Kaspersky ID:
KLA12024
Detect Date:
12/08/2020
Updated:
01/25/2024

Description

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, bypass security restrictions, execute arbitrary code.

Below is a complete list of vulnerabilities:

  1. An elevation of privilege vulnerability in Windows Cloud Files Mini Filter Driver can be exploited remotely to gain privileges.
  2. An elevation of privilege vulnerability in Windows Backup Engine can be exploited remotely to gain privileges.
  3. An information disclosure vulnerability in Windows SMB can be exploited remotely to obtain sensitive information.
  4. A security feature bypass vulnerability in Windows Lock Screen can be exploited remotely to bypass security restrictions.
  5. An information disclosure vulnerability in Windows GDI+ can be exploited remotely to obtain sensitive information.
  6. An elevation of privilege vulnerability in Windows Digital Media Receiver can be exploited remotely to gain privileges.
  7. A remote code execution vulnerability in Windows NTFS can be exploited remotely to execute arbitrary code.
  8. A remote code execution vulnerability in Hyper-V can be exploited remotely to execute arbitrary code.
  9. An information disclosure vulnerability in Windows Error Reporting can be exploited remotely to obtain sensitive information.
  10. An elevation of privilege vulnerability in Windows Network Connections Service can be exploited remotely to gain privileges.
  11. A security feature bypass vulnerability in Windows Overlay Filter can be exploited remotely to bypass security restrictions.
  12. An elevation of privilege vulnerability in DirectX Graphics Kernel can be exploited remotely to gain privileges.
  13. A security feature bypass vulnerability in Kerberos can be exploited remotely to bypass security restrictions.

Original advisories

Exploitation

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

CVE list

  • CVE-2020-17103
    high
  • CVE-2020-16964
    critical
  • CVE-2020-16960
    critical
  • CVE-2020-17140
    critical
  • CVE-2020-16962
    critical
  • CVE-2020-16963
    critical
  • CVE-2020-16961
    critical
  • CVE-2020-17099
    high
  • CVE-2020-17098
    high
  • CVE-2020-17097
    warning
  • CVE-2020-17096
    critical
  • CVE-2020-17095
    critical
  • CVE-2020-17094
    high
  • CVE-2020-17092
    critical
  • CVE-2020-17138
    high
  • CVE-2020-17139
    critical
  • CVE-2020-17134
    critical
  • CVE-2020-17136
    critical
  • CVE-2020-17137
    critical
  • CVE-2020-16996
    high
  • CVE-2020-16959
    critical
  • CVE-2020-16958
    critical

KB list

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com

Found an inaccuracy in the description of this vulnerability? Let us know!
Kaspersky Next
Let’s go Next: redefine your business’s cybersecurity
Learn more
New Kaspersky!
Your digital life deserves complete protection!
Learn more
Confirm changes?
Your message has been sent successfully.