Multiple vulnerabilities in Microsoft Windows

Description

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, execute arbitrary code, spoof user interface, cause denial of service.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in Diagnostic Hub Standard Collector can be exploited remotely via specially crafted application to gain privileges.
2. An elevation of privilege vulnerability in Diagnostics Hub Standard Collector can be exploited remotely to gain privileges.
3. An elevation of privilege vulnerability in Windows Installer can be exploited to gain privileges.
4. An elevation of privilege vulnerability in Windows Update Orchestrator Service can be exploited remotely via specially crafted application to gain privileges.
5. An elevation of privilege vulnerability in Windows Installer can be exploited remotely to gain privileges.
6. An information disclosure vulnerability in Windows Modules Installer Service can be exploited remotely via specially crafted application to obtain sensitive information.
7. An elevation of privilege vulnerability in Win32k can be exploited remotely via specially crafted application to gain privileges.
8. An elevation of privilege vulnerability in Windows Mobile Device Management Diagnostics can be exploited remotely via specially crafted application to gain privileges.
9. An elevation of privilege vulnerability in Windows Device Setup Manager can be exploited to gain privileges.
10. An elevation of privilege vulnerability exists in Windows Search Indexer can be exploited to gain privileges.
11. An elevation of privilege vulnerability in Windows ALPC can be exploited remotely via specially crafted application to gain privileges.
12. An information disclosure vulnerability in Windows Imaging Component can be exploited to obtain sensitive information.
13. An elevation of privilege vulnerability in Windows Graphics Component can be exploited remotely via specially crafted application to gain privileges.
14. An information disclosure vulnerability in Windows GDI can be exploited remotely via specially crafted application to obtain sensitive information.
15. An information disclosure vulnerability in Windows Network Connections Service can be exploited remotely via specially crafted application to obtain sensitive information.
16. A memory corruption vulnerability in Media Foundation can be exploited remotely via specially crafted document to execute arbitrary code.
17. An elevation of privilege vulnerability in Windows can be exploited remotely via specially crafted application to gain privileges.
18. An elevation of privilege vulnerability in Windows Background Intelligent Transfer Service can be exploited remotely via specially crafted application to gain privileges.
19. An elevation of privilege vulnerability in Windows Hard Link can be exploited remotely via specially crafted application to gain privileges.
20. A tampering vulnerability in Microsoft IIS Server can be exploited remotely to spoof user interface.
21. An elevation of privilege vulnerability in Windows Defender Security Center can be exploited remotely to gain privileges.
22. An elevation of privilege vulnerability in Windows Defender Security Center can be exploited remotely via specially crafted command to gain privileges.
23. An elevation of privilege vulnerability in Windows Network List Service can be exploited remotely via specially crafted application to gain privileges.
24. An elevation of privilege vulnerability in Windows Universal Plug and Play (UPnP) service can be exploited to gain privileges.
25. An elevation of privilege vulnerability in Windows UPnP Service can be exploited remotely via specially crafted script to gain privileges.
26. An information disclosure vulnerability in Windows GDI can be exploited remotely via specially crafted document to obtain sensitive information.
27. An elevation of privilege vulnerability in Windows User Profile Service can be exploited remotely via specially crafted application to gain privileges.
28. A denial of service vulnerability in Windows Tile Object Service can be exploited remotely via specially crafted application to cause denial of service.
29. An elevation of privilege vulnerability in Windows CSC Service can be exploited remotely via specially crafted application to gain privileges.
30. An elevation of privilege vulnerability in Windows Work Folder Service can be exploited remotely via specially crafted application to gain privileges.
31. A remote code execution vulnerability in LNK can be exploited remotely to execute arbitrary code.
32. An elevation of privilege vulnerability in Windows Network Connections Service can be exploited remotely via specially crafted application to gain privileges.
33. An elevation of privilege vulnerability in Windows Error Reporting can be exploited remotely via specially crafted application to gain privileges.
34. An information disclosure vulnerability in Media Foundation can be exploited remotely via specially crafted application to obtain sensitive information.
35. An elevation of privilege vulnerability in Windows Language Pack Installer can be exploited remotely via specially crafted application to gain privileges.
36. An elevation of privilege vulnerability in Provisioning Runtime can be exploited remotely to gain privileges.
37. An elevation of privilege vulnerability in Windows ActiveX Installer Service can be exploited remotely via specially crafted application to gain privileges.
38. An information disclosure vulnerability in Connected User Experiences and Telemetry Service can be exploited remotely via specially crafted application to obtain sensitive information.
39. An elevation of privilege vulnerability in Connected User Experiences and Telemetry Service can be exploited remotely via specially crafted application to gain privileges.
40. An information disclosure vulnerability in Windows Graphics Component can be exploited remotely via specially crafted document to obtain sensitive information.
41. A remote code execution vulnerability in GDI+ can be exploited remotely via specially crafted website to execute arbitrary code.
42. An information disclosure vulnerability in Windows Error Reporting can be exploited remotely via specially crafted application to obtain sensitive information.
43. An information disclosure vulnerability in Win32k can be exploited remotely via specially crafted application to obtain sensitive information.
44. An elevation of privilege vulnerability in Windows Kernel can be exploited remotely via specially crafted application to gain privileges.
45. An elevation of privilege vulnerability in DirectX can be exploited remotely via specially crafted application to gain privileges.
46. An information disclosure vulnerability in Windows Network Driver Interface Specification (NDIS) can be exploited remotely via specially crafted application to obtain sensitive information.

Microsoft is aware of a remote code execution vulnerability in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target SMB Server or SMB Client.

To exploit the vulnerability against an SMB Server, an unauthenticated attacker could send a specially crafted packet to a targeted SMBv3 Server. To exploit the vulnerability against an SMB Client, an unauthenticated attacker would need to configure a malicious SMBv3 Server and convince a user to connect to it.

