Kaspersky Threats

Описание

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information, cause denial of service, bypass security restrictions.

Below is a complete list of vulnerabilities:

A remote code execution vulnerability in Windows DHCP Server can be exploited remotely via specially crafted packets to execute arbitrary code.
A remote code execution vulnerability in DirectWrite can be exploited remotely via specially crafted document to execute arbitrary code.
An elevation of privilege vulnerability in Windows can be exploited remotely via specially crafted application to gain privileges.
An elevation of privilege vulnerability in Windows Audio Service can be exploited remotely via specially crafted application to gain privileges.
An elevation of privilege vulnerability in DirectX can be exploited remotely via specially crafted application to gain privileges.
An information disclosure vulnerability in DirectWrite can be exploited remotely via specially crafted document to obtain sensitive information.
An information disclosure vulnerability in Remote Desktop Protocol Client can be exploited remotely via specially crafted application to obtain sensitive information.
An elevation of privilege vulnerability in Windows RPCSS can be exploited remotely via specially crafted application to gain privileges.
An information disclosure vulnerability in Windows GDI can be exploited remotely via specially crafted document to obtain sensitive information.
An information disclosure vulnerability in Microsoft unistore.dll can be exploited remotely via specially crafted application to obtain sensitive information.
An information disclosure vulnerability in Win32k can be exploited remotely via specially crafted application to obtain sensitive information.
An elevation of privilege vulnerability in Microsoft splwow64 can be exploited remotely to gain privileges.
Security bypass vulnerabulity in Windows Communication Foundation can be exploited remotely to gain privileges.
An information disclosure vulnerability in Windows Kernel can be exploited remotely via specially crafted application to obtain sensitive information.
A denial of service vulnerability in SymCrypt can be exploited remotely via specially crafted digital to cause denial of service.
An elevation of privilege vulnerability in Windows Error Reporting can be exploited remotely to gain privileges.
A denial of service vulnerability in Windows Hyper-V can be exploited remotely via specially crafted application to cause denial of service.
A remote code execution vulnerability in GDI+ can be exploited remotely via specially crafted website to execute arbitrary code.
An elevation of privilege vulnerability in Windows WLAN Service can be exploited remotely via specially crafted application to gain privileges.
A denial of service vulnerability in Windows DNS Server can be exploited remotely to cause denial of service.
A remote code execution vulnerability in Remote Desktop Services can be exploited remotely to execute arbitrary code.
An elevation of privilege vulnerability in Windows dnsrlvr.dll can be exploited remotely via specially crafted application to gain privileges.
An elevation of privilege vulnerability in Microsoft Windows can be exploited remotely to gain privileges.
A security feature bypass vulnerability in ADFS can be exploited remotely via specially crafted application to bypass security restrictions.
A security feature bypass vulnerability in ADFS can be exploited remotely to bypass security restrictions.
An elevation of privilege vulnerability in Windows Kernel can be exploited remotely via specially crafted application to gain privileges.

Первичный источник обнаружения

Эксплуатация

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Связанные продукты

Список CVE

CVE-2019-0785
critical
CVE-2019-1120
critical
CVE-2019-1130
high
CVE-2019-1127
critical
CVE-2019-1086
warning
CVE-2019-1128
critical
CVE-2019-0999
high
CVE-2019-1129
high
CVE-2019-1093
warning
CVE-2019-1108
warning
CVE-2019-1097
warning
CVE-2019-1087
warning
CVE-2019-1123
critical
CVE-2019-1089
high
CVE-2019-1095
warning
CVE-2019-1124
critical
CVE-2019-1091
warning
CVE-2019-1096
warning
CVE-2019-0880
warning
CVE-2019-1006
warning
CVE-2019-1117
critical
CVE-2019-1088
warning
CVE-2019-1071
warning
CVE-2019-1121
critical
CVE-2019-1094
warning
CVE-2019-1119
critical
CVE-2019-1122
critical
CVE-2019-0865
warning
CVE-2019-1037
high
CVE-2019-0966
high
CVE-2019-1102
critical
CVE-2019-1118
critical
CVE-2019-1085
warning
CVE-2019-0811
warning
CVE-2019-0887
critical
CVE-2019-1090
high
CVE-2019-1074
warning
CVE-2019-1073
warning
CVE-2019-1126
warning
CVE-2019-1082
high
CVE-2019-0975
high
CVE-2019-1067
high

Список KB

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com

Нашли неточность в описании этой уязвимости? Дайте нам знать!