Kaspersky Threats

Описание

Multiple vulnerabilities were found in Microsoft Products (Extended Support Update). Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, cause denial of service, bypass security restrictions.

Below is a complete list of vulnerabilities:

An information disclosure vulnerability in Microsoft Graphics Component can be exploited remotely via specially crafted application to obtain sensitive information.
A remote code execution vulnerability in Windows OLE can be exploited remotely via specially crafted file to execute arbitrary code.
An elevation of privilege vulnerability in Windows WalletService can be exploited remotely via specially crafted application to gain privileges.
An information disclosure vulnerability in Windows GDI can be exploited remotely via specially crafted document to obtain sensitive information.
A remote code execution vulnerability in Windows SMB can be exploited remotely via specially crafted packet to execute arbitrary code.
A remote code execution vulnerability in VBScript can be exploited remotely via specially crafted website to execute arbitrary code.
An elevation of privilege vulnerability in Win32k can be exploited remotely via specially crafted application to gain privileges.
An elevation of privilege vulnerability in Windows Kernel can be exploited remotely via specially crafted application to gain privileges.
An information disclosure vulnerability in Windows Error Reporting can be exploited remotely via specially crafted application to obtain sensitive information.
A remote code execution vulnerability in Jet Database Engine can be exploited remotely via specially crafted file to execute arbitrary code.
A remote code execution vulnerability in Windows can be exploited remotely via specially crafted cabinet to execute arbitrary code.
An elevation of privilege vulnerability in Windows Print Configuration can be exploited remotely via specially crafted application to gain privileges.
A denial of service vulnerability in Windows Registry can be exploited remotely via specially crafted application to cause denial of service.
A remote code execution vulnerability in LNK can be exploited remotely to execute arbitrary code.
An elevation of privilege vulnerability in Windows Network Connections Service can be exploited remotely via specially crafted application to gain privileges.
An elevation of privilege vulnerability in Group Policy can be exploited remotely via specially crafted application to gain privileges.
A memory corruption vulnerability in Media Foundation can be exploited remotely via specially crafted document to execute arbitrary code.
An elevation of privilege vulnerability in Windows Text Service Framework can be exploited remotely via specially crafted application to gain privileges.
An information disclosure vulnerability in Internet Explorer can be exploited remotely via specially crafted content to obtain sensitive information.
An elevation of privilege vulnerability in OLE Automation can be exploited remotely via specially crafted application to gain privileges.
An elevation of privilege vulnerability in Component Object Model can be exploited remotely via specially crafted application to bypass security restrictions.
An elevation of privilege vulnerability in Windows Background Intelligent Transfer Service can be exploited remotely via specially crafted request to gain privileges.
An elevation of privilege vulnerability in Windows Modules Installer Service can be exploited remotely to gain privileges.
An elevation of privilege vulnerability in Windows Backup Service can be exploited remotely via specially crafted application to gain privileges.
An elevation of privilege vulnerability in Windows WLAN Service can be exploited remotely via specially crafted application to gain privileges.
An elevation of privilege vulnerability in Windows Installer can be exploited remotely to gain privileges.

Первичный источник обнаружения

Эксплуатация

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Связанные продукты

Список CVE

CVE-2020-1160
warning
CVE-2020-1281
high
CVE-2020-1287
high
CVE-2020-1348
warning
CVE-2020-1301
high
CVE-2020-1260
critical
CVE-2020-1207
high
CVE-2020-1262
high
CVE-2020-1263
warning
CVE-2020-1246
high
CVE-2020-1247
high
CVE-2020-1208
critical
CVE-2020-1300
high
CVE-2020-1196
warning
CVE-2020-1194
warning
CVE-2020-1299
critical
CVE-2020-1291
high
CVE-2020-1317
critical
CVE-2020-1239
high
CVE-2020-1214
critical
CVE-2020-1236
critical
CVE-2020-1230
critical
CVE-2020-1314
high
CVE-2020-1315
warning
CVE-2020-1213
critical
CVE-2020-1212
high
CVE-2020-1215
critical
CVE-2020-1311
high
CVE-2020-1216
critical
CVE-2020-1255
high
CVE-2020-1254
high
CVE-2020-1271
warning
CVE-2020-1270
warning
CVE-2020-1251
high
CVE-2020-1253
high
CVE-2020-1272
high
CVE-2020-1302
warning

Список KB

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com

Нашли неточность в описании этой уязвимости? Дайте нам знать!