Multiple vulnerabilities in Microsoft Products (ESU)

Description

Multiple vulnerabilities were found in Microsoft Products (Extended Security Update). Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, gain privileges, cause denial of service.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in Windows Remote Desktop Services can be exploited remotely to execute arbitrary code.
2. An information disclosure vulnerability in Windows File Explorer can be exploited remotely to obtain sensitive information.
3. A remote code execution vulnerability in Windows Routing and Remote Access Service (RRAS) can be exploited remotely to execute arbitrary code.
4. An elevation of privilege vulnerability in Windows Common Log File System Driver can be exploited remotely to gain privileges.
5. A denial of service vulnerability in Windows Lightweight Directory Access Protocol (LDAP) can be exploited remotely to cause denial of service.
6. A remote code execution vulnerability in Windows Lightweight Directory Access Protocol (LDAP) can be exploited remotely to execute arbitrary code.
7. A remote code execution vulnerability in Input Method Editor (IME) can be exploited remotely to execute arbitrary code.
8. An elevation of privilege vulnerability in Windows Task Scheduler can be exploited remotely to gain privileges.
9. A remote code execution vulnerability in Microsoft Message Queuing (MSMQ) can be exploited remotely to execute arbitrary code.
10. A remote code execution vulnerability in Remote Desktop Client can be exploited remotely to execute arbitrary code.
11. A denial of service vulnerability in Microsoft Message Queuing (MSMQ) can be exploited remotely to cause denial of service.
12. A remote code execution vulnerability in Windows IP Routing Management Snapin can be exploited remotely to execute arbitrary code.
13. A remote code execution vulnerability in Windows Domain Name Service can be exploited remotely to execute arbitrary code.
14. A denial of service vulnerability in Windows Remote Desktop Gateway (RD Gateway) can be exploited remotely to cause denial of service.
15. A remote code execution vulnerability in Lightweight Directory Access Protocol (LDAP) Client can be exploited remotely to execute arbitrary code.
16. A remote code execution vulnerability in Windows Local Security Authority Subsystem Service (LSASS) can be exploited remotely to execute arbitrary code.
17. An elevation of privilege vulnerability in Windows Kernel can be exploited remotely to gain privileges.

Original advisories

• CVE-2024-49128

• CVE-2024-49082
• CVE-2024-49104
• CVE-2024-49090
• CVE-2024-49102
• CVE-2024-49113
• CVE-2024-49089
• CVE-2024-49112
• CVE-2024-49127
• CVE-2024-49079
• CVE-2024-49072
• CVE-2024-49122
• CVE-2024-49105
• CVE-2024-49096
• CVE-2024-49121
• CVE-2024-49080
• CVE-2024-49088
• CVE-2024-49091
• CVE-2024-49129
• CVE-2024-49124
• CVE-2024-49086
• CVE-2024-49138
• CVE-2024-49120
• CVE-2024-49126
• CVE-2024-49125
• CVE-2024-49085
• CVE-2024-49118
• CVE-2024-49084

Exploitation

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

• Microsoft-Windows
• Microsoft-Windows-Server
• Microsoft-Windows-Server-2012
• Microsoft-Windows-Server-2008

CVE list

• CVE-2024-49104
  critical
• CVE-2024-49090
  critical
• CVE-2024-49113
  critical
• CVE-2024-49112
  critical
• CVE-2024-49127
  critical
• CVE-2024-49089
  high
• CVE-2024-49079
  critical
• CVE-2024-49122
  critical
• CVE-2024-49121
  critical
• CVE-2024-49129
  critical
• CVE-2024-49124
  critical
• CVE-2024-49120
  critical
• CVE-2024-49126
  critical
• CVE-2024-49125
  critical
• CVE-2024-49118
  critical
• CVE-2024-49102
  critical
• CVE-2024-49084
  high
• CVE-2024-49128
  critical
• CVE-2024-49082
  high
• CVE-2024-49072
  critical
• CVE-2024-49105
  critical
• CVE-2024-49080
  critical
• CVE-2024-49088
  critical
• CVE-2024-49096
  critical
• CVE-2024-49091
  high
• CVE-2024-49086
  critical
• CVE-2024-49138
  critical
• CVE-2024-49085
  critical

KB list

• 5048735
• 5048710
• 5048676
• 5048699
• 5048744
• 5048695
• 5050048

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com