説明
Multiple vulnerabilities were found in Microsoft Products (Extended Support Update). Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, cause denial of service, bypass security restrictions.
Below is a complete list of vulnerabilities:
- An information disclosure vulnerability in Microsoft Graphics Component can be exploited remotely via specially crafted application to obtain sensitive information.
- A remote code execution vulnerability in Windows OLE can be exploited remotely via specially crafted file to execute arbitrary code.
- An elevation of privilege vulnerability in Windows WalletService can be exploited remotely via specially crafted application to gain privileges.
- An information disclosure vulnerability in Windows GDI can be exploited remotely via specially crafted document to obtain sensitive information.
- A remote code execution vulnerability in Windows SMB can be exploited remotely via specially crafted packet to execute arbitrary code.
- A remote code execution vulnerability in VBScript can be exploited remotely via specially crafted website to execute arbitrary code.
- An elevation of privilege vulnerability in Win32k can be exploited remotely via specially crafted application to gain privileges.
- An elevation of privilege vulnerability in Windows Kernel can be exploited remotely via specially crafted application to gain privileges.
- An information disclosure vulnerability in Windows Error Reporting can be exploited remotely via specially crafted application to obtain sensitive information.
- A remote code execution vulnerability in Jet Database Engine can be exploited remotely via specially crafted file to execute arbitrary code.
- A remote code execution vulnerability in Windows can be exploited remotely via specially crafted cabinet to execute arbitrary code.
- An elevation of privilege vulnerability in Windows Print Configuration can be exploited remotely via specially crafted application to gain privileges.
- A denial of service vulnerability in Windows Registry can be exploited remotely via specially crafted application to cause denial of service.
- A remote code execution vulnerability in LNK can be exploited remotely to execute arbitrary code.
- An elevation of privilege vulnerability in Windows Network Connections Service can be exploited remotely via specially crafted application to gain privileges.
- An elevation of privilege vulnerability in Group Policy can be exploited remotely via specially crafted application to gain privileges.
- A memory corruption vulnerability in Media Foundation can be exploited remotely via specially crafted document to execute arbitrary code.
- An elevation of privilege vulnerability in Windows Text Service Framework can be exploited remotely via specially crafted application to gain privileges.
- An information disclosure vulnerability in Internet Explorer can be exploited remotely via specially crafted content to obtain sensitive information.
- An elevation of privilege vulnerability in OLE Automation can be exploited remotely via specially crafted application to gain privileges.
- An elevation of privilege vulnerability in Component Object Model can be exploited remotely via specially crafted application to bypass security restrictions.
- An elevation of privilege vulnerability in Windows Background Intelligent Transfer Service can be exploited remotely via specially crafted request to gain privileges.
- An elevation of privilege vulnerability in Windows Modules Installer Service can be exploited remotely to gain privileges.
- An elevation of privilege vulnerability in Windows Backup Service can be exploited remotely via specially crafted application to gain privileges.
- An elevation of privilege vulnerability in Windows WLAN Service can be exploited remotely via specially crafted application to gain privileges.
- An elevation of privilege vulnerability in Windows Installer can be exploited remotely to gain privileges.
オリジナルアドバイザリー
- CVE-2020-1281
- CVE-2020-1287
- CVE-2020-1348
- CVE-2020-1301
- CVE-2020-1260
- CVE-2020-1207
- CVE-2020-1262
- CVE-2020-1263
- CVE-2020-1246
- CVE-2020-1247
- CVE-2020-1208
- CVE-2020-1300
- CVE-2020-1196
- CVE-2020-1194
- CVE-2020-1299
- CVE-2020-1291
- CVE-2020-1317
- CVE-2020-1239
- CVE-2020-1214
- CVE-2020-1236
- CVE-2020-1230
- CVE-2020-1314
- CVE-2020-1315
- CVE-2020-1213
- CVE-2020-1212
- CVE-2020-1215
- CVE-2020-1311
- CVE-2020-1216
- CVE-2020-1255
- CVE-2020-1254
- CVE-2020-1271
- CVE-2020-1270
- CVE-2020-1251
- CVE-2020-1253
- CVE-2020-1272
- CVE-2020-1302
エクスプロイテーション
Public exploits exist for this vulnerability.
Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.
関連製品
- Microsoft-Internet-Explorer
- Microsoft-Windows
- Microsoft-Windows-Server
- Microsoft-Windows-Server-2012
- Microsoft-Windows-8
- Microsoft-Windows-7
- Microsoft-Windows-Server-2008
- Windows-RT
- Microsoft-Windows-10
CVEリスト
- CVE-2020-1160 high
- CVE-2020-1281 critical
- CVE-2020-1287 critical
- CVE-2020-1348 high
- CVE-2020-1301 critical
- CVE-2020-1260 critical
- CVE-2020-1207 critical
- CVE-2020-1262 critical
- CVE-2020-1263 high
- CVE-2020-1246 critical
- CVE-2020-1247 critical
- CVE-2020-1208 critical
- CVE-2020-1300 critical
- CVE-2020-1196 critical
- CVE-2020-1194 high
- CVE-2020-1299 critical
- CVE-2020-1291 critical
- CVE-2020-1317 critical
- CVE-2020-1239 critical
- CVE-2020-1214 critical
- CVE-2020-1236 critical
- CVE-2020-1230 critical
- CVE-2020-1314 critical
- CVE-2020-1315 high
- CVE-2020-1213 critical
- CVE-2020-1212 critical
- CVE-2020-1215 critical
- CVE-2020-1311 critical
- CVE-2020-1216 critical
- CVE-2020-1255 critical
- CVE-2020-1254 critical
- CVE-2020-1271 critical
- CVE-2020-1270 critical
- CVE-2020-1251 high
- CVE-2020-1253 high
- CVE-2020-1272 critical
- CVE-2020-1302 critical
KBリスト
も参照してください
お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com
この脆弱性についての記述に不正確な点がありますか？ お知らせください！