KLA11048
Multiple vulnerabilities in Windows Kernel

Multiple serious vulnerabilities have been found in Microsoft Windows kernel. Malicious users can exploit these vulnerabilities to obtain sensitive information and gain privileges.

Below is a complete list of vulnerabilities:

1. An improper handling of objects in memory can be exploited locally via a specially designed application to gain privileges;
2. Multiple vulnerabilities related to an improper handling of memory addresses can be exploited locally via a specially designed application to obtain sensitive information;
3. Multiple vulnerabilities related to an incorrect handling of objects in memory done by the Windows kernel-mode driver can be exploited locally via a specially designed application to gain privileges;
4. Multiple vulnerabilities related to an improper initialization of objects in memory can be exploited locally via a specialy designed application to obtain sensitive information;
5. An improper handling of objects in memory related to proper enforcement of VTLs (virtual trust levels) can be exploited locally via a specially designed application to gain privileges.

Technical details

Vulnerabilities (2) occur in case the Windows kernel fails to initialize a memory adress in a proper way and can cause security bypass called KASLR (Kernel Address Space Layout Randomization) bypass.

NB: Not every vulnerability already have CVSS rating so cumulative CVSS rating can be not representative.

Microsoft Windows 7 Service Pack 1
Microsoft Windows RT 8.1
Microsoft Windows 8.1 
Microsoft Windows 10 
Microsoft Windows Server 2008 Pack 2
Microsoft Windows Server 2008 R2 Service Pack 1
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Microsoft Windows Server 2016

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

4022719
4022726
4022714
4022724
4022727
4022715
4022725
4022722
4022717
4022718
4022013
4022887
4034741

The following public exploits exists for this vulnerability:

https://www.exploit-db.com/exploits/42232

https://www.exploit-db.com/exploits/42219

https://www.exploit-db.com/exploits/42228

https://www.exploit-db.com/exploits/42231

https://www.exploit-db.com/exploits/42229

https://www.exploit-db.com/exploits/42233

https://www.exploit-db.com/exploits/42213

https://www.exploit-db.com/exploits/42244

https://www.exploit-db.com/exploits/42215

https://www.exploit-db.com/exploits/42230

https://www.exploit-db.com/exploits/42218

https://www.exploit-db.com/exploits/42220

https://www.exploit-db.com/exploits/42216

https://www.exploit-db.com/exploits/42214

https://www.exploit-db.com/exploits/42210

https://www.exploit-db.com/exploits/42242

https://www.exploit-db.com/exploits/42217