Description
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, execute arbitrary code, bypass security restrictions, cause denial of service.
Below is a complete list of vulnerabilities:
- An elevation of privilege vulnerability in Active Directory Domain Services can be exploited remotely to gain privileges.
- An elevation of privilege vulnerability in NTFS can be exploited remotely to gain privileges.
- An information disclosure vulnerability in Windows Remote Desktop Protocol (RDP) can be exploited remotely to obtain sensitive information.
- An information disclosure vulnerability in Remote Desktop Protocol Client can be exploited remotely to obtain sensitive information.
- A remote code execution vulnerability in Remote Desktop Client can be exploited remotely to execute arbitrary code.
- An elevation of privilege vulnerability in Windows Fast FAT File System Driver can be exploited remotely to gain privileges.
- An elevation of privilege vulnerability in Windows Installer can be exploited remotely to gain privileges.
- An elevation of privilege vulnerability in Windows Kernel can be exploited remotely to gain privileges.
- A remote code execution vulnerability in Microsoft COM for Windows can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in Microsoft Virtual Machine Bus (VMBus) can be exploited remotely to execute arbitrary code.
- An elevation of privilege vulnerability in Windows Feedback Hub can be exploited remotely to gain privileges.
- A security feature bypass vulnerability in Windows Hello can be exploited remotely to bypass security restrictions.
- A remote code execution vulnerability in Microsoft Windows Media Foundation can be exploited remotely to execute arbitrary code.
- An elevation of privilege vulnerability in Windows Desktop Bridge can be exploited remotely to gain privileges.
- A memory corruption vulnerability in Chakra Scripting Engine can be exploited remotely to execute arbitrary code.
- A denial of service vulnerability in Windows Hyper-V can be exploited remotely to cause denial of service.
- An elevation of privilege vulnerability in Windows Core Shell SI Host Extension Framework for Composable Shell can be exploited remotely to gain privileges.
- A denial of service vulnerability in Windows Hyper-V Discrete Device Assignment (DDA) can be exploited remotely to cause denial of service.
- An elevation of privilege vulnerability in Diagnostics Hub Standard Collector can be exploited remotely to gain privileges.
- A remote code execution vulnerability in Windows NTFS can be exploited remotely to execute arbitrary code.
- A denial of service vulnerability in Windows can be exploited remotely to cause denial of service.
- An elevation of privilege vulnerability in Credential Security Support Provider Protocol (CredSSP) can be exploited remotely to gain privileges.
Original advisories
- CVE-2021-41367
- CVE-2021-41371
- CVE-2021-38665
- CVE-2021-38666
- CVE-2021-42291
- CVE-2021-42278
- CVE-2021-41377
- CVE-2021-41379
- CVE-2021-42285
- CVE-2021-42283
- CVE-2021-42275
- CVE-2021-38631
- CVE-2021-41370
- CVE-2021-42287
- CVE-2021-26443
- CVE-2021-42280
- CVE-2021-42288
- CVE-2021-42276
- CVE-2021-36957
- CVE-2021-42279
- CVE-2021-42284
- CVE-2021-42286
- CVE-2021-42274
- CVE-2021-42277
- CVE-2021-41378
- CVE-2021-41356
- CVE-2021-41366
- CVE-2021-41366
- CVE-2021-42284
Exploitation
Public exploits exist for this vulnerability.
Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.
Related products
- Microsoft-Windows
- Microsoft-Windows-Server
- Microsoft-Windows-8
- Windows-RT
- Microsoft-Windows-10
- Microsoft-Windows-Server-2016
- Microsoft-Windows-Server-2019
- Microsoft-Windows-11
- Microsoft-Remote-Desktop
CVE list
- CVE-2021-42282 critical
- CVE-2021-41367 critical
- CVE-2021-41371 warning
- CVE-2021-38665 high
- CVE-2021-38666 critical
- CVE-2021-42291 critical
- CVE-2021-42278 critical
- CVE-2021-41377 critical
- CVE-2021-41379 high
- CVE-2021-42285 critical
- CVE-2021-42283 critical
- CVE-2021-42275 critical
- CVE-2021-38631 warning
- CVE-2021-41370 critical
- CVE-2021-42287 critical
- CVE-2021-26443 critical
- CVE-2021-42280 high
- CVE-2021-42288 high
- CVE-2021-42276 critical
- CVE-2021-36957 critical
- CVE-2021-42279 warning
- CVE-2021-42284 high
- CVE-2021-42286 critical
- CVE-2021-42274 high
- CVE-2021-42277 high
- CVE-2021-41378 critical
- CVE-2021-41356 critical
- CVE-2021-41366 critical
KB list
Read more
Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com
Found an inaccuracy in the description of this vulnerability? Let us know!