Multiple vulnerabilities in Microsoft Products (ESU)

説明

Multiple vulnerabilities were found in Microsoft Products (Extended Security Update). Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface, cause denial of service.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in Windows Graphics Component Font Parsing can be exploited remotely to execute arbitrary code.
2. A remote code execution vulnerability in Windows TCP/IP can be exploited remotely to execute arbitrary code.
3. An elevation of privilege vulnerability in Windows Bluetooth Driver can be exploited remotely to gain privileges.
4. An elevation of privilege vulnerability in Windows Event Tracing can be exploited remotely to gain privileges.
5. A remote code execution vulnerability in Windows Print Spooler can be exploited remotely to execute arbitrary code.
6. An elevation of privilege vulnerability in Windows Print Spooler can be exploited remotely to gain privileges.
7. A remote code execution vulnerability in Windows Media MPEG-4 Video Decoder can be exploited remotely to execute arbitrary code.
8. A spoofing vulnerability in Windows LSA can be exploited remotely to spoof user interface.
9. An elevation of privilege vulnerability in Windows User Profile Service can be exploited remotely to gain privileges.
10. A remote code execution vulnerability in Remote Desktop Client can be exploited remotely to execute arbitrary code.
11. An elevation of privilege vulnerability in Windows Digital TV Tuner device registration application can be exploited remotely to gain privileges.
12. A memory corruption vulnerability in Scripting Engine can be exploited remotely to cause denial of service.

オリジナルアドバイザリー

• CVE-2021-34533

• CVE-2021-26424
• CVE-2021-34537
• CVE-2021-26425
• CVE-2021-36936
• CVE-2021-34483
• CVE-2021-36937
• CVE-2021-36942
• CVE-2021-36947
• CVE-2021-34484
• CVE-2021-34535
• CVE-2021-36927
• CVE-2021-34480

エクスプロイテーション

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

関連製品

• Microsoft-Windows
• Microsoft-Windows-Server
• Microsoft-Windows-Server-2012
• Microsoft-Windows-8
• Microsoft-Windows-7
• Microsoft-Windows-Server-2008
• Windows-RT
• Microsoft-Windows-10

CVEリスト

• CVE-2021-34533
  critical
• CVE-2021-26424
  critical
• CVE-2021-34537
  critical
• CVE-2021-26425
  critical
• CVE-2021-36936
  critical
• CVE-2021-34483
  critical
• CVE-2021-36937
  critical
• CVE-2021-36942
  critical
• CVE-2021-36947
  critical
• CVE-2021-34484
  critical
• CVE-2021-34535
  critical
• CVE-2021-36927
  critical
• CVE-2021-34480
  critical

KBリスト

• 5005090
• 5005089
• 5005036
• 5005095
• 5005088
• 5011525
• 5011534
• 5011552
• 5011529

も参照してください

お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com