Multiple vulnerabilities in Microsoft Windows

Description

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in Windows TCP/IP can be exploited remotely to execute arbitrary code.
2. An elevation of privilege vulnerability in Windows Event Tracing can be exploited remotely to gain privileges.
3. An elevation of privilege vulnerability in Windows User Account Profile Picture can be exploited remotely to gain privileges.
4. An elevation of privilege vulnerability in Windows Recovery Environment Agent can be exploited remotely to gain privileges.
5. A remote code execution vulnerability in Windows Services for NFS ONCRPC XDR Driver can be exploited remotely to execute arbitrary code.
6. An information disclosure vulnerability in Windows Services for NFS ONCRPC XDR Driver can be exploited remotely to obtain sensitive information.
7. A memory corruption vulnerability in Scripting Engine can be exploited remotely to cause denial of service.
8. An elevation of privilege vulnerability in Windows Print Spooler can be exploited remotely to gain privileges.
9. An elevation of privilege vulnerability in Windows User Profile Service can be exploited remotely to gain privileges.
10. A remote code execution vulnerability in Windows Graphics Component can be exploited remotely to execute arbitrary code.
11. A remote code execution vulnerability in Windows Graphics Component Font Parsing can be exploited remotely to execute arbitrary code.
12. A remote code execution vulnerability in Windows MSHTML Platform can be exploited remotely to execute arbitrary code.
13. A remote code execution vulnerability in Remote Desktop Client can be exploited remotely to execute arbitrary code.
14. An elevation of privilege vulnerability in Storage Spaces Controller can be exploited remotely to gain privileges.
15. An elevation of privilege vulnerability in Windows Bluetooth Driver can be exploited remotely to gain privileges.
16. An elevation of privilege vulnerability in Windows Digital TV Tuner device registration application can be exploited remotely to gain privileges.
17. A remote code execution vulnerability in Windows Print Spooler can be exploited remotely to execute arbitrary code.
18. A remote code execution vulnerability in Windows Media MPEG-4 Video Decoder can be exploited remotely to execute arbitrary code.
19. An information disclosure vulnerability in Windows Cryptographic Primitives Library can be exploited remotely to obtain sensitive information.
20. A spoofing vulnerability in Windows LSA can be exploited remotely to spoof user interface.
21. An elevation of privilege vulnerability in Windows 10 Update Assistant can be exploited remotely to gain privileges.
22. An elevation of privilege vulnerability in Windows Update Medic Service can be exploited remotely to gain privileges.

Fiches de renseignement originales

• CVE-2021-36948

• CVE-2021-26424
• CVE-2021-26433
• CVE-2021-36945
• CVE-2021-26432
• CVE-2021-36926
• CVE-2021-36942
• CVE-2021-36947
• CVE-2021-34487
• CVE-2021-34530
• CVE-2021-34480
• CVE-2021-34534
• CVE-2021-36927
• CVE-2021-34486
• CVE-2021-36932
• CVE-2021-34533
• CVE-2021-34537
• CVE-2021-36937
• CVE-2021-36936
• CVE-2021-26425
• CVE-2021-34483
• CVE-2021-26431
• CVE-2021-26426
• CVE-2021-34536
• CVE-2021-34484
• CVE-2021-34535
• CVE-2021-36933
• CVE-2021-36938

Exploitation

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Produits associés

• Microsoft-Windows
• Microsoft-Windows-Server
• Microsoft-Windows-Server-2012
• Microsoft-Windows-8
• Microsoft-Windows-7
• Microsoft-Windows-Server-2008
• Windows-RT
• Microsoft-Windows-10
• Microsoft-Windows-Server-2016
• Microsoft-Windows-Server-2019
• Microsoft-Remote-Desktop

Liste CVE

• CVE-2021-34533
  critical
• CVE-2021-26424
  critical
• CVE-2021-34537
  critical
• CVE-2021-26425
  critical
• CVE-2021-36936
  critical
• CVE-2021-34483
  critical
• CVE-2021-36937
  critical
• CVE-2021-36942
  critical
• CVE-2021-36947
  critical
• CVE-2021-34484
  critical
• CVE-2021-34535
  critical
• CVE-2021-36927
  critical
• CVE-2021-34480
  critical
• CVE-2021-36948
  critical
• CVE-2021-26433
  unknown
• CVE-2021-36945
  critical
• CVE-2021-26432
  unknown
• CVE-2021-36926
  unknown
• CVE-2021-34487
  critical
• CVE-2021-34530
  critical
• CVE-2021-34534
  critical
• CVE-2021-34486
  critical
• CVE-2021-36932
  unknown
• CVE-2021-26431
  critical
• CVE-2021-26426
  unknown
• CVE-2021-34536
  critical
• CVE-2021-36933
  unknown
• CVE-2021-36938
  high

Liste KB

• 4023814
• 5005036
• 5005031
• 5005033
• 5005030
• 5005106
• 5005040
• 5005043
• 5005076
• 5011564
• 5011560

En savoir plus

Découvrez les statistiques de la propagation des vulnérabilités dans votre région statistics.securelist.com