Multiple vulnerabilities in Microsoft Windows

Описание

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, execute arbitrary code, spoof user interface, cause denial of service.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in Diagnostic Hub Standard Collector can be exploited remotely via specially crafted application to gain privileges.
2. An elevation of privilege vulnerability in Diagnostics Hub Standard Collector can be exploited remotely to gain privileges.
3. An elevation of privilege vulnerability in Windows Installer can be exploited to gain privileges.
4. An elevation of privilege vulnerability in Windows Update Orchestrator Service can be exploited remotely via specially crafted application to gain privileges.
5. An elevation of privilege vulnerability in Windows Installer can be exploited remotely to gain privileges.
6. An information disclosure vulnerability in Windows Modules Installer Service can be exploited remotely via specially crafted application to obtain sensitive information.
7. An elevation of privilege vulnerability in Win32k can be exploited remotely via specially crafted application to gain privileges.
8. An elevation of privilege vulnerability in Windows Mobile Device Management Diagnostics can be exploited remotely via specially crafted application to gain privileges.
9. An elevation of privilege vulnerability in Windows Device Setup Manager can be exploited to gain privileges.
10. An elevation of privilege vulnerability exists in Windows Search Indexer can be exploited to gain privileges.
11. An elevation of privilege vulnerability in Windows ALPC can be exploited remotely via specially crafted application to gain privileges.
12. An information disclosure vulnerability in Windows Imaging Component can be exploited to obtain sensitive information.
13. An elevation of privilege vulnerability in Windows Graphics Component can be exploited remotely via specially crafted application to gain privileges.
14. An information disclosure vulnerability in Windows GDI can be exploited remotely via specially crafted application to obtain sensitive information.
15. An information disclosure vulnerability in Windows Network Connections Service can be exploited remotely via specially crafted application to obtain sensitive information.
16. A memory corruption vulnerability in Media Foundation can be exploited remotely via specially crafted document to execute arbitrary code.
17. An elevation of privilege vulnerability in Windows can be exploited remotely via specially crafted application to gain privileges.
18. An elevation of privilege vulnerability in Windows Background Intelligent Transfer Service can be exploited remotely via specially crafted application to gain privileges.
19. An elevation of privilege vulnerability in Windows Hard Link can be exploited remotely via specially crafted application to gain privileges.
20. A tampering vulnerability in Microsoft IIS Server can be exploited remotely to spoof user interface.
21. An elevation of privilege vulnerability in Windows Defender Security Center can be exploited remotely to gain privileges.
22. An elevation of privilege vulnerability in Windows Defender Security Center can be exploited remotely via specially crafted command to gain privileges.
23. An elevation of privilege vulnerability in Windows Network List Service can be exploited remotely via specially crafted application to gain privileges.
24. An elevation of privilege vulnerability in Windows Universal Plug and Play (UPnP) service can be exploited to gain privileges.
25. An elevation of privilege vulnerability in Windows UPnP Service can be exploited remotely via specially crafted script to gain privileges.
26. An information disclosure vulnerability in Windows GDI can be exploited remotely via specially crafted document to obtain sensitive information.
27. An elevation of privilege vulnerability in Windows User Profile Service can be exploited remotely via specially crafted application to gain privileges.
28. A denial of service vulnerability in Windows Tile Object Service can be exploited remotely via specially crafted application to cause denial of service.
29. An elevation of privilege vulnerability in Windows CSC Service can be exploited remotely via specially crafted application to gain privileges.
30. An elevation of privilege vulnerability in Windows Work Folder Service can be exploited remotely via specially crafted application to gain privileges.
31. A remote code execution vulnerability in LNK can be exploited remotely to execute arbitrary code.
32. An elevation of privilege vulnerability in Windows Network Connections Service can be exploited remotely via specially crafted application to gain privileges.
33. An elevation of privilege vulnerability in Windows Error Reporting can be exploited remotely via specially crafted application to gain privileges.
34. An information disclosure vulnerability in Media Foundation can be exploited remotely via specially crafted application to obtain sensitive information.
35. An elevation of privilege vulnerability in Windows Language Pack Installer can be exploited remotely via specially crafted application to gain privileges.
36. An elevation of privilege vulnerability in Provisioning Runtime can be exploited remotely to gain privileges.
37. An elevation of privilege vulnerability in Windows ActiveX Installer Service can be exploited remotely via specially crafted application to gain privileges.
38. An information disclosure vulnerability in Connected User Experiences and Telemetry Service can be exploited remotely via specially crafted application to obtain sensitive information.
39. An elevation of privilege vulnerability in Connected User Experiences and Telemetry Service can be exploited remotely via specially crafted application to gain privileges.
40. An information disclosure vulnerability in Windows Graphics Component can be exploited remotely via specially crafted document to obtain sensitive information.
41. A remote code execution vulnerability in GDI+ can be exploited remotely via specially crafted website to execute arbitrary code.
42. An information disclosure vulnerability in Windows Error Reporting can be exploited remotely via specially crafted application to obtain sensitive information.
43. An information disclosure vulnerability in Win32k can be exploited remotely via specially crafted application to obtain sensitive information.
44. An elevation of privilege vulnerability in Windows Kernel can be exploited remotely via specially crafted application to gain privileges.
45. An elevation of privilege vulnerability in DirectX can be exploited remotely via specially crafted application to gain privileges.
46. An information disclosure vulnerability in Windows Network Driver Interface Specification (NDIS) can be exploited remotely via specially crafted application to obtain sensitive information.

