Multiple vulnerabilities in Microsoft Products (ESU)

Description

Multiple vulnerabilities were found in Microsoft Products (Extended Support Update). Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, cause denial of service, bypass security restrictions.

Below is a complete list of vulnerabilities:

1. An information disclosure vulnerability in Microsoft Graphics Component can be exploited remotely via specially crafted application to obtain sensitive information.
2. A remote code execution vulnerability in Windows OLE can be exploited remotely via specially crafted file to execute arbitrary code.
3. An elevation of privilege vulnerability in Windows WalletService can be exploited remotely via specially crafted application to gain privileges.
4. An information disclosure vulnerability in Windows GDI can be exploited remotely via specially crafted document to obtain sensitive information.
5. A remote code execution vulnerability in Windows SMB can be exploited remotely via specially crafted packet to execute arbitrary code.
6. A remote code execution vulnerability in VBScript can be exploited remotely via specially crafted website to execute arbitrary code.
7. An elevation of privilege vulnerability in Win32k can be exploited remotely via specially crafted application to gain privileges.
8. An elevation of privilege vulnerability in Windows Kernel can be exploited remotely via specially crafted application to gain privileges.
9. An information disclosure vulnerability in Windows Error Reporting can be exploited remotely via specially crafted application to obtain sensitive information.
10. A remote code execution vulnerability in Jet Database Engine can be exploited remotely via specially crafted file to execute arbitrary code.
11. A remote code execution vulnerability in Windows can be exploited remotely via specially crafted cabinet to execute arbitrary code.
12. An elevation of privilege vulnerability in Windows Print Configuration can be exploited remotely via specially crafted application to gain privileges.
13. A denial of service vulnerability in Windows Registry can be exploited remotely via specially crafted application to cause denial of service.
14. A remote code execution vulnerability in LNK can be exploited remotely to execute arbitrary code.
15. An elevation of privilege vulnerability in Windows Network Connections Service can be exploited remotely via specially crafted application to gain privileges.
16. An elevation of privilege vulnerability in Group Policy can be exploited remotely via specially crafted application to gain privileges.
17. A memory corruption vulnerability in Media Foundation can be exploited remotely via specially crafted document to execute arbitrary code.
18. An elevation of privilege vulnerability in Windows Text Service Framework can be exploited remotely via specially crafted application to gain privileges.
19. An information disclosure vulnerability in Internet Explorer can be exploited remotely via specially crafted content to obtain sensitive information.
20. An elevation of privilege vulnerability in OLE Automation can be exploited remotely via specially crafted application to gain privileges.
21. An elevation of privilege vulnerability in Component Object Model can be exploited remotely via specially crafted application to bypass security restrictions.
22. An elevation of privilege vulnerability in Windows Background Intelligent Transfer Service can be exploited remotely via specially crafted request to gain privileges.
23. An elevation of privilege vulnerability in Windows Modules Installer Service can be exploited remotely to gain privileges.
24. An elevation of privilege vulnerability in Windows Backup Service can be exploited remotely via specially crafted application to gain privileges.
25. An elevation of privilege vulnerability in Windows WLAN Service can be exploited remotely via specially crafted application to gain privileges.
26. An elevation of privilege vulnerability in Windows Installer can be exploited remotely to gain privileges.

Original advisories

• CVE-2020-1160

• CVE-2020-1281
• CVE-2020-1287
• CVE-2020-1348
• CVE-2020-1301
• CVE-2020-1260
• CVE-2020-1207
• CVE-2020-1262
• CVE-2020-1263
• CVE-2020-1246
• CVE-2020-1247
• CVE-2020-1208
• CVE-2020-1300
• CVE-2020-1196
• CVE-2020-1194
• CVE-2020-1299
• CVE-2020-1291
• CVE-2020-1317
• CVE-2020-1239
• CVE-2020-1214
• CVE-2020-1236
• CVE-2020-1230
• CVE-2020-1314
• CVE-2020-1315
• CVE-2020-1213
• CVE-2020-1212
• CVE-2020-1215
• CVE-2020-1311
• CVE-2020-1216
• CVE-2020-1255
• CVE-2020-1254
• CVE-2020-1271
• CVE-2020-1270
• CVE-2020-1251
• CVE-2020-1253
• CVE-2020-1272
• CVE-2020-1302

Exploitation

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

• Microsoft-Internet-Explorer
• Microsoft-Windows
• Microsoft-Windows-Server
• Microsoft-Windows-Server-2012
• Microsoft-Windows-8
• Microsoft-Windows-7
• Microsoft-Windows-Server-2008
• Windows-RT
• Microsoft-Windows-10

CVE list

• CVE-2020-1160
  high
• CVE-2020-1281
  critical
• CVE-2020-1287
  critical
• CVE-2020-1348
  high
• CVE-2020-1301
  critical
• CVE-2020-1260
  critical
• CVE-2020-1207
  critical
• CVE-2020-1262
  critical
• CVE-2020-1263
  high
• CVE-2020-1246
  critical
• CVE-2020-1247
  critical
• CVE-2020-1208
  critical
• CVE-2020-1300
  critical
• CVE-2020-1196
  critical
• CVE-2020-1194
  high
• CVE-2020-1299
  critical
• CVE-2020-1291
  critical
• CVE-2020-1317
  critical
• CVE-2020-1239
  critical
• CVE-2020-1214
  critical
• CVE-2020-1236
  critical
• CVE-2020-1230
  critical
• CVE-2020-1314
  critical
• CVE-2020-1315
  high
• CVE-2020-1213
  critical
• CVE-2020-1212
  critical
• CVE-2020-1215
  critical
• CVE-2020-1311
  critical
• CVE-2020-1216
  critical
• CVE-2020-1255
  critical
• CVE-2020-1254
  critical
• CVE-2020-1271
  critical
• CVE-2020-1270
  critical
• CVE-2020-1251
  high
• CVE-2020-1253
  high
• CVE-2020-1272
  critical
• CVE-2020-1302
  critical

KB list

• 4561669
• 4561603
• 4561645
• 4561643
• 4561670

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com