerability in Windows can be exploited remotely via specially crafted application to cause denial of service.
3. A denial of service vulnerability in Windows Hyper-V can be exploited remotely via specially crafted application to cause denial of service.
4. An elevation of privilege vulnerability in Windows ALPC can be exploited remotely via specially crafted application to gain privileges.
5. An elevation of privilege vulnerability in Windows Installer can be exploited remotely to gain privileges.
6. An elevation of privilege vulnerability in Windows can be exploited remotely via specially crafted application to gain privileges.
7. An elevation of privilege vulnerability in Windows Storage Service can be exploited remotely via specially crafted application to gain privileges.
8. An elevation of privilege vulnerability in Windows User Profile Service can be exploited remotely via specially crafted application to gain privileges.
9. An elevation of privilege vulnerability in Windows Audio Service can be exploited remotely via specially crafted application to gain privileges.
10. An information disclosure vulnerability in Windows Event Viewer can be exploited remotely via specially crafted to obtain sensitive information.
11. A remote code execution vulnerability in Jet Database Engine can be exploited remotely via specially crafted file to execute arbitrary code.
12. An elevation of privilege vulnerability in Windows Common Log File System Driver can be exploited remotely via specially crafted application to gain privileges.
13. An elevation of privilege vulnerability in Windows Network File System can be exploited remotely via specially crafted application to gain privileges.
14. A security feature bypass vulnerability in Windows Secure Kernel Mode can be exploited remotely via specially crafted application to bypass security restrictions.
15. A security feature bypass vulnerability in Microsoft Windows can be exploited remotely via specially crafted authentication to bypass security restrictions.
16. A remote code execution vulnerability in Comctl32 can be exploited remotely via specially crafted website to execute arbitrary code.
17. An information disclosure vulnerability in Windows Kernel can be exploited remotely via specially crafted application to obtain sensitive information.
18. An elevation of privilege vulnerability in Windows Kernel can be exploited remotely via specially crafted application to gain privileges.
19. An elevation of privilege vulnerability in Win32k can be exploited remotely via specially crafted application to gain privileges.
20. An elevation of privilege vulnerability in Task Scheduler can be exploited remotely to gain privileges.
21. A denial of service vulnerability in Microsoft IIS Server can be exploited remotely via specially crafted request to cause denial of service.
22. An elevation of privilege vulnerability in DirectX can be exploited remotely via specially crafted application to gain privileges.
23. A remote code execution vulnerability in Windows Hyper-V can be exploited remotely via specially crafted application to execute arbitrary code.
24. A remote code execution vulnerability in ActiveX Data Objects (ADO) can be exploited remotely to execute arbitrary code.
25. An elevation of privilege vulnerability in Windows Shell can be exploited remotely to gain privileges.
26. A tampering vulnerability in Windows NTLM can be exploited remotely to spoof user interface.
27. A denial of service vulnerability in Local Security Authority Subsystem Service can be exploited remotely via specially crafted authentication to cause denial of service.

Original advisories

• CVE-2019-1046

• CVE-2019-1025
• CVE-2019-0713
• CVE-2019-0943
• CVE-2019-0973
• CVE-2019-1064
• CVE-2019-0998
• CVE-2019-0986
• CVE-2019-1015
• CVE-2019-1022
• CVE-2019-0711
• CVE-2019-0948
• CVE-2019-0710
• CVE-2019-0909
• CVE-2019-0984
• CVE-2019-1045
• CVE-2019-0907
• CVE-2019-1050
• CVE-2019-1044
• CVE-2019-1019
• CVE-2019-1043
• CVE-2019-1039
• CVE-2019-0905
• CVE-2019-1065
• CVE-2019-1010
• CVE-2019-0974
• CVE-2019-0908
• CVE-2019-1028
• CVE-2019-1021
• CVE-2019-0983
• CVE-2019-0904
• CVE-2019-1014
• CVE-2019-1027
• CVE-2019-1069
• CVE-2019-1026
• CVE-2019-1041
• CVE-2019-0941
• CVE-2019-0906
• CVE-2019-1012
• CVE-2019-1018
• CVE-2019-0722
• CVE-2019-0620
• CVE-2019-0888
• CVE-2019-0959
• CVE-2019-1053
• CVE-2019-1040
• CVE-2019-1017
• CVE-2019-0709
• CVE-2019-1007
• CVE-2019-0972
• ADV190016
• ADV190017

Exploitation

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

• Microsoft-Windows
• Microsoft-Windows-Server
• Microsoft-Windows-Server-2012
• Microsoft-Windows-8
• Microsoft-Windows-7
• Microsoft-Windows-Server-2008
• Windows-RT
• Microsoft-Windows-10

CVE list

• CVE-2019-1065
  high
• CVE-2019-0959
  high
• CVE-2019-0986
  warning
• CVE-2019-0973
  high
• CVE-2019-1040
  warning
• CVE-2019-0909
  critical
• CVE-2019-0948
  warning
• CVE-2019-1019
  high
• CVE-2019-1010
  warning
• CVE-2019-1027
  warning
• CVE-2019-1041
  high
• CVE-2019-1053
  high
• CVE-2019-0908
  critical
• CVE-2019-0722
  critical
• CVE-2019-1039
  warning
• CVE-2019-1007
  warning
• CVE-2019-1043
  critical
• CVE-2019-1025
  critical
• CVE-2019-1044
  high
• CVE-2019-0974
  critical
• CVE-2019-0709
  critical
• CVE-2019-0620
  critical
• CVE-2019-1045
  high
• CVE-2019-0905
  critical
• CVE-2019-1069
  high
• CVE-2019-1014
  high
• CVE-2019-0941
  warning
• CVE-2019-1026
  warning
• CVE-2019-0984
  high
• CVE-2019-0906
  critical
• CVE-2019-0943
  high
• CVE-2019-1028
  warning
• CVE-2019-1021
  warning
• CVE-2019-1015
  warning
• CVE-2019-1064
  high
• CVE-2019-1046
  warning
• CVE-2019-0888
  critical
• CVE-2019-0907
  critical
• CVE-2019-0711
  high
• CVE-2019-1050
  warning
• CVE-2019-1012
  warning
• CVE-2019-1018
  high
• CVE-2019-0904
  critical
• CVE-2019-1022
  warning
• CVE-2019-0713
  high
• CVE-2019-1017
  high
• CVE-2019-0998
  high
• CVE-2019-0710
  high
• CVE-2019-0983
  high
• CVE-2019-0972
  high

KB list

• 4503293
• 4503327
• 4503286
• 4503284
• 4503285
• 4503276
• 4503267
• 4503263
• 4503291
• 4503290
• 4503279
• 4507453

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com