説明
Multiple vulnerabilities were found in Microsoft Products (Extended Support Update). Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, execute arbitrary code, obtain sensitive information, bypass security restrictions.
Below is a complete list of vulnerabilities:
- A denial of service vulnerability in Windows Hyper-V can be exploited remotely via specially crafted application to cause denial of service;
- An elevation of privilege vulnerability in Win32k can be exploited remotely via specially crafted application to gain privileges;
- A remote code execution vulnerability in Hyper-V can be exploited remotely via specially crafted application to execute arbitrary code;
- An elevation of privilege vulnerability in Windows Installer can be exploited remotely to gain privileges;
- A remote code execution vulnerability in Win32k Graphics can be exploited remotely via specially crafted embedded to execute arbitrary code;
- An elevation of privilege vulnerability in Windows UPnP Service can be exploited remotely via specially crafted script to gain privileges;
- A remote code execution vulnerability in Jet Database Engine can be exploited remotely via specially crafted file to execute arbitrary code;
- An elevation of privilege vulnerability in Windows Graphics Component can be exploited remotely via specially crafted application to gain privileges;
- A memory corruption vulnerability in Scripting Engine can be exploited remotely via specially crafted website to execute arbitrary code.
- An information disclosure vulnerability in Windows Kernel can be exploited remotely via specially crafted application to obtain sensitive information;
- A security feature bypass vulnerability in NetLogon can be exploited remotely to bypass security restrictions;
- An elevation of privilege vulnerability in Windows can be exploited remotely via specially crafted application to gain privileges;
- An information disclosure vulnerability in Windows Remote Procedure Call can be exploited remotely via specially crafted application to obtain sensitive information;
- A denial of service vulnerability in Windows can be exploited remotely via specially crafted application to cause denial of service;
- An elevation of privilege vulnerability in Microsoft ActiveX Installer Service can be exploited remotely via specially crafted application to gain privileges;
- A security feature bypass vulnerability in Microsoft Windows can be exploited remotely via specially crafted authentication to bypass security restrictions;
- A remote code execution vulnerability in Windows Hyper-V can be exploited remotely via specially crafted application to execute arbitrary code;
- An elevation of privilege vulnerability in Windows Certificate Dialog can be exploited remotely via specially crafted application to gain privileges;
- A remote code execution vulnerability in OpenType Font Parsing can be exploited remotely via specially crafted to execute arbitrary code;
- An elevation of privilege vulnerability in Windows User Profile Service can be exploited remotely via specially crafted application to gain privileges;
- An information disclosure vulnerability in Windows Modules Installer Service can be exploited remotely via specially crafted application to obtain sensitive information;
- An information disclosure vulnerability in Windows GDI can be exploited remotely via specially crafted document to obtain sensitive information;
- An information disclosure vulnerability in DirectWrite can be exploited remotely via specially crafted document to obtain sensitive information;
- An information disclosure vulnerability in OpenType Font Driver can be exploited remotely via specially crafted fonts to obtain sensitive information;
- A remote code execution vulnerability in VBScript can be exploited remotely via specially crafted website to execute arbitrary code.
オリジナルアドバイザリー
- CVE-2019-1408
- CVE-2019-0719
- CVE-2019-1415
- CVE-2019-1441
- CVE-2019-1405
- CVE-2019-1406
- CVE-2019-1407
- CVE-2019-1429
- CVE-2019-11135
- CVE-2019-1424
- CVE-2019-1422
- CVE-2019-1409
- CVE-2018-12207
- CVE-2019-1382
- CVE-2019-1384
- CVE-2019-1389
- CVE-2019-1388
- CVE-2019-1456
- CVE-2019-1454
- CVE-2019-1419
- CVE-2019-1418
- CVE-2019-1439
- CVE-2019-1438
- CVE-2019-1435
- CVE-2019-1434
- CVE-2019-1411
- CVE-2019-1433
- CVE-2019-1432
- CVE-2019-1399
- CVE-2019-1412
- CVE-2019-1394
- CVE-2019-1395
- CVE-2019-1396
- CVE-2019-1397
- CVE-2019-1390
- CVE-2019-1391
- CVE-2019-1393
エクスプロイテーション
Public exploits exist for this vulnerability.
Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.
関連製品
- Microsoft-Internet-Explorer
- Microsoft-Windows
- Microsoft-Windows-Server
- Microsoft-Windows-Server-2012
- Microsoft-Windows-8
- Microsoft-Windows-7
- Microsoft-Windows-Server-2008
- Windows-RT
- Microsoft-Windows-10
CVEリスト
- CVE-2019-1429 critical
- CVE-2019-1390 critical
- CVE-2019-1415 critical
- CVE-2019-1411 high
- CVE-2019-0712 high
- CVE-2019-1424 critical
- CVE-2019-1399 high
- CVE-2019-1396 critical
- CVE-2019-1395 critical
- CVE-2019-1439 high
- CVE-2019-1454 high
- CVE-2018-12207 high
- CVE-2019-1406 critical
- CVE-2019-1382 high
- CVE-2019-1391 high
- CVE-2019-11135 high
- CVE-2019-1394 critical
- CVE-2019-1434 critical
- CVE-2019-1433 critical
- CVE-2019-1418 warning
- CVE-2019-1432 high
- CVE-2019-1409 high
- CVE-2019-1389 critical
- CVE-2019-1393 critical
- CVE-2019-0719 critical
- CVE-2019-1384 critical
- CVE-2019-1441 critical
- CVE-2019-1419 critical
- CVE-2019-1408 critical
- CVE-2019-1456 critical
- CVE-2019-1412 high
- CVE-2019-1397 critical
- CVE-2019-1388 critical
- CVE-2019-1405 critical
- CVE-2019-1438 critical
- CVE-2019-1435 critical
- CVE-2019-1422 critical
- CVE-2019-1407 critical
KBリスト
も参照してください
お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com
この脆弱性についての記述に不正確な点がありますか？ お知らせください！