Multiple vulnerabilities in Microsoft Windows

Description

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, bypass security restrictions, execute arbitrary code, cause denial of service, spoof user interface.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in Win32k can be exploited remotely to gain privileges.
2. An information disclosure vulnerability in Windows TCP/IP can be exploited remotely to obtain sensitive information.
3. A security feature bypass vulnerability in Hypervisor-Protected Code Integrity (HVCI) can be exploited remotely to bypass security restrictions.
4. A security feature bypass vulnerability in Windows HTML Platforms can be exploited remotely to bypass security restrictions.
5. An information disclosure vulnerability in Microsoft Message Queuing can be exploited remotely to obtain sensitive information.
6. An elevation of privilege vulnerability in Windows Cloud Files Mini Filter Driver can be exploited remotely to gain privileges.
7. An information disclosure vulnerability in Windows Online Certificate Status Protocol (OCSP) can be exploited remotely to obtain sensitive information.
8. A remote code execution vulnerability in Microsoft Printer Metadata Troubleshooter Tool can be exploited remotely to execute arbitrary code.
9. A denial of service vulnerability in Windows Hyper-V can be exploited remotely to cause denial of service.
10. An information disclosure vulnerability in Microsoft Windows CoreMessaging can be exploited remotely to obtain sensitive information.
11. A security feature bypass vulnerability in BitLocker can be exploited remotely to bypass security restrictions.
12. An elevation of privilege vulnerability in Windows Kernel-Mode Driver can be exploited remotely to gain privileges.
13. A remote code execution vulnerability in Windows Libarchive can be exploited remotely to execute arbitrary code.
14. An elevation of privilege vulnerability in Microsoft Virtual Hard Disk can be exploited remotely to gain privileges.
15. A remote code execution vulnerability in Microsoft Online Certificate Status Protocol (OCSP) can be exploited remotely to execute arbitrary code.
16. A security feature bypass vulnerability in Windows Server Key Distribution Service can be exploited remotely to bypass security restrictions.
17. A spoofing vulnerability in Windows Nearby Sharing can be exploited remotely to spoof user interface.
18. A remote code execution vulnerability in Windows Hyper-V can be exploited remotely to execute arbitrary code.
19. A remote code execution vulnerability in Windows Cryptographic Services can be exploited remotely to execute arbitrary code.
20. A spoofing vulnerability in Windows Themes can be exploited remotely to spoof user interface.
21. An information disclosure vulnerability in MSMQC can be exploited remotely to obtain sensitive information.
22. A security feature bypass vulnerability in Windows Kerberos can be exploited remotely to bypass security restrictions.
23. An elevation of privilege vulnerability in Windows Group Policy can be exploited remotely to gain privileges.
24. A denial of service vulnerability in Microsoft AllJoyn API can be exploited remotely to cause denial of service.
25. A array-bounds overflow vulnerability in SQLite can be exploited remotely to execute arbitrary code.
26. An elevation of privilege vulnerability in Windows Kernel can be exploited remotely to gain privileges.
27. A denial of service vulnerability in Microsoft Message Queuing can be exploited remotely to cause denial of service.
28. An information disclosure vulnerability in Windows Themes can be exploited remotely to obtain sensitive information.
29. A spoofing vulnerability in Microsoft Bluetooth Driver can be exploited remotely to spoof user interface.
30. A remote code execution vulnerability in Microsoft ODBC Driver can be exploited remotely to execute arbitrary code.
31. A remote code execution vulnerability in Remote Desktop Client can be exploited remotely to execute arbitrary code.
32. An elevation of privilege vulnerability in Windows Subsystem for Linux can be exploited remotely to gain privileges.
33. An elevation of privilege vulnerability in Microsoft Common Log File System can be exploited remotely to gain privileges.
34. An information disclosure vulnerability in Windows Cryptographic Services can be exploited remotely to obtain sensitive information.
35. An information disclosure vulnerability in Microsoft Local Security Authority Subsystem Service can be exploited remotely to obtain sensitive information.

Original advisories

• CVE-2024-20686

• CVE-2024-21313
• CVE-2024-21305
• CVE-2024-20652
• CVE-2024-20660
• CVE-2024-21310
• CVE-2024-20662
• CVE-2024-21325
• CVE-2024-20699
• CVE-2024-20694
• CVE-2024-20666
• CVE-2024-21314
• CVE-2024-21309
• CVE-2024-20697
• CVE-2024-20658
• CVE-2024-20655
• CVE-2024-21316
• CVE-2024-20690
• CVE-2024-20700
• CVE-2024-20682
• CVE-2024-21320
• CVE-2024-20680
• CVE-2024-20674
• CVE-2024-20696
• CVE-2024-20657
• CVE-2024-20687
• CVE-2022-35737
• CVE-2024-20698
• CVE-2024-20664
• CVE-2024-20661
• CVE-2024-20691
• CVE-2024-21306
• CVE-2024-20683
• CVE-2024-20654
• CVE-2024-21307
• CVE-2024-20681
• CVE-2024-20653
• CVE-2024-20663
• CVE-2024-21311
• CVE-2024-20692

Exploitation

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

• Microsoft-Windows
• Microsoft-Windows-Server
• Microsoft-Windows-10
• Microsoft-Windows-Server-2016
• Microsoft-Windows-Server-2019
• Microsoft-Windows-11

CVE list

• CVE-2022-35737
  critical
• CVE-2024-21320
  high
• CVE-2024-20680
  high
• CVE-2024-20674
  critical
• CVE-2024-20692
  high
• CVE-2024-21313
  high
• CVE-2024-20652
  critical
• CVE-2024-20657
  high
• CVE-2024-20660
  high
• CVE-2024-20664
  high
• CVE-2024-20662
  warning
• CVE-2024-20661
  critical
• CVE-2024-20691
  warning
• CVE-2024-20683
  critical
• CVE-2024-20654
  critical
• CVE-2024-21307
  critical
• CVE-2024-21314
  high
• CVE-2024-20653
  critical
• CVE-2024-20663
  high
• CVE-2024-20658
  critical
• CVE-2024-20655
  high
• CVE-2024-21311
  high
• CVE-2024-20682
  critical
• CVE-2024-20686
  critical
• CVE-2024-21305
  warning
• CVE-2024-21310
  critical
• CVE-2024-21325
  critical
• CVE-2024-20699
  high
• CVE-2024-20694
  high
• CVE-2024-20666
  high
• CVE-2024-21309
  critical
• CVE-2024-20697
  high
• CVE-2024-21316
  high
• CVE-2024-20690
  high
• CVE-2024-20700
  critical
• CVE-2024-20696
  high
• CVE-2024-20687
  critical
• CVE-2024-20698
  critical
• CVE-2024-21306
  high
• CVE-2024-20681
  critical

KB list

• 5034119
• 5034134
• 5034121
• 5034122
• 5034123
• 5034127
• 5034130
• 5034129

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com