Multiple vulnerabilities in Microsoft Products (ESU)

Description

Multiple vulnerabilities were found in Microsoft Products (Extended Security Update). Malicious users can exploit these vulnerabilities to gain privileges, cause denial of service, execute arbitrary code, obtain sensitive information, bypass security restrictions.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in Windows Telephony Server can be exploited remotely to gain privileges.
2. A denial of service vulnerability in Windows Standards-Based Storage Management Service can be exploited remotely to cause denial of service.
3. A remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server can be exploited remotely to execute arbitrary code.
4. A remote code execution vulnerability in Microsoft ODBC Driver can be exploited remotely to execute arbitrary code.
5. An elevation of privilege vulnerability in NTFS can be exploited remotely to gain privileges.
6. An information disclosure vulnerability in Windows Kernel can be exploited remotely to obtain sensitive information.
7. An elevation of privilege vulnerability in Windows Print Spooler can be exploited remotely to gain privileges.
8. An elevation of privilege vulnerability in Windows Kernel can be exploited remotely to gain privileges.
9. An elevation of privilege vulnerability in Windows Update Stack can be exploited remotely to gain privileges.
10. A remote code execution vulnerability in Windows USB Attached SCSI (UAS) Protocol can be exploited remotely to execute arbitrary code.
11. An elevation of privilege vulnerability in Windows Graphics Component can be exploited remotely to gain privileges.
12. A remote code execution vulnerability in Windows Hyper-V can be exploited remotely to execute arbitrary code.
13. A security feature bypass vulnerability in Windows Kerberos can be exploited remotely to bypass security restrictions.
14. A remote code execution vulnerability in Windows USB Hub Driver can be exploited remotely to execute arbitrary code.
15. An elevation of privilege vulnerability in Windows Error Reporting Service can be exploited remotely to gain privileges.
16. An elevation of privilege vulnerability in Windows Installer can be exploited remotely to gain privileges.
17. A denial of service vulnerability in Windows Kernel can be exploited remotely to cause denial of service.
18. An information disclosure vulnerability in RFDS can be exploited remotely to obtain sensitive information.

Original advisories

• CVE-2024-21439

• CVE-2024-26197
• CVE-2024-21441
• CVE-2024-21450
• CVE-2024-26161
• CVE-2024-26162
• CVE-2024-21446
• CVE-2024-26166
• CVE-2024-26159
• CVE-2024-21440
• CVE-2024-26177
• CVE-2024-21433
• CVE-2024-21444
• CVE-2024-26176
• CVE-2024-26173
• CVE-2024-21432
• CVE-2024-21430
• CVE-2024-26174
• CVE-2024-21437
• CVE-2024-21407
• CVE-2024-21427
• CVE-2024-21429
• CVE-2024-21451
• CVE-2024-26169
• CVE-2024-21436
• CVE-2024-26181
• CVE-2023-28746
• CVE-2024-26178

Exploitation

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

• Microsoft-Windows
• Microsoft-Windows-Server
• Microsoft-Windows-Server-2012
• Microsoft-Windows-Server-2008

CVE list

• CVE-2024-21439
  high
• CVE-2024-26197
  high
• CVE-2024-21441
  critical
• CVE-2024-21450
  warning
• CVE-2024-26161
  critical
• CVE-2024-26162
  critical
• CVE-2024-21446
  critical
• CVE-2024-26166
  critical
• CVE-2024-26159
  critical
• CVE-2024-21440
  warning
• CVE-2024-26177
  high
• CVE-2024-21433
  high
• CVE-2024-21444
  critical
• CVE-2024-26176
  warning
• CVE-2024-26173
  critical
• CVE-2024-21432
  high
• CVE-2024-21430
  warning
• CVE-2024-26174
  high
• CVE-2024-21437
  critical
• CVE-2024-21407
  critical
• CVE-2024-21427
  critical
• CVE-2024-21429
  high
• CVE-2024-21451
  critical
• CVE-2024-26169
  critical
• CVE-2024-21436
  critical
• CVE-2024-26181
  high
• CVE-2023-28746
  warning
• CVE-2024-26178
  critical

KB list

• 5035885
• 5035933
• 5035930
• 5035919
• 5035888
• 5035920
• 5036960

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com