Multiple vulnerabilities in Microsoft Products (ESU)

Description

Multiple vulnerabilities were found in Microsoft Products (Extended Support Update). Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, cause denial of service, bypass security restrictions.

Below is a complete list of vulnerabilities:

1. An information disclosure vulnerability in Microsoft Graphics Component can be exploited remotely via specially crafted application to obtain sensitive information.
2. A remote code execution vulnerability in Windows OLE can be exploited remotely via specially crafted file to execute arbitrary code.
3. An elevation of privilege vulnerability in Windows WalletService can be exploited remotely via specially crafted application to gain privileges.
4. An information disclosure vulnerability in Windows GDI can be exploited remotely via specially crafted document to obtain sensitive information.
5. A remote code execution vulnerability in Windows SMB can be exploited remotely via specially crafted packet to execute arbitrary code.
6. A remote code execution vulnerability in VBScript can be exploited remotely via specially crafted website to execute arbitrary code.
7. An elevation of privilege vulnerability in Win32k can be exploited remotely via specially crafted application to gain privileges.
8. An elevation of privilege vulnerability in Windows Kernel can be exploited remotely via specially crafted application to gain privileges.
9. An information disclosure vulnerability in Windows Error Reporting can be exploited remotely via specially crafted application to obtain sensitive information.
10. A remote code execution vulnerability in Jet Database Engine can be exploited remotely via specially crafted file to execute arbitrary code.
11. A remote code execution vulnerability in Windows can be exploited remotely via specially crafted cabinet to execute arbitrary code.
12. An elevation of privilege vulnerability in Windows Print Configuration can be exploited remotely via specially crafted application to gain privileges.
13. A denial of service vulnerability in Windows Registry can be exploited remotely via specially crafted application to cause denial of service.
14. A remote code execution vulnerability in LNK can be exploited remotely to execute arbitrary code.
15. An elevation of privilege vulnerability in Windows Network Connections Service can be exploited remotely via specially crafted application to gain privileges.
16. An elevation of privilege vulnerability in Group Policy can be exploited remotely via specially crafted application to gain privileges.
17. A memory corruption vulnerability in Media Foundation can be exploited remotely via specially crafted document to execute arbitrary code.
18. An elevation of privilege vulnerability in Windows Text Service Framework can be exploited remotely via specially crafted application to gain privileges.
19. An information disclosure vulnerability in Internet Explorer can be exploited remotely via specially crafted content to obtain sensitive information.
20. An elevation of privilege vulnerability in OLE Automation can be exploited remotely via specially crafted application to gain privileges.
21. An elevation of privilege vulnerability in Component Object Model can be exploited remotely via specially crafted application to bypass security restrictions.
22. An elevation of privilege vulnerability in Windows Background Intelligent Transfer Service can be exploited remotely via specially crafted request to gain privileges.
23. An elevation of privilege vulnerability in Windows Modules Installer Service can be exploited remotely to gain privileges.
24. An elevation of privilege vulnerability in Windows Backup Service can be exploited remotely via specially crafted application to gain privileges.
25. An elevation of privilege vulnerability in Windows WLAN Service can be exploited remotely via specially crafted application to gain privileges.
26. An elevation of privilege vulnerability in Windows Installer can be exploited remotely to gain privileges.

Original advisories

• CVE-2020-1160

• CVE-2020-1281
• CVE-2020-1287
• CVE-2020-1348
• CVE-2020-1301
• CVE-2020-1260
• CVE-2020-1207
• CVE-2020-1262
• CVE-2020-1263
• CVE-2020-1246
• CVE-2020-1247
• CVE-2020-1208
• CVE-2020-1300
• CVE-2020-1196
• CVE-2020-1194
• CVE-2020-1299
• CVE-2020-1291
• CVE-2020-1317
• CVE-2020-1239
• CVE-2020-1214
• CVE-2020-1236
• CVE-2020-1230
• CVE-2020-1314
• CVE-2020-1315
• CVE-2020-1213
• CVE-2020-1212
• CVE-2020-1215
• CVE-2020-1311
• CVE-2020-1216
• CVE-2020-1255
• CVE-2020-1254
• CVE-2020-1271
• CVE-2020-1270
• CVE-2020-1251
• CVE-2020-1253
• CVE-2020-1272
• CVE-2020-1302

Exploitation

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

• Microsoft-Internet-Explorer
• Microsoft-Windows
• Microsoft-Windows-Server
• Microsoft-Windows-Server-2012
• Microsoft-Windows-8
• Microsoft-Windows-7
• Microsoft-Windows-Server-2008
• Windows-RT
• Microsoft-Windows-10

CVE list

• CVE-2020-1160
  warning
• CVE-2020-1281
  high
• CVE-2020-1287
  high
• CVE-2020-1348
  warning
• CVE-2020-1301
  high
• CVE-2020-1260
  critical
• CVE-2020-1207
  high
• CVE-2020-1262
  high
• CVE-2020-1263
  warning
• CVE-2020-1246
  high
• CVE-2020-1247
  high
• CVE-2020-1208
  critical
• CVE-2020-1300
  high
• CVE-2020-1196
  warning
• CVE-2020-1194
  warning
• CVE-2020-1299
  critical
• CVE-2020-1291
  high
• CVE-2020-1317
  critical
• CVE-2020-1239
  high
• CVE-2020-1214
  critical
• CVE-2020-1236
  critical
• CVE-2020-1230
  critical
• CVE-2020-1314
  high
• CVE-2020-1315
  warning
• CVE-2020-1213
  critical
• CVE-2020-1212
  high
• CVE-2020-1215
  critical
• CVE-2020-1311
  high
• CVE-2020-1216
  critical
• CVE-2020-1255
  high
• CVE-2020-1254
  high
• CVE-2020-1271
  warning
• CVE-2020-1270
  warning
• CVE-2020-1251
  high
• CVE-2020-1253
  high
• CVE-2020-1272
  high
• CVE-2020-1302
  warning

KB list

• 4561669
• 4561603
• 4561645
• 4561643
• 4561670

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com