Description
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information, cause denial of service, bypass security restrictions.
Below is a complete list of vulnerabilities:
- A remote code execution vulnerability in Windows DHCP Server can be exploited remotely via specially crafted packets to execute arbitrary code.
- A remote code execution vulnerability in DirectWrite can be exploited remotely via specially crafted document to execute arbitrary code.
- An elevation of privilege vulnerability in Windows can be exploited remotely via specially crafted application to gain privileges.
- An elevation of privilege vulnerability in Windows Audio Service can be exploited remotely via specially crafted application to gain privileges.
- An elevation of privilege vulnerability in DirectX can be exploited remotely via specially crafted application to gain privileges.
- An information disclosure vulnerability in DirectWrite can be exploited remotely via specially crafted document to obtain sensitive information.
- An information disclosure vulnerability in Remote Desktop Protocol Client can be exploited remotely via specially crafted application to obtain sensitive information.
- An elevation of privilege vulnerability in Windows RPCSS can be exploited remotely via specially crafted application to gain privileges.
- An information disclosure vulnerability in Windows GDI can be exploited remotely via specially crafted document to obtain sensitive information.
- An information disclosure vulnerability in Microsoft unistore.dll can be exploited remotely via specially crafted application to obtain sensitive information.
- An information disclosure vulnerability in Win32k can be exploited remotely via specially crafted application to obtain sensitive information.
- An elevation of privilege vulnerability in Microsoft splwow64 can be exploited remotely to gain privileges.
- Security bypass vulnerabulity in Windows Communication Foundation can be exploited remotely to gain privileges.
- An information disclosure vulnerability in Windows Kernel can be exploited remotely via specially crafted application to obtain sensitive information.
- A denial of service vulnerability in SymCrypt can be exploited remotely via specially crafted digital to cause denial of service.
- An elevation of privilege vulnerability in Windows Error Reporting can be exploited remotely to gain privileges.
- A denial of service vulnerability in Windows Hyper-V can be exploited remotely via specially crafted application to cause denial of service.
- A remote code execution vulnerability in GDI+ can be exploited remotely via specially crafted website to execute arbitrary code.
- An elevation of privilege vulnerability in Windows WLAN Service can be exploited remotely via specially crafted application to gain privileges.
- A denial of service vulnerability in Windows DNS Server can be exploited remotely to cause denial of service.
- A remote code execution vulnerability in Remote Desktop Services can be exploited remotely to execute arbitrary code.
- An elevation of privilege vulnerability in Windows dnsrlvr.dll can be exploited remotely via specially crafted application to gain privileges.
- An elevation of privilege vulnerability in Microsoft Windows can be exploited remotely to gain privileges.
- A security feature bypass vulnerability in ADFS can be exploited remotely via specially crafted application to bypass security restrictions.
- A security feature bypass vulnerability in ADFS can be exploited remotely to bypass security restrictions.
- An elevation of privilege vulnerability in Windows Kernel can be exploited remotely via specially crafted application to gain privileges.
Original advisories
- CVE-2019-1121
- CVE-2019-1086
- CVE-2019-1096
- CVE-2019-1089
- CVE-2019-1130
- CVE-2019-1087
- CVE-2019-1037
- CVE-2019-1090
- CVE-2019-0880
- CVE-2019-1085
- CVE-2019-1006
- CVE-2019-0785
- CVE-2019-1108
- CVE-2019-0865
- CVE-2019-1095
- CVE-2019-1129
- CVE-2019-1082
- CVE-2019-0999
- CVE-2019-1126
- CVE-2019-1071
- CVE-2019-1094
- CVE-2019-1122
- CVE-2019-1091
- CVE-2019-1117
- CVE-2019-0966
- CVE-2019-1074
- CVE-2019-1127
- CVE-2019-1102
- CVE-2019-1119
- CVE-2019-0975
- CVE-2019-1093
- CVE-2019-1124
- CVE-2019-1128
- CVE-2019-1123
- CVE-2019-1073
- CVE-2019-0887
- CVE-2019-1097
- CVE-2019-0811
- CVE-2019-1088
- CVE-2019-1067
- CVE-2019-1118
Exploitation
Public exploits exist for this vulnerability.
Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.
Related products
- Microsoft-Windows-Server-2012
- Microsoft-Windows-8
- Microsoft-Windows-7
- Microsoft-Windows-Server-2008
- Microsoft-Windows-10
CVE list
- CVE-2019-0785 critical
- CVE-2019-1120 critical
- CVE-2019-1130 high
- CVE-2019-1127 critical
- CVE-2019-1086 warning
- CVE-2019-1128 critical
- CVE-2019-0999 high
- CVE-2019-1129 high
- CVE-2019-1093 warning
- CVE-2019-1108 warning
- CVE-2019-1097 warning
- CVE-2019-1087 warning
- CVE-2019-1123 critical
- CVE-2019-1089 high
- CVE-2019-1095 warning
- CVE-2019-1124 critical
- CVE-2019-1091 warning
- CVE-2019-1096 warning
- CVE-2019-0880 warning
- CVE-2019-1006 warning
- CVE-2019-1117 critical
- CVE-2019-1088 warning
- CVE-2019-1071 warning
- CVE-2019-1121 critical
- CVE-2019-1094 warning
- CVE-2019-1119 critical
- CVE-2019-1122 critical
- CVE-2019-0865 warning
- CVE-2019-1037 high
- CVE-2019-0966 high
- CVE-2019-1102 critical
- CVE-2019-1118 critical
- CVE-2019-1085 warning
- CVE-2019-0811 warning
- CVE-2019-0887 critical
- CVE-2019-1090 high
- CVE-2019-1074 warning
- CVE-2019-1073 warning
- CVE-2019-1126 warning
- CVE-2019-1082 high
- CVE-2019-0975 high
- CVE-2019-1067 high
KB list
Read more
Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com
Found an inaccuracy in the description of this vulnerability? Let us know!