Multiple vulnerabilities in Microsoft Products (ESU)

Description

Multiple vulnerabilities were found in Microsoft Products (Extended Support Update). Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, execute arbitrary code, obtain sensitive information, bypass security restrictions.

Below is a complete list of vulnerabilities:

1. A denial of service vulnerability in Windows Hyper-V can be exploited remotely via specially crafted application to cause denial of service;
2. An elevation of privilege vulnerability in Win32k can be exploited remotely via specially crafted application to gain privileges;
3. A remote code execution vulnerability in Hyper-V can be exploited remotely via specially crafted application to execute arbitrary code;
4. An elevation of privilege vulnerability in Windows Installer can be exploited remotely to gain privileges;
5. A remote code execution vulnerability in Win32k Graphics can be exploited remotely via specially crafted embedded to execute arbitrary code;
6. An elevation of privilege vulnerability in Windows UPnP Service can be exploited remotely via specially crafted script to gain privileges;
7. A remote code execution vulnerability in Jet Database Engine can be exploited remotely via specially crafted file to execute arbitrary code;
8. An elevation of privilege vulnerability in Windows Graphics Component can be exploited remotely via specially crafted application to gain privileges;
9. A memory corruption vulnerability in Scripting Engine can be exploited remotely via specially crafted website to execute arbitrary code.
10. An information disclosure vulnerability in Windows Kernel can be exploited remotely via specially crafted application to obtain sensitive information;
11. A security feature bypass vulnerability in NetLogon can be exploited remotely to bypass security restrictions;
12. An elevation of privilege vulnerability in Windows can be exploited remotely via specially crafted application to gain privileges;
13. An information disclosure vulnerability in Windows Remote Procedure Call can be exploited remotely via specially crafted application to obtain sensitive information;
14. A denial of service vulnerability in Windows can be exploited remotely via specially crafted application to cause denial of service;
15. An elevation of privilege vulnerability in Microsoft ActiveX Installer Service can be exploited remotely via specially crafted application to gain privileges;
16. A security feature bypass vulnerability in Microsoft Windows can be exploited remotely via specially crafted authentication to bypass security restrictions;
17. A remote code execution vulnerability in Windows Hyper-V can be exploited remotely via specially crafted application to execute arbitrary code;
18. An elevation of privilege vulnerability in Windows Certificate Dialog can be exploited remotely via specially crafted application to gain privileges;
19. A remote code execution vulnerability in OpenType Font Parsing can be exploited remotely via specially crafted to execute arbitrary code;
20. An elevation of privilege vulnerability in Windows User Profile Service can be exploited remotely via specially crafted application to gain privileges;
21. An information disclosure vulnerability in Windows Modules Installer Service can be exploited remotely via specially crafted application to obtain sensitive information;
22. An information disclosure vulnerability in Windows GDI can be exploited remotely via specially crafted document to obtain sensitive information;
23. An information disclosure vulnerability in DirectWrite can be exploited remotely via specially crafted document to obtain sensitive information;
24. An information disclosure vulnerability in OpenType Font Driver can be exploited remotely via specially crafted fonts to obtain sensitive information;
25. A remote code execution vulnerability in VBScript can be exploited remotely via specially crafted website to execute arbitrary code.

Original advisories

• CVE-2019-0712

• CVE-2019-1408
• CVE-2019-0719
• CVE-2019-1415
• CVE-2019-1441
• CVE-2019-1405
• CVE-2019-1406
• CVE-2019-1407
• CVE-2019-1429
• CVE-2019-11135
• CVE-2019-1424
• CVE-2019-1422
• CVE-2019-1409
• CVE-2018-12207
• CVE-2019-1382
• CVE-2019-1384
• CVE-2019-1389
• CVE-2019-1388
• CVE-2019-1456
• CVE-2019-1454
• CVE-2019-1419
• CVE-2019-1418
• CVE-2019-1439
• CVE-2019-1438
• CVE-2019-1435
• CVE-2019-1434
• CVE-2019-1411
• CVE-2019-1433
• CVE-2019-1432
• CVE-2019-1399
• CVE-2019-1412
• CVE-2019-1394
• CVE-2019-1395
• CVE-2019-1396
• CVE-2019-1397
• CVE-2019-1390
• CVE-2019-1391
• CVE-2019-1393

Exploitation

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

• Microsoft-Internet-Explorer
• Microsoft-Windows
• Microsoft-Windows-Server
• Microsoft-Windows-Server-2012
• Microsoft-Windows-8
• Microsoft-Windows-7
• Microsoft-Windows-Server-2008
• Windows-RT
• Microsoft-Windows-10

CVE list

• CVE-2019-1429
  critical
• CVE-2019-1390
  critical
• CVE-2019-1415
  critical
• CVE-2019-1411
  high
• CVE-2019-0712
  high
• CVE-2019-1424
  critical
• CVE-2019-1399
  high
• CVE-2019-1396
  critical
• CVE-2019-1395
  critical
• CVE-2019-1439
  high
• CVE-2019-1454
  high
• CVE-2018-12207
  high
• CVE-2019-1406
  critical
• CVE-2019-1382
  high
• CVE-2019-1391
  high
• CVE-2019-11135
  high
• CVE-2019-1394
  critical
• CVE-2019-1434
  critical
• CVE-2019-1433
  critical
• CVE-2019-1418
  warning
• CVE-2019-1432
  high
• CVE-2019-1409
  high
• CVE-2019-1389
  critical
• CVE-2019-1393
  critical
• CVE-2019-0719
  critical
• CVE-2019-1384
  critical
• CVE-2019-1441
  critical
• CVE-2019-1419
  critical
• CVE-2019-1408
  critical
• CVE-2019-1456
  critical
• CVE-2019-1412
  high
• CVE-2019-1397
  critical
• CVE-2019-1388
  critical
• CVE-2019-1405
  critical
• CVE-2019-1438
  critical
• CVE-2019-1435
  critical
• CVE-2019-1422
  critical
• CVE-2019-1407
  critical

KB list

• 4516065
• 4516033
• 4520009
• 4520003
• 4520002
• 4519976
• 4525234
• 4525235
• 4525106
• 4525239
• 4525233

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com