Description
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information, cause denial of service, spoof user interface, bypass security restrictions.
Below is a complete list of vulnerabilities:
- An elevation of privilege vulnerability in Windows Win32 Kernel Subsystem can be exploited remotely to gain privileges.
- A remote code execution vulnerability in Windows Remote Desktop Licensing Service can be exploited remotely to execute arbitrary code.
- An elevation of privilege vulnerability in Windows Graphics Component can be exploited remotely to gain privileges.
- An elevation of privilege vulnerability in PowerShell can be exploited remotely to gain privileges.
- A remote code execution vulnerability in Windows libarchive can be exploited remotely to execute arbitrary code.
- An elevation of privilege vulnerability in Windows Installer can be exploited remotely to gain privileges.
- An information disclosure vulnerability in Windows Authentication can be exploited remotely to obtain sensitive information.
- An elevation of privilege vulnerability in Kernel Streaming Service Driver can be exploited remotely to gain privileges.
- An elevation of privilege vulnerability in Win32k can be exploited remotely to gain privileges.
- A denial of service vulnerability in Windows Networking can be exploited remotely to cause denial of service.
- A spoofing vulnerability in Windows MSHTML Platform can be exploited remotely to spoof user interface.
- An elevation of privilege vulnerability in Windows Kerberos can be exploited remotely to gain privileges.
- A security feature bypass vulnerability in Windows Security Zone Mapping can be exploited remotely to bypass security restrictions.
- An elevation of privilege vulnerability in Windows Storage can be exploited remotely to gain privileges.
- A denial of service vulnerability in Windows Hyper-V can be exploited remotely to cause denial of service.
- A spoofing vulnerability in Windows Remote Desktop Licensing Service can be exploited remotely to spoof user interface.
- A security feature bypass vulnerability in Windows Mark of the Web can be exploited remotely to bypass security restrictions.
- An information disclosure vulnerability in Windows Remote Desktop Licensing Service can be exploited remotely to obtain sensitive information.
- A remote code execution vulnerability in Windows TCP/IP can be exploited remotely to execute arbitrary code.
- A denial of service vulnerability in Windows Standards-Based Storage Management Service can be exploited remotely to cause denial of service.
- An elevation of privilege vulnerability in Windows Setup and Deployment can be exploited remotely to gain privileges.
- An elevation of privilege vulnerability in Kernel Streaming WOW Thunk Service Driver can be exploited remotely to gain privileges.
- A denial of service vulnerability in Windows Remote Desktop Licensing Service can be exploited remotely to cause denial of service.
- An information disclosure vulnerability in Microsoft AllJoyn API can be exploited remotely to obtain sensitive information.
- A remote code execution vulnerability in Windows Network Address Translation (NAT) can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in Microsoft Management Console can be exploited remotely to execute arbitrary code.
- A denial of service vulnerability in DHCP Server Service can be exploited remotely to cause denial of service.
- An elevation of privilege vulnerability in Windows Remote Access Connection Manager can be exploited remotely to gain privileges.
- An information disclosure vulnerability in Windows Kernel-Mode Driver can be exploited remotely to obtain sensitive information.
- A remote code execution vulnerability in Microsoft Windows Update can be exploited remotely to execute arbitrary code.
- An information disclosure vulnerability in Windows Networking can be exploited remotely to obtain sensitive information.
Original advisories
- CVE-2024-43454
- CVE-2024-38260
- CVE-2024-38247
- CVE-2024-38046
- CVE-2024-38253
- CVE-2024-43495
- CVE-2024-38014
- CVE-2024-38254
- CVE-2024-38242
- CVE-2024-38246
- CVE-2024-38233
- CVE-2024-43461
- CVE-2024-38241
- CVE-2024-38239
- CVE-2024-30073
- CVE-2024-38248
- CVE-2024-38243
- CVE-2024-38235
- CVE-2024-43455
- CVE-2024-38217
- CVE-2024-38258
- CVE-2024-38045
- CVE-2024-21416
- CVE-2024-43467
- CVE-2024-38250
- CVE-2024-38238
- CVE-2024-38230
- CVE-2024-43457
- CVE-2024-38245
- CVE-2024-38237
- CVE-2024-38244
- CVE-2024-38231
- CVE-2024-38257
- CVE-2024-38119
- CVE-2024-43487
- CVE-2024-38259
- CVE-2024-38236
- CVE-2024-38240
- CVE-2024-38263
- CVE-2024-38256
- CVE-2024-38232
- CVE-2024-38249
- CVE-2024-43491
- CVE-2024-38234
- CVE-2024-43458
Exploitation
Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.
Related products
- Microsoft-Windows
- Microsoft-Windows-Server
- Microsoft-Windows-10
- Microsoft-Windows-Server-2016
- Microsoft-Windows-Server-2019
- Microsoft-Windows-11
- Microsoft-Windows-Server-2022
CVE list
- CVE-2024-38250 critical
- CVE-2024-43454 high
- CVE-2024-38260 critical
- CVE-2024-38247 critical
- CVE-2024-38230 high
- CVE-2024-38245 critical
- CVE-2024-38231 high
- CVE-2024-38014 critical
- CVE-2024-43487 high
- CVE-2024-43461 critical
- CVE-2024-38236 critical
- CVE-2024-38240 critical
- CVE-2024-38239 high
- CVE-2024-38263 critical
- CVE-2024-30073 critical
- CVE-2024-38256 high
- CVE-2024-43455 critical
- CVE-2024-38217 high
- CVE-2024-38249 critical
- CVE-2024-38258 high
- CVE-2024-43467 critical
- CVE-2024-38234 high
- CVE-2024-38252 critical
- CVE-2024-38046 critical
- CVE-2024-38253 critical
- CVE-2024-43495 high
- CVE-2024-38254 high
- CVE-2024-38242 critical
- CVE-2024-38246 high
- CVE-2024-38233 critical
- CVE-2024-38241 critical
- CVE-2024-38248 high
- CVE-2024-38243 critical
- CVE-2024-38235 high
- CVE-2024-38045 critical
- CVE-2024-21416 critical
- CVE-2024-38238 critical
- CVE-2024-43457 critical
- CVE-2024-38237 critical
- CVE-2024-38244 critical
- CVE-2024-38257 critical
- CVE-2024-38119 critical
- CVE-2024-38259 critical
- CVE-2024-38232 critical
- CVE-2024-43491 critical
- CVE-2024-43458 critical
KB list
Read more
Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com
Found an inaccuracy in the description of this vulnerability? Let us know!