Kaspersky ID:
KLA12289
Detect Date:
09/14/2021
Updated:
03/31/2025

Description

Multiple vulnerabilities were found in Microsoft Products (Extended Security Update). Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges, cause denial of service, spoof user interface, execute arbitrary code.

Below is a complete list of vulnerabilities:

  1. An information disclosure vulnerability in Windows Redirected Drive Buffering SubSystem Driver can be exploited remotely to obtain sensitive information.
  2. An information disclosure vulnerability in Windows Installer can be exploited remotely to obtain sensitive information.
  3. An elevation of privilege vulnerability in Windows Ancillary Function Driver for WinSock can be exploited remotely to gain privileges.
  4. A denial of service vulnerability in Windows Installer can be exploited remotely to cause denial of service.
  5. An elevation of privilege vulnerability in Windows Print Spooler can be exploited remotely to gain privileges.
  6. A memory corruption vulnerability in Windows Scripting Engine can be exploited remotely to execute arbitrary code.
  7. An elevation of privilege vulnerability in Windows Event Tracing can be exploited remotely to gain privileges.
  8. An elevation of privilege vulnerability in Windows Common Log File System Driver can be exploited remotely to gain privileges.
  9. An information disclosure vulnerability in Windows Ancillary Function Driver for WinSock can be exploited remotely to obtain sensitive information.
  10. An elevation of privilege vulnerability in Win32k can be exploited remotely to gain privileges.
  11. A spoofing vulnerability in Windows Authenticode can be exploited remotely to spoof user interface.
  12. An elevation of privilege vulnerability in Windows Kernel can be exploited remotely to gain privileges.
  13. An information disclosure vulnerability in Windows SMB can be exploited remotely to obtain sensitive information.
  14. A remote code execution vulnerability in Windows WLAN AutoConfig Service can be exploited remotely to execute arbitrary code.
  15. An elevation of privilege vulnerability in Windows DNS can be exploited remotely to gain privileges.

Original advisories

Exploitation

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

CVE list

  • CVE-2021-38635
    high
  • CVE-2021-36962
    high
  • CVE-2021-38628
    critical
  • CVE-2021-36961
    high
  • CVE-2021-38671
    critical
  • CVE-2021-26435
    critical
  • CVE-2021-38630
    critical
  • CVE-2021-36969
    high
  • CVE-2021-36955
    critical
  • CVE-2021-38638
    critical
  • CVE-2021-36964
    critical
  • CVE-2021-38629
    high
  • CVE-2021-40447
    critical
  • CVE-2021-38639
    critical
  • CVE-2021-36959
    high
  • CVE-2021-38667
    critical
  • CVE-2021-38626
    critical
  • CVE-2021-38636
    high
  • CVE-2021-36960
    critical
  • CVE-2021-36965
    critical
  • CVE-2021-36968
    critical
  • CVE-2021-36963
    critical
  • CVE-2021-38625
    critical
  • CVE-2021-38633
    critical

KB list

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com

Found an inaccuracy in the description of this vulnerability? Let us know!
Kaspersky Next
Let’s go Next: redefine your business’s cybersecurity
Learn more
New Kaspersky!
Your digital life deserves complete protection!
Learn more
Confirm changes?
Your message has been sent successfully.