Multiple vulnerabilities in Microsoft Windows

Описание

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, bypass security restrictions, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in Diagnostic Hub Standard Collector can be exploited remotely via specially crafted application to gain privileges.
2. An elevation of privilege vulnerability in DirectX Graphics Kernel can be exploited remotely via specially crafted application to gain privileges.
3. A remote code execution vulnerability in Windows Shell can be exploited remotely via specially crafted file to execute arbitrary code.
4. A remote code execution vulnerability in LNK can be exploited remotely to execute arbitrary code.
5. A remote code execution vulnerability in Microsoft COM for Windows can be exploited remotely via specially crafted file to execute arbitrary code.
6. A security feature bypass vulnerability in ADFS can be exploited remotely via specially crafted authentication to bypass security restrictions.
7. An information disclosure vulnerability in Windows GDI can be exploited remotely via specially crafted document to obtain sensitive information.
8. A security feature bypass vulnerability in Device Guard Code Integrity Policy can be exploited remotely to bypass security restrictions.
9. An information disclosure vulnerability in Windows Kernel can be exploited remotely via specially crafted application to obtain sensitive information.
10. An elevation of privilege vulnerability in Windows Kernel can be exploited remotely via specially crafted application to gain privileges.
11. An elevation of privilege vulnerability in Windows Installer can be exploited remotely to gain privileges.
12. An elevation of privilege vulnerability in Windows NDIS can be exploited remotely via specially crafted application to gain privileges.
13. A remote code execution vulnerability in Windows PDF can be exploited remotely via specially crafted website to execute arbitrary code.
14. An elevation of privilege vulnerability in Win32k can be exploited remotely via specially crafted application to gain privileges.
15. An elevation of privilege vulnerability in Microsoft Cortana can be exploited remotely to gain privileges.
16. A remote code execution vulnerability in Microsoft Graphics can be exploited remotely via specially crafted embedded to execute arbitrary code.

Первичный источник обнаружения

• CVE-2018-8343
  CVE-2018-8399
  CVE-2018-8401
  CVE-2018-8200
  CVE-2018-0952
  CVE-2018-8400
  CVE-2018-8398
  CVE-2018-8404
  CVE-2018-8344
  CVE-2018-8348
  CVE-2018-8339
  CVE-2018-8394
  CVE-2018-8345
  CVE-2018-8253
  CVE-2018-8341
  CVE-2018-8349
  CVE-2018-8350
  CVE-2018-8340
  CVE-2018-8204
  CVE-2018-8414
  CVE-2018-8347
  CVE-2018-8405
  CVE-2018-8406
  ADV180018
  

Эксплуатация

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Связанные продукты

• Microsoft-Visual-Studio
• Microsoft-Windows
• Microsoft-Windows-Server
• Microsoft-Windows-Server-2012
• Microsoft-Windows-8
• Microsoft-Windows-7
• Microsoft-Windows-Server-2008
• Windows-RT
• Microsoft-Windows-10

Список CVE

• CVE-2018-0952
  critical
• CVE-2018-8405
  critical
• CVE-2018-8414
  critical
• CVE-2018-8345
  critical
• CVE-2018-8349
  critical
• CVE-2018-8401
  critical
• CVE-2018-8340
  high
• CVE-2018-8398
  high
• CVE-2018-8204
  high
• CVE-2018-8406
  critical
• CVE-2018-8348
  warning
• CVE-2018-8347
  critical
• CVE-2018-8339
  high
• CVE-2018-8343
  critical
• CVE-2018-8400
  critical
• CVE-2018-8394
  high
• CVE-2018-8350
  critical
• CVE-2018-8404
  high
• CVE-2018-8399
  high
• CVE-2018-8253
  warning
• CVE-2018-8341
  warning
• CVE-2018-8200
  high
• CVE-2018-8344
  critical

Список KB

• 4343909
• 4343885
• 4343887
• 4343892
• 4343897
• 4343898
• 4343901
• 4343888
• 4343896

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com