Microsoft is aware of a remote code execution vulnerability in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target SMB Server or SMB Client.

To exploit the vulnerability against an SMB Server, an unauthenticated attacker could send a specially crafted packet to a targeted SMBv3 Server. To exploit the vulnerability against an SMB Client, an unauthenticated attacker would need to configure a malicious SMBv3 Server and convince a user to connect to it.

Первичный источник обнаружения

• CVE-2020-0810
  CVE-2020-0867
  CVE-2020-0814
  CVE-2020-0859
  CVE-2020-0788
  CVE-2020-0854
  CVE-2020-0834
  CVE-2020-0898
  CVE-2020-0877
  CVE-2020-0874
  CVE-2020-0871
  CVE-2020-0869
  CVE-2020-0858
  CVE-2020-0787
  CVE-2020-0849
  CVE-2020-0896
  CVE-2020-0879
  CVE-2020-0645
  CVE-2020-0763
  CVE-2020-0780
  CVE-2020-0783
  CVE-2020-0882
  CVE-2020-0785
  CVE-2020-0786
  CVE-2020-0769
  CVE-2020-0864
  CVE-2020-0684
  CVE-2020-0774
  CVE-2020-0897
  CVE-2020-0845
  CVE-2020-0807
  CVE-2020-0806
  CVE-2020-0804
  CVE-2020-0803
  CVE-2020-0802
  CVE-2020-0801
  CVE-2020-0800
  CVE-2020-0820
  CVE-2020-0822
  CVE-2020-0809
  CVE-2020-0808
  CVE-2020-0865
  CVE-2020-0842
  CVE-2020-0841
  CVE-2020-0840
  CVE-2020-0843
  CVE-2020-0860
  CVE-2020-0863
  CVE-2020-0844
  CVE-2020-0887
  CVE-2020-0885
  CVE-2020-0883
  CVE-2020-0868
  CVE-2020-0881
  CVE-2020-0880
  CVE-2020-0775
  CVE-2020-0876
  CVE-2020-0777
  CVE-2020-0776
  CVE-2020-0771
  CVE-2020-0799
  CVE-2020-0773
  CVE-2020-0798
  CVE-2020-0797
  CVE-2020-0772
  CVE-2020-0793
  CVE-2020-0778
  CVE-2020-0791
  CVE-2020-0690
  CVE-2020-0866
  CVE-2020-0770
  CVE-2020-0861
  CVE-2020-0779
  CVE-2020-0819
  CVE-2020-0857
  CVE-2020-0853
  CVE-2020-0762
  CVE-2020-0781
  ADV200005
  

