Kaspersky ID:
KLA73227
検出日:
09/10/2024
更新日:
01/28/2026

説明

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information, cause denial of service, spoof user interface, bypass security restrictions.

Below is a complete list of vulnerabilities:

  1. An elevation of privilege vulnerability in Windows Win32 Kernel Subsystem can be exploited remotely to gain privileges.
  2. A remote code execution vulnerability in Windows Remote Desktop Licensing Service can be exploited remotely to execute arbitrary code.
  3. An elevation of privilege vulnerability in Windows Graphics Component can be exploited remotely to gain privileges.
  4. An elevation of privilege vulnerability in PowerShell can be exploited remotely to gain privileges.
  5. A remote code execution vulnerability in Windows libarchive can be exploited remotely to execute arbitrary code.
  6. An elevation of privilege vulnerability in Windows Installer can be exploited remotely to gain privileges.
  7. An information disclosure vulnerability in Windows Authentication can be exploited remotely to obtain sensitive information.
  8. An elevation of privilege vulnerability in Kernel Streaming Service Driver can be exploited remotely to gain privileges.
  9. An elevation of privilege vulnerability in Win32k can be exploited remotely to gain privileges.
  10. A denial of service vulnerability in Windows Networking can be exploited remotely to cause denial of service.
  11. A spoofing vulnerability in Windows MSHTML Platform can be exploited remotely to spoof user interface.
  12. An elevation of privilege vulnerability in Windows Kerberos can be exploited remotely to gain privileges.
  13. A security feature bypass vulnerability in Windows Security Zone Mapping can be exploited remotely to bypass security restrictions.
  14. An elevation of privilege vulnerability in Windows Storage can be exploited remotely to gain privileges.
  15. A denial of service vulnerability in Windows Hyper-V can be exploited remotely to cause denial of service.
  16. A spoofing vulnerability in Windows Remote Desktop Licensing Service can be exploited remotely to spoof user interface.
  17. A security feature bypass vulnerability in Windows Mark of the Web can be exploited remotely to bypass security restrictions.
  18. An information disclosure vulnerability in Windows Remote Desktop Licensing Service can be exploited remotely to obtain sensitive information.
  19. A remote code execution vulnerability in Windows TCP/IP can be exploited remotely to execute arbitrary code.
  20. A denial of service vulnerability in Windows Standards-Based Storage Management Service can be exploited remotely to cause denial of service.
  21. An elevation of privilege vulnerability in Windows Setup and Deployment can be exploited remotely to gain privileges.
  22. An elevation of privilege vulnerability in Kernel Streaming WOW Thunk Service Driver can be exploited remotely to gain privileges.
  23. A denial of service vulnerability in Windows Remote Desktop Licensing Service can be exploited remotely to cause denial of service.
  24. An information disclosure vulnerability in Microsoft AllJoyn API can be exploited remotely to obtain sensitive information.
  25. A remote code execution vulnerability in Windows Network Address Translation (NAT) can be exploited remotely to execute arbitrary code.
  26. A remote code execution vulnerability in Microsoft Management Console can be exploited remotely to execute arbitrary code.
  27. A denial of service vulnerability in DHCP Server Service can be exploited remotely to cause denial of service.
  28. An elevation of privilege vulnerability in Windows Remote Access Connection Manager can be exploited remotely to gain privileges.
  29. An information disclosure vulnerability in Windows Kernel-Mode Driver can be exploited remotely to obtain sensitive information.
  30. A remote code execution vulnerability in Microsoft Windows Update can be exploited remotely to execute arbitrary code.
  31. An information disclosure vulnerability in Windows Networking can be exploited remotely to obtain sensitive information.

オリジナルアドバイザリー

エクスプロイテーション

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

関連製品

CVEリスト

  • CVE-2024-38250
    critical
  • CVE-2024-43454
    high
  • CVE-2024-38260
    critical
  • CVE-2024-38247
    critical
  • CVE-2024-38230
    critical
  • CVE-2024-38245
    critical
  • CVE-2024-38231
    critical
  • CVE-2024-38014
    critical
  • CVE-2024-43487
    high
  • CVE-2024-43461
    critical
  • CVE-2024-38236
    critical
  • CVE-2024-38240
    critical
  • CVE-2024-38239
    high
  • CVE-2024-38263
    critical
  • CVE-2024-30073
    critical
  • CVE-2024-38256
    high
  • CVE-2024-43455
    critical
  • CVE-2024-38217
    high
  • CVE-2024-38249
    critical
  • CVE-2024-38258
    critical
  • CVE-2024-43467
    critical
  • CVE-2024-38234
    high
  • CVE-2024-38252
    critical
  • CVE-2024-38046
    critical
  • CVE-2024-38253
    critical
  • CVE-2024-43495
    high
  • CVE-2024-38254
    high
  • CVE-2024-38242
    critical
  • CVE-2024-38246
    high
  • CVE-2024-38233
    critical
  • CVE-2024-38241
    critical
  • CVE-2024-38248
    high
  • CVE-2024-38243
    critical
  • CVE-2024-38235
    high
  • CVE-2024-38045
    critical
  • CVE-2024-21416
    critical
  • CVE-2024-38238
    critical
  • CVE-2024-43457
    critical
  • CVE-2024-38237
    critical
  • CVE-2024-38244
    critical
  • CVE-2024-38257
    critical
  • CVE-2024-38119
    critical
  • CVE-2024-38259
    critical
  • CVE-2024-38232
    critical
  • CVE-2024-43491
    critical
  • CVE-2024-43458
    critical

KBリスト

も参照してください

お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com

この脆弱性についての記述に不正確な点がありますか? お知らせください!
Kaspersky IT Security Calculator
も参照してください
新しいカスペルスキー
あなたのデジタルライフを守る
も参照してください
Do you want to save your changes?
Your message has been sent successfully.