説明
Multiple vulnerabilities were found in Microsoft Products (Extended Security Update). Malicious users can exploit these vulnerabilities to spoof user interface, obtain sensitive information, bypass security restrictions, gain privileges, cause denial of service, execute arbitrary code.
Below is a complete list of vulnerabilities:
- A spoofing vulnerability in Windows Themes can be exploited remotely to spoof user interface.
- An information disclosure vulnerability in MSMQC can be exploited remotely to obtain sensitive information.
- A security feature bypass vulnerability in Windows Kerberos can be exploited remotely to bypass security restrictions.
- An information disclosure vulnerability in Microsoft Local Security Authority Subsystem Service can be exploited remotely to obtain sensitive information.
- An information disclosure vulnerability in Windows TCP/IP can be exploited remotely to obtain sensitive information.
- A security feature bypass vulnerability in Windows HTML Platforms can be exploited remotely to bypass security restrictions.
- An elevation of privilege vulnerability in Windows Group Policy can be exploited remotely to gain privileges.
- An information disclosure vulnerability in Microsoft Message Queuing can be exploited remotely to obtain sensitive information.
- An information disclosure vulnerability in Windows Online Certificate Status Protocol (OCSP) can be exploited remotely to obtain sensitive information.
- A denial of service vulnerability in Microsoft Message Queuing can be exploited remotely to cause denial of service.
- An information disclosure vulnerability in Windows Themes can be exploited remotely to obtain sensitive information.
- An elevation of privilege vulnerability in Win32k can be exploited remotely to gain privileges.
- A remote code execution vulnerability in Microsoft ODBC Driver can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in Remote Desktop Client can be exploited remotely to execute arbitrary code.
- An elevation of privilege vulnerability in Microsoft Common Log File System can be exploited remotely to gain privileges.
- An elevation of privilege vulnerability in Microsoft Virtual Hard Disk can be exploited remotely to gain privileges.
- A remote code execution vulnerability in Microsoft Online Certificate Status Protocol (OCSP) can be exploited remotely to execute arbitrary code.
- An information disclosure vulnerability in Windows Cryptographic Services can be exploited remotely to obtain sensitive information.
- A remote code execution vulnerability in Windows Cryptographic Services can be exploited remotely to execute arbitrary code.
オリジナルアドバイザリー
- CVE-2024-20680
- CVE-2024-20674
- CVE-2024-20692
- CVE-2024-21313
- CVE-2024-20652
- CVE-2024-20657
- CVE-2024-20660
- CVE-2024-20664
- CVE-2024-20662
- CVE-2024-20661
- CVE-2024-20691
- CVE-2024-20683
- CVE-2024-20654
- CVE-2024-21307
- CVE-2024-21314
- CVE-2024-20653
- CVE-2024-20663
- CVE-2024-20658
- CVE-2024-20655
- CVE-2024-21311
- CVE-2024-20682
エクスプロイテーション
Public exploits exist for this vulnerability.
Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.
関連製品
- Microsoft-Windows
- Microsoft-Windows-Server
- Microsoft-Windows-Server-2012
- Microsoft-Windows-Server-2008
CVEリスト
- CVE-2024-21320 high
- CVE-2024-20680 high
- CVE-2024-20674 critical
- CVE-2024-20692 high
- CVE-2024-21313 high
- CVE-2024-20652 critical
- CVE-2024-20657 high
- CVE-2024-20660 high
- CVE-2024-20664 high
- CVE-2024-20662 warning
- CVE-2024-20661 critical
- CVE-2024-20691 warning
- CVE-2024-20683 critical
- CVE-2024-20654 critical
- CVE-2024-21307 critical
- CVE-2024-21314 high
- CVE-2024-20653 critical
- CVE-2024-20663 high
- CVE-2024-20658 critical
- CVE-2024-20655 high
- CVE-2024-21311 high
- CVE-2024-20682 critical
KBリスト
も参照してください
お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com
この脆弱性についての記述に不正確な点がありますか？ お知らせください！