Description
Multiple vulnerabilities were found in Microsoft Products (ESU). Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, cause denial of service, obtain sensitive information.
Below is a complete list of vulnerabilities:
- A remote code execution vulnerability in Windows Routing and Remote Access Service (RRAS) can be exploited remotely to execute arbitrary code.
- An elevation of privilege vulnerability in Windows Common Log File System Driver can be exploited remotely to gain privileges.
- A denial of service vulnerability in Windows Lightweight Directory Access Protocol (LDAP) can be exploited remotely to cause denial of service.
- A remote code execution vulnerability in Windows Lightweight Directory Access Protocol (LDAP) can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in Input Method Editor (IME) can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in Microsoft Message Queuing (MSMQ) can be exploited remotely to execute arbitrary code.
- A denial of service vulnerability in Windows Remote Desktop Gateway (RD Gateway) can be exploited remotely to cause denial of service.
- A remote code execution vulnerability in Lightweight Directory Access Protocol (LDAP) Client can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in Windows Remote Desktop Services can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in Windows Local Security Authority Subsystem Service (LSASS) can be exploited remotely to execute arbitrary code.
- A denial of service vulnerability in Windows Remote Desktop Services can be exploited remotely to cause denial of service.
- An elevation of privilege vulnerability in Windows Kernel can be exploited remotely to gain privileges.
- An information disclosure vulnerability in Windows File Explorer can be exploited remotely to obtain sensitive information.
- An elevation of privilege vulnerability in Windows Task Scheduler can be exploited remotely to gain privileges.
- A remote code execution vulnerability in Remote Desktop Client can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in Windows IP Routing Management Snapin can be exploited remotely to execute arbitrary code.
- A denial of service vulnerability in Microsoft Message Queuing (MSMQ) can be exploited remotely to cause denial of service.
- A remote code execution vulnerability in Windows Domain Name Service can be exploited remotely to execute arbitrary code.
Fiches de renseignement originales
- CVE-2024-49104
- CVE-2024-49090
- CVE-2024-49102
- CVE-2024-49113
- CVE-2024-49089
- CVE-2024-49112
- CVE-2024-49127
- CVE-2024-49072
- CVE-2024-49122
- CVE-2024-49105
- CVE-2024-49096
- CVE-2024-49121
- CVE-2024-49080
- CVE-2024-49088
- CVE-2024-49124
- CVE-2024-49086
- CVE-2024-49138
- CVE-2024-49126
- CVE-2024-49125
- CVE-2024-49085
- CVE-2024-49118
- CVE-2024-49084
- CVE-2024-49075
- CVE-2024-49123
- CVE-2024-49079
- CVE-2024-49091
- CVE-2024-49129
- CVE-2024-49120
- CVE-2024-49128
- CVE-2024-49128
- CVE-2024-49120
Exploitation
Public exploits exist for this vulnerability.
Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.
Produits associés
Liste CVE
- CVE-2024-49104 critical
- CVE-2024-49090 critical
- CVE-2024-49113 critical
- CVE-2024-49112 critical
- CVE-2024-49127 critical
- CVE-2024-49089 high
- CVE-2024-49079 critical
- CVE-2024-49122 critical
- CVE-2024-49121 critical
- CVE-2024-49129 critical
- CVE-2024-49124 critical
- CVE-2024-49120 critical
- CVE-2024-49126 critical
- CVE-2024-49075 critical
- CVE-2024-49125 critical
- CVE-2024-49118 critical
- CVE-2024-49102 critical
- CVE-2024-49084 high
- CVE-2024-49128 critical
- CVE-2024-49082 high
- CVE-2024-49123 critical
- CVE-2024-49072 critical
- CVE-2024-49105 critical
- CVE-2024-49080 critical
- CVE-2024-49088 critical
- CVE-2024-49096 critical
- CVE-2024-49091 high
- CVE-2024-49086 critical
- CVE-2024-49138 critical
- CVE-2024-49085 critical
Liste KB
En savoir plus
Découvrez les statistiques de la propagation des vulnérabilités dans votre région statistics.securelist.com
Vous avez trouvé une inexactitude dans la description de cette vulnérabilité ? Faites-le nous savoir !