Original advisories

• CVE-2020-0810

• CVE-2020-0867
• CVE-2020-0814
• CVE-2020-0859
• CVE-2020-0788
• CVE-2020-0854
• CVE-2020-0834
• CVE-2020-0898
• CVE-2020-0877
• CVE-2020-0874
• CVE-2020-0871
• CVE-2020-0869
• CVE-2020-0858
• CVE-2020-0787
• CVE-2020-0849
• CVE-2020-0896
• CVE-2020-0879
• CVE-2020-0645
• CVE-2020-0763
• CVE-2020-0780
• CVE-2020-0783
• CVE-2020-0882
• CVE-2020-0785
• CVE-2020-0786
• CVE-2020-0769
• CVE-2020-0864
• CVE-2020-0684
• CVE-2020-0774
• CVE-2020-0897
• CVE-2020-0845
• CVE-2020-0807
• CVE-2020-0806
• CVE-2020-0804
• CVE-2020-0803
• CVE-2020-0802
• CVE-2020-0801
• CVE-2020-0800
• CVE-2020-0820
• CVE-2020-0822
• CVE-2020-0809
• CVE-2020-0808
• CVE-2020-0865
• CVE-2020-0842
• CVE-2020-0841
• CVE-2020-0840
• CVE-2020-0843
• CVE-2020-0860
• CVE-2020-0863
• CVE-2020-0844
• CVE-2020-0887
• CVE-2020-0885
• CVE-2020-0883
• CVE-2020-0868
• CVE-2020-0881
• CVE-2020-0880
• CVE-2020-0775
• CVE-2020-0876
• CVE-2020-0777
• CVE-2020-0776
• CVE-2020-0771
• CVE-2020-0799
• CVE-2020-0773
• CVE-2020-0798
• CVE-2020-0797
• CVE-2020-0772
• CVE-2020-0793
• CVE-2020-0778
• CVE-2020-0791
• CVE-2020-0690
• CVE-2020-0866
• CVE-2020-0770
• CVE-2020-0861
• CVE-2020-0779
• CVE-2020-0819
• CVE-2020-0857
• CVE-2020-0853
• CVE-2020-0762
• CVE-2020-0781
• ADV200005

Exploitation

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

• Microsoft-Visual-Studio
• Microsoft-Windows
• Microsoft-Windows-Server
• Microsoft-Windows-Server-2012
• Microsoft-Windows-8
• Microsoft-Windows-7
• Microsoft-Windows-Server-2008
• Windows-RT
• Microsoft-Windows-10

CVE list

• CVE-2020-0810
  critical
• CVE-2020-0793
  critical
• CVE-2020-0779
  high
• CVE-2020-0867
  critical
• CVE-2020-0814
  critical
• CVE-2020-0859
  high
• CVE-2020-0788
  critical
• CVE-2020-0854
  high
• CVE-2020-0819
  critical
• CVE-2020-0857
  critical
• CVE-2020-0834
  critical
• CVE-2020-0853
  high
• CVE-2020-0898
  critical
• CVE-2020-0877
  critical
• CVE-2020-0874
  high
• CVE-2020-0871
  high
• CVE-2020-0869
  critical
• CVE-2020-0858
  critical
• CVE-2020-0787
  critical
• CVE-2020-0849
  critical
• CVE-2020-0896
  critical
• CVE-2020-0879
  high
• CVE-2020-0645
  critical
• CVE-2020-0762
  critical
• CVE-2020-0763
  critical
• CVE-2020-0780
  critical
• CVE-2020-0781
  critical
• CVE-2020-0783
  critical
• CVE-2020-0882
  high
• CVE-2020-0785
  high
• CVE-2020-0786
  high
• CVE-2020-0769
  critical
• CVE-2020-0864
  critical
• CVE-2020-0684
  critical
• CVE-2020-0774
  high
• CVE-2020-0897
  critical
• CVE-2020-0845
  critical
• CVE-2020-0807
  critical
• CVE-2020-0806
  critical
• CVE-2020-0804
  critical
• CVE-2020-0803
  critical
• CVE-2020-0802
  critical
• CVE-2020-0801
  critical
• CVE-2020-0800
  critical
• CVE-2020-0820
  high
• CVE-2020-0822
  critical
• CVE-2020-0809
  critical
• CVE-2020-0808
  critical
• CVE-2020-0865
  critical
• CVE-2020-0842
  critical
• CVE-2020-0841
  critical
• CVE-2020-0840
  critical
• CVE-2020-0843
  critical
• CVE-2020-0860
  critical
• CVE-2020-0863
  high
• CVE-2020-0844
  critical
• CVE-2020-0887
  critical
• CVE-2020-0885
  warning
• CVE-2020-0883
  critical
• CVE-2020-0868
  critical
• CVE-2020-0881
  critical
• CVE-2020-0880
  high
• CVE-2020-0775
  high
• CVE-2020-0876
  critical
• CVE-2020-0777
  critical
• CVE-2020-0776
  critical
• CVE-2020-0771
  critical
• CVE-2020-0799
  critical
• CVE-2020-0773
  critical
• CVE-2020-0798
  critical
• CVE-2020-0797
  critical
• CVE-2020-0772
  critical
• CVE-2020-0778
  critical
• CVE-2020-0791
  critical
• CVE-2020-0690
  critical
• CVE-2020-0866
  critical
• CVE-2020-0770
  critical
• CVE-2020-0861
  critical

KB list

• 4538461
• 4541510
• 4540689
• 4541509
• 4540681
• 4540693
• 4540673
• 4540670
• 4540694
• 4541505
• 4560960
• 4557957
• 4561602
• 4561608
• 4561621

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com