Multiple vulnerabilities in Microsoft Products (ESU)

説明

Multiple vulnerabilities were found in Microsoft Products (Extended Security Update). Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, gain privileges.

Below is a complete list of vulnerabilities:

1. A denial of service vulnerability in DNS protocol can be exploited remotely to cause denial of service.
2. A remote code execution vulnerability in Microsoft Message Queuing (MSMQ) can be exploited remotely to execute arbitrary code.
3. An elevation of privilege vulnerability in Win32k can be exploited remotely to gain privileges.
4. An elevation of privilege vulnerability in Windows Kernel-Mode Driver can be exploited remotely to gain privileges.
5. A remote code execution vulnerability in Windows Wi-Fi Driver can be exploited remotely to execute arbitrary code.
6. A remote code execution vulnerability in Windows Link Layer Topology Discovery Protocol can be exploited remotely to execute arbitrary code.
7. An elevation of privilege vulnerability in Microsoft Streaming Service can be exploited remotely to gain privileges.
8. An elevation of privilege vulnerability in Winlogon can be exploited remotely to gain privileges.
9. A remote code execution vulnerability in Windows Standards-Based Storage Management Service can be exploited remotely to execute arbitrary code.
10. An elevation of privilege vulnerability in Windows Storage can be exploited remotely to gain privileges.
11. An elevation of privilege vulnerability in Windows Win32 Kernel Subsystem can be exploited remotely to gain privileges.
12. A denial of service vulnerability in Windows Standards-Based Storage Management Service can be exploited remotely to cause denial of service.
13. A remote code execution vulnerability in Windows Routing and Remote Access Service (RRAS) can be exploited remotely to execute arbitrary code.
14. A remote code execution vulnerability in Windows OLE can be exploited remotely to execute arbitrary code.
15. A remote code execution vulnerability in Windows Distributed File System (DFS) can be exploited remotely to execute arbitrary code.
16. A denial of service vulnerability in Windows Themes can be exploited remotely to cause denial of service.
17. A denial of service vulnerability in DHCP Server Service can be exploited remotely to cause denial of service.

オリジナルアドバイザリー

• CVE-2023-50868

• CVE-2024-30080
• CVE-2024-30091
• CVE-2024-35250
• CVE-2024-30084
• CVE-2024-30078
• CVE-2024-30075
• CVE-2024-30090
• CVE-2024-30066
• CVE-2024-30062
• CVE-2024-30093
• CVE-2024-30087
• CVE-2024-30086
• CVE-2024-30083
• CVE-2024-30095
• CVE-2024-30067
• CVE-2024-30077
• CVE-2024-30082
• CVE-2024-30094
• CVE-2024-30063
• CVE-2024-30074
• CVE-2024-30065
• CVE-2024-30070

エクスプロイテーション

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

関連製品

• Microsoft-Windows
• Microsoft-Windows-Server
• Microsoft-Windows-Server-2012
• Microsoft-Windows-Server-2008

CVEリスト

• CVE-2023-50868
  critical
• CVE-2024-30080
  critical
• CVE-2024-30091
  critical
• CVE-2024-35250
  critical
• CVE-2024-30084
  high
• CVE-2024-30078
  critical
• CVE-2024-30075
  critical
• CVE-2024-30090
  high
• CVE-2024-30066
  high
• CVE-2024-30062
  critical
• CVE-2024-30093
  high
• CVE-2024-30087
  critical
• CVE-2024-30086
  critical
• CVE-2024-30083
  critical
• CVE-2024-30095
  critical
• CVE-2024-30067
  high
• CVE-2024-30077
  critical
• CVE-2024-30082
  critical
• CVE-2024-30094
  critical
• CVE-2024-30063
  high
• CVE-2024-30074
  critical
• CVE-2024-30065
  high
• CVE-2024-30070
  critical

KBリスト

• 5039260
• 5039289
• 5039266
• 5039294
• 5039245
• 5039274

も参照してください

お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com