Multiple vulnerabilities in Microsoft Windows

Описание

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information, cause denial of service, bypass security restrictions.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in Windows DHCP Server can be exploited remotely via specially crafted packets to execute arbitrary code.
2. A remote code execution vulnerability in DirectWrite can be exploited remotely via specially crafted document to execute arbitrary code.
3. An elevation of privilege vulnerability in Windows can be exploited remotely via specially crafted application to gain privileges.
4. An elevation of privilege vulnerability in Windows Audio Service can be exploited remotely via specially crafted application to gain privileges.
5. An elevation of privilege vulnerability in DirectX can be exploited remotely via specially crafted application to gain privileges.
6. An information disclosure vulnerability in DirectWrite can be exploited remotely via specially crafted document to obtain sensitive information.
7. An information disclosure vulnerability in Remote Desktop Protocol Client can be exploited remotely via specially crafted application to obtain sensitive information.
8. An elevation of privilege vulnerability in Windows RPCSS can be exploited remotely via specially crafted application to gain privileges.
9. An information disclosure vulnerability in Windows GDI can be exploited remotely via specially crafted document to obtain sensitive information.
10. An information disclosure vulnerability in Microsoft unistore.dll can be exploited remotely via specially crafted application to obtain sensitive information.
11. An information disclosure vulnerability in Win32k can be exploited remotely via specially crafted application to obtain sensitive information.
12. An elevation of privilege vulnerability in Microsoft splwow64 can be exploited remotely to gain privileges.
13. Security bypass vulnerabulity in Windows Communication Foundation can be exploited remotely to gain privileges.
14. An information disclosure vulnerability in Windows Kernel can be exploited remotely via specially crafted application to obtain sensitive information.
15. A denial of service vulnerability in SymCrypt can be exploited remotely via specially crafted digital to cause denial of service.
16. An elevation of privilege vulnerability in Windows Error Reporting can be exploited remotely to gain privileges.
17. A denial of service vulnerability in Windows Hyper-V can be exploited remotely via specially crafted application to cause denial of service.
18. A remote code execution vulnerability in GDI+ can be exploited remotely via specially crafted website to execute arbitrary code.
19. An elevation of privilege vulnerability in Windows WLAN Service can be exploited remotely via specially crafted application to gain privileges.
20. A denial of service vulnerability in Windows DNS Server can be exploited remotely to cause denial of service.
21. A remote code execution vulnerability in Remote Desktop Services can be exploited remotely to execute arbitrary code.
22. An elevation of privilege vulnerability in Windows dnsrlvr.dll can be exploited remotely via specially crafted application to gain privileges.
23. An elevation of privilege vulnerability in Microsoft Windows can be exploited remotely to gain privileges.
24. A security feature bypass vulnerability in ADFS can be exploited remotely via specially crafted application to bypass security restrictions.
25. A security feature bypass vulnerability in ADFS can be exploited remotely to bypass security restrictions.
26. An elevation of privilege vulnerability in Windows Kernel can be exploited remotely via specially crafted application to gain privileges.

Первичный источник обнаружения

• CVE-2019-1120
  CVE-2019-1121
  CVE-2019-1086
  CVE-2019-1096
  CVE-2019-1089
  CVE-2019-1130
  CVE-2019-1087
  CVE-2019-1037
  CVE-2019-1090
  CVE-2019-0880
  CVE-2019-1085
  CVE-2019-1006
  CVE-2019-0785
  CVE-2019-1108
  CVE-2019-0865
  CVE-2019-1095
  CVE-2019-1129
  CVE-2019-1082
  CVE-2019-0999
  CVE-2019-1126
  CVE-2019-1071
  CVE-2019-1094
  CVE-2019-1122
  CVE-2019-1091
  CVE-2019-1117
  CVE-2019-0966
  CVE-2019-1074
  CVE-2019-1127
  CVE-2019-1102
  CVE-2019-1119
  CVE-2019-0975
  CVE-2019-1093
  CVE-2019-1124
  CVE-2019-1128
  CVE-2019-1123
  CVE-2019-1073
  CVE-2019-0887
  CVE-2019-1097
  CVE-2019-0811
  CVE-2019-1088
  CVE-2019-1067
  CVE-2019-1118
  

Эксплуатация

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Связанные продукты

• Microsoft-Windows-Server-2012
• Microsoft-Windows-8
• Microsoft-Windows-7
• Microsoft-Windows-Server-2008
• Microsoft-Windows-10

Список CVE

• CVE-2019-0785
  critical
• CVE-2019-1120
  critical
• CVE-2019-1130
  critical
• CVE-2019-1127
  critical
• CVE-2019-1086
  critical
• CVE-2019-1128
  critical
• CVE-2019-0999
  critical
• CVE-2019-1129
  critical
• CVE-2019-1093
  high
• CVE-2019-1108
  high
• CVE-2019-1097
  high
• CVE-2019-1087
  critical
• CVE-2019-1123
  critical
• CVE-2019-1089
  critical
• CVE-2019-1095
  high
• CVE-2019-1124
  critical
• CVE-2019-1091
  high
• CVE-2019-1096
  high
• CVE-2019-0880
  critical
• CVE-2019-1006
  critical
• CVE-2019-1117
  critical
• CVE-2019-1088
  critical
• CVE-2019-1071
  high
• CVE-2019-1121
  critical
• CVE-2019-1094
  high
• CVE-2019-1119
  critical
• CVE-2019-1122
  critical
• CVE-2019-0865
  critical
• CVE-2019-1037
  high
• CVE-2019-0966
  high
• CVE-2019-1102
  critical
• CVE-2019-1118
  critical
• CVE-2019-1085
  critical
• CVE-2019-0811
  critical
• CVE-2019-0887
  critical
• CVE-2019-1090
  critical
• CVE-2019-1074
  high
• CVE-2019-1073
  high
• CVE-2019-1126
  high
• CVE-2019-1082
  critical
• CVE-2019-0975
  high
• CVE-2019-1067
  critical

Список KB

• 4507464
• 4507460
• 4507457
• 4507448
• 4507453
• 4507469
• 4507435
• 4507462
• 4507455
• 4507458
• 4507450
• 5008223
• 5008215

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com