Multiple vulnerabilities in Microsoft Windows

Description

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, bypass security restrictions, execute arbitrary code.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in Windows Cloud Files Mini Filter Driver can be exploited remotely to gain privileges.
2. An elevation of privilege vulnerability in Windows Backup Engine can be exploited remotely to gain privileges.
3. An information disclosure vulnerability in Windows SMB can be exploited remotely to obtain sensitive information.
4. A security feature bypass vulnerability in Windows Lock Screen can be exploited remotely to bypass security restrictions.
5. An information disclosure vulnerability in Windows GDI+ can be exploited remotely to obtain sensitive information.
6. An elevation of privilege vulnerability in Windows Digital Media Receiver can be exploited remotely to gain privileges.
7. A remote code execution vulnerability in Windows NTFS can be exploited remotely to execute arbitrary code.
8. A remote code execution vulnerability in Hyper-V can be exploited remotely to execute arbitrary code.
9. An information disclosure vulnerability in Windows Error Reporting can be exploited remotely to obtain sensitive information.
10. An elevation of privilege vulnerability in Windows Network Connections Service can be exploited remotely to gain privileges.
11. A security feature bypass vulnerability in Windows Overlay Filter can be exploited remotely to bypass security restrictions.
12. An elevation of privilege vulnerability in DirectX Graphics Kernel can be exploited remotely to gain privileges.
13. A security feature bypass vulnerability in Kerberos can be exploited remotely to bypass security restrictions.

Original advisories

• CVE-2020-17103

• CVE-2020-16964
• CVE-2020-16960
• CVE-2020-17140
• CVE-2020-16962
• CVE-2020-16963
• CVE-2020-16961
• CVE-2020-17099
• CVE-2020-17098
• CVE-2020-17097
• CVE-2020-17096
• CVE-2020-17095
• CVE-2020-17094
• CVE-2020-17092
• CVE-2020-17138
• CVE-2020-17139
• CVE-2020-17134
• CVE-2020-17136
• CVE-2020-17137
• CVE-2020-16996
• CVE-2020-16959
• CVE-2020-16958
• ADV200013

Exploitation

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

• Microsoft-Windows
• Microsoft-Windows-Server
• Microsoft-Windows-Server-2012
• Microsoft-Windows-8
• Microsoft-Windows-7
• Microsoft-Windows-Server-2008
• Windows-RT
• Microsoft-Windows-10

CVE list

• CVE-2020-17103
  critical
• CVE-2020-16964
  critical
• CVE-2020-16960
  critical
• CVE-2020-17140
  critical
• CVE-2020-16962
  critical
• CVE-2020-16963
  critical
• CVE-2020-16961
  critical
• CVE-2020-17099
  high
• CVE-2020-17098
  high
• CVE-2020-17097
  critical
• CVE-2020-17096
  critical
• CVE-2020-17095
  critical
• CVE-2020-17094
  high
• CVE-2020-17092
  critical
• CVE-2020-17138
  high
• CVE-2020-17139
  critical
• CVE-2020-17134
  critical
• CVE-2020-17136
  critical
• CVE-2020-17137
  critical
• CVE-2020-16996
  high
• CVE-2020-16959
  critical
• CVE-2020-16958
  critical

KB list

• 4592449
• 4592440
• 4592438
• 4592484
• 4593226
• 4592495
• 4592446
• 4592464
• 5000822
• 5000808
• 5000803
• 5000802

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com