Kaspersky ID:
KLA12509
Detect Date:
04/12/2022
Updated:
05/20/2024

Description

Multiple vulnerabilities were found in Microsoft Products (Extended Security Update). Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information, cause denial of service.

Below is a complete list of vulnerabilities:

  1. A remote code execution vulnerability in Windows Fax Compose Form can be exploited remotely to execute arbitrary code.
  2. An elevation of privilege vulnerability in Windows Print Spooler can be exploited remotely to gain privileges.
  3. An elevation of privilege vulnerability in PowerShell can be exploited remotely to gain privileges.
  4. A remote code execution vulnerability in Win32 File Enumeration can be exploited remotely to execute arbitrary code.
  5. A remote code execution vulnerability in Windows DNS Server can be exploited remotely to execute arbitrary code.
  6. Information disclosure vulnerability in Windows iSCSI Target Service can be exploited to obtain sensitive information.
  7. A remote code execution vulnerability in Remote Desktop Protocol can be exploited remotely to execute arbitrary code.
  8. A remote code execution vulnerability in Windows Graphics Component can be exploited remotely to execute arbitrary code.
  9. An elevation of privilege vulnerability in Windows Common Log File System Driver can be exploited remotely to gain privileges.
  10. A remote code execution vulnerability in Windows SMB can be exploited remotely to execute arbitrary code.
  11. A remote code execution vulnerability in Windows Server Service can be exploited remotely to execute arbitrary code.
  12. A remote code execution vulnerability in Windows Stream Enumeration can be exploited remotely to execute arbitrary code.
  13. A denial of service vulnerability in Windows Secure Channel can be exploited remotely to cause denial of service.
  14. A remote code execution vulnerability in Win32 Stream Enumeration can be exploited remotely to execute arbitrary code.
  15. An elevation of privilege vulnerability in Windows Installer can be exploited remotely to gain privileges.
  16. A denial of service vulnerability in Windows LDAP can be exploited remotely to cause denial of service.
  17. An elevation of privilege vulnerability in Windows Win32k can be exploited remotely to gain privileges.
  18. A remote code execution vulnerability in Remote Procedure Call Runtime can be exploited remotely to execute arbitrary code.
  19. An elevation of privilege vulnerability in Windows File Server Resource Management Service can be exploited remotely to gain privileges.
  20. An elevation of privilege vulnerability in Windows Ancillary Function Driver for WinSock can be exploited remotely to gain privileges.
  21. An elevation of privilege vulnerability in Windows User Profile Service can be exploited remotely to gain privileges.
  22. A remote code execution vulnerability in Windows LDAP can be exploited remotely to execute arbitrary code.
  23. An information disclosure vulnerability in Microsoft Local Security Authority (LSA) Server can be exploited remotely to obtain sensitive information.
  24. An elevation of privilege vulnerability in Windows Work Folder Service can be exploited remotely to gain privileges.
  25. An elevation of privilege vulnerability in Windows Kerberos can be exploited remotely to gain privileges.
  26. An elevation of privilege vulnerability in Windows ALPC can be exploited remotely to gain privileges.

Original advisories

Exploitation

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

CVE list

  • CVE-2022-26917
    critical
  • CVE-2022-26803
    critical
  • CVE-2022-26788
    critical
  • CVE-2022-24485
    critical
  • CVE-2022-26822
    high
  • CVE-2022-26802
    critical
  • CVE-2022-24498
    high
  • CVE-2022-24536
    high
  • CVE-2022-26813
    high
  • CVE-2022-24533
    critical
  • CVE-2022-26903
    critical
  • CVE-2022-26801
    critical
  • CVE-2022-24521
    critical
  • CVE-2022-24500
    critical
  • CVE-2022-24541
    critical
  • CVE-2022-26796
    critical
  • CVE-2022-26916
    critical
  • CVE-2022-26812
    high
  • CVE-2022-26821
    high
  • CVE-2022-21983
    critical
  • CVE-2022-26915
    critical
  • CVE-2022-26829
    high
  • CVE-2022-24534
    critical
  • CVE-2022-24499
    critical
  • CVE-2022-26831
    critical
  • CVE-2022-24542
    critical
  • CVE-2022-24528
    critical
  • CVE-2022-26810
    critical
  • CVE-2022-26792
    critical
  • CVE-2022-26918
    critical
  • CVE-2022-26815
    high
  • CVE-2022-24494
    critical
  • CVE-2022-26904
    high
  • CVE-2022-26819
    high
  • CVE-2022-24492
    critical
  • CVE-2022-26809
    critical
  • CVE-2022-26919
    critical
  • CVE-2022-24493
    high
  • CVE-2022-26798
    critical
  • CVE-2022-26807
    high
  • CVE-2022-24530
    critical
  • CVE-2022-26787
    critical
  • CVE-2022-26797
    critical
  • CVE-2022-24481
    critical
  • CVE-2022-24474
    critical
  • CVE-2022-26827
    high
  • CVE-2022-24544
    critical
  • CVE-2022-24540
    high
  • CVE-2022-26790
    critical
  • CVE-2022-26794
    critical
  • CVE-2022-26820
    high

KB list

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com

Found an inaccuracy in the description of this vulnerability? Let us know!
Kaspersky Next
Let’s go Next: redefine your business’s cybersecurity
Learn more
New Kaspersky!
Your digital life deserves complete protection!
Learn more
Confirm changes?
Your message has been sent successfully.