Эксплуатация

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Связанные продукты

• Microsoft-Visual-Studio
• Microsoft-Windows
• Microsoft-Windows-Server
• Microsoft-Windows-Server-2012
• Microsoft-Windows-8
• Microsoft-Windows-7
• Microsoft-Windows-Server-2008
• Windows-RT
• Microsoft-Windows-10

Список CVE

• CVE-2020-0810
  critical
• CVE-2020-0793
  critical
• CVE-2020-0779
  high
• CVE-2020-0867
  critical
• CVE-2020-0814
  critical
• CVE-2020-0859
  high
• CVE-2020-0788
  critical
• CVE-2020-0854
  high
• CVE-2020-0819
  critical
• CVE-2020-0857
  critical
• CVE-2020-0834
  critical
• CVE-2020-0853
  high
• CVE-2020-0898
  critical
• CVE-2020-0877
  critical
• CVE-2020-0874
  high
• CVE-2020-0871
  high
• CVE-2020-0869
  critical
• CVE-2020-0858
  critical
• CVE-2020-0787
  critical
• CVE-2020-0849
  critical
• CVE-2020-0896
  critical
• CVE-2020-0879
  high
• CVE-2020-0645
  critical
• CVE-2020-0762
  critical
• CVE-2020-0763
  critical
• CVE-2020-0780
  critical
• CVE-2020-0781
  critical
• CVE-2020-0783
  critical
• CVE-2020-0882
  high
• CVE-2020-0785
  high
• CVE-2020-0786
  high
• CVE-2020-0769
  critical
• CVE-2020-0864
  critical
• CVE-2020-0684
  critical
• CVE-2020-0774
  high
• CVE-2020-0897
  critical
• CVE-2020-0845
  critical
• CVE-2020-0807
  critical
• CVE-2020-0806
  critical
• CVE-2020-0804
  critical
• CVE-2020-0803
  critical
• CVE-2020-0802
  critical
• CVE-2020-0801
  critical
• CVE-2020-0800
  critical
• CVE-2020-0820
  high
• CVE-2020-0822
  critical
• CVE-2020-0809
  critical
• CVE-2020-0808
  critical
• CVE-2020-0865
  critical
• CVE-2020-0842
  critical
• CVE-2020-0841
  critical
• CVE-2020-0840
  critical
• CVE-2020-0843
  critical
• CVE-2020-0860
  critical
• CVE-2020-0863
  high
• CVE-2020-0844
  critical
• CVE-2020-0887
  critical
• CVE-2020-0885
  warning
• CVE-2020-0883
  critical
• CVE-2020-0868
  critical
• CVE-2020-0881
  critical
• CVE-2020-0880
  high
• CVE-2020-0775
  high
• CVE-2020-0876
  critical
• CVE-2020-0777
  critical
• CVE-2020-0776
  critical
• CVE-2020-0771
  critical
• CVE-2020-0799
  critical
• CVE-2020-0773
  critical
• CVE-2020-0798
  critical
• CVE-2020-0797
  critical
• CVE-2020-0772
  critical
• CVE-2020-0778
  critical
• CVE-2020-0791
  critical
• CVE-2020-0690
  critical
• CVE-2020-0866
  critical
• CVE-2020-0770
  critical
• CVE-2020-0861
  critical

Список KB

• 4538461
• 4541510
• 4540689
• 4541509
• 4540681
• 4540693
• 4540673
• 4540670
• 4540694
• 4541505
• 4560960
• 4557957
• 4561602
• 4561608
• 4561621

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com