説明
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information, cause denial of service, bypass security restrictions.
Below is a complete list of vulnerabilities:
- A remote code execution vulnerability in Windows DHCP Server can be exploited remotely via specially crafted packets to execute arbitrary code.
- A remote code execution vulnerability in DirectWrite can be exploited remotely via specially crafted document to execute arbitrary code.
- An elevation of privilege vulnerability in Windows can be exploited remotely via specially crafted application to gain privileges.
- An elevation of privilege vulnerability in Windows Audio Service can be exploited remotely via specially crafted application to gain privileges.
- An elevation of privilege vulnerability in DirectX can be exploited remotely via specially crafted application to gain privileges.
- An information disclosure vulnerability in DirectWrite can be exploited remotely via specially crafted document to obtain sensitive information.
- An information disclosure vulnerability in Remote Desktop Protocol Client can be exploited remotely via specially crafted application to obtain sensitive information.
- An elevation of privilege vulnerability in Windows RPCSS can be exploited remotely via specially crafted application to gain privileges.
- An information disclosure vulnerability in Windows GDI can be exploited remotely via specially crafted document to obtain sensitive information.
- An information disclosure vulnerability in Microsoft unistore.dll can be exploited remotely via specially crafted application to obtain sensitive information.
- An information disclosure vulnerability in Win32k can be exploited remotely via specially crafted application to obtain sensitive information.
- An elevation of privilege vulnerability in Microsoft splwow64 can be exploited remotely to gain privileges.
- Security bypass vulnerabulity in Windows Communication Foundation can be exploited remotely to gain privileges.
- An information disclosure vulnerability in Windows Kernel can be exploited remotely via specially crafted application to obtain sensitive information.
- A denial of service vulnerability in SymCrypt can be exploited remotely via specially crafted digital to cause denial of service.
- An elevation of privilege vulnerability in Windows Error Reporting can be exploited remotely to gain privileges.
- A denial of service vulnerability in Windows Hyper-V can be exploited remotely via specially crafted application to cause denial of service.
- A remote code execution vulnerability in GDI+ can be exploited remotely via specially crafted website to execute arbitrary code.
- An elevation of privilege vulnerability in Windows WLAN Service can be exploited remotely via specially crafted application to gain privileges.
- A denial of service vulnerability in Windows DNS Server can be exploited remotely to cause denial of service.
- A remote code execution vulnerability in Remote Desktop Services can be exploited remotely to execute arbitrary code.
- An elevation of privilege vulnerability in Windows dnsrlvr.dll can be exploited remotely via specially crafted application to gain privileges.
- An elevation of privilege vulnerability in Microsoft Windows can be exploited remotely to gain privileges.
- A security feature bypass vulnerability in ADFS can be exploited remotely via specially crafted application to bypass security restrictions.
- A security feature bypass vulnerability in ADFS can be exploited remotely to bypass security restrictions.
- An elevation of privilege vulnerability in Windows Kernel can be exploited remotely via specially crafted application to gain privileges.
オリジナルアドバイザリー
- CVE-2019-1121
- CVE-2019-1086
- CVE-2019-1096
- CVE-2019-1089
- CVE-2019-1130
- CVE-2019-1087
- CVE-2019-1037
- CVE-2019-1090
- CVE-2019-0880
- CVE-2019-1085
- CVE-2019-1006
- CVE-2019-0785
- CVE-2019-1108
- CVE-2019-0865
- CVE-2019-1095
- CVE-2019-1129
- CVE-2019-1082
- CVE-2019-0999
- CVE-2019-1126
- CVE-2019-1071
- CVE-2019-1094
- CVE-2019-1122
- CVE-2019-1091
- CVE-2019-1117
- CVE-2019-0966
- CVE-2019-1074
- CVE-2019-1127
- CVE-2019-1102
- CVE-2019-1119
- CVE-2019-0975
- CVE-2019-1093
- CVE-2019-1124
- CVE-2019-1128
- CVE-2019-1123
- CVE-2019-1073
- CVE-2019-0887
- CVE-2019-1097
- CVE-2019-0811
- CVE-2019-1088
- CVE-2019-1067
- CVE-2019-1118
エクスプロイテーション
Public exploits exist for this vulnerability.
Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.
関連製品
- Microsoft-Windows-Server-2012
- Microsoft-Windows-8
- Microsoft-Windows-7
- Microsoft-Windows-Server-2008
- Microsoft-Windows-10
CVEリスト
- CVE-2019-0785 critical
- CVE-2019-1120 critical
- CVE-2019-1130 critical
- CVE-2019-1127 critical
- CVE-2019-1086 critical
- CVE-2019-1128 critical
- CVE-2019-0999 critical
- CVE-2019-1129 critical
- CVE-2019-1093 high
- CVE-2019-1108 high
- CVE-2019-1097 high
- CVE-2019-1087 critical
- CVE-2019-1123 critical
- CVE-2019-1089 critical
- CVE-2019-1095 high
- CVE-2019-1124 critical
- CVE-2019-1091 high
- CVE-2019-1096 high
- CVE-2019-0880 critical
- CVE-2019-1006 critical
- CVE-2019-1117 critical
- CVE-2019-1088 critical
- CVE-2019-1071 high
- CVE-2019-1121 critical
- CVE-2019-1094 high
- CVE-2019-1119 critical
- CVE-2019-1122 critical
- CVE-2019-0865 critical
- CVE-2019-1037 high
- CVE-2019-0966 high
- CVE-2019-1102 critical
- CVE-2019-1118 critical
- CVE-2019-1085 critical
- CVE-2019-0811 critical
- CVE-2019-0887 critical
- CVE-2019-1090 critical
- CVE-2019-1074 high
- CVE-2019-1073 high
- CVE-2019-1126 high
- CVE-2019-1082 critical
- CVE-2019-0975 high
- CVE-2019-1067 critical
KBリスト
も参照してください
お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com
この脆弱性についての記述に不正確な点がありますか？ お知らせください！