Описание
Multiple vulnerabilities were found in Microsoft Products (Extended Support Update). Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, cause denial of service, bypass security restrictions.
Below is a complete list of vulnerabilities:
- An information disclosure vulnerability in Microsoft Graphics Component can be exploited remotely via specially crafted application to obtain sensitive information.
- A remote code execution vulnerability in Windows OLE can be exploited remotely via specially crafted file to execute arbitrary code.
- An elevation of privilege vulnerability in Windows WalletService can be exploited remotely via specially crafted application to gain privileges.
- An information disclosure vulnerability in Windows GDI can be exploited remotely via specially crafted document to obtain sensitive information.
- A remote code execution vulnerability in Windows SMB can be exploited remotely via specially crafted packet to execute arbitrary code.
- A remote code execution vulnerability in VBScript can be exploited remotely via specially crafted website to execute arbitrary code.
- An elevation of privilege vulnerability in Win32k can be exploited remotely via specially crafted application to gain privileges.
- An elevation of privilege vulnerability in Windows Kernel can be exploited remotely via specially crafted application to gain privileges.
- An information disclosure vulnerability in Windows Error Reporting can be exploited remotely via specially crafted application to obtain sensitive information.
- A remote code execution vulnerability in Jet Database Engine can be exploited remotely via specially crafted file to execute arbitrary code.
- A remote code execution vulnerability in Windows can be exploited remotely via specially crafted cabinet to execute arbitrary code.
- An elevation of privilege vulnerability in Windows Print Configuration can be exploited remotely via specially crafted application to gain privileges.
- A denial of service vulnerability in Windows Registry can be exploited remotely via specially crafted application to cause denial of service.
- A remote code execution vulnerability in LNK can be exploited remotely to execute arbitrary code.
- An elevation of privilege vulnerability in Windows Network Connections Service can be exploited remotely via specially crafted application to gain privileges.
- An elevation of privilege vulnerability in Group Policy can be exploited remotely via specially crafted application to gain privileges.
- A memory corruption vulnerability in Media Foundation can be exploited remotely via specially crafted document to execute arbitrary code.
- An elevation of privilege vulnerability in Windows Text Service Framework can be exploited remotely via specially crafted application to gain privileges.
- An information disclosure vulnerability in Internet Explorer can be exploited remotely via specially crafted content to obtain sensitive information.
- An elevation of privilege vulnerability in OLE Automation can be exploited remotely via specially crafted application to gain privileges.
- An elevation of privilege vulnerability in Component Object Model can be exploited remotely via specially crafted application to bypass security restrictions.
- An elevation of privilege vulnerability in Windows Background Intelligent Transfer Service can be exploited remotely via specially crafted request to gain privileges.
- An elevation of privilege vulnerability in Windows Modules Installer Service can be exploited remotely to gain privileges.
- An elevation of privilege vulnerability in Windows Backup Service can be exploited remotely via specially crafted application to gain privileges.
- An elevation of privilege vulnerability in Windows WLAN Service can be exploited remotely via specially crafted application to gain privileges.
- An elevation of privilege vulnerability in Windows Installer can be exploited remotely to gain privileges.
Первичный источник обнаружения
- CVE-2020-1160
CVE-2020-1281
CVE-2020-1287
CVE-2020-1348
CVE-2020-1301
CVE-2020-1260
CVE-2020-1207
CVE-2020-1262
CVE-2020-1263
CVE-2020-1246
CVE-2020-1247
CVE-2020-1208
CVE-2020-1300
CVE-2020-1196
CVE-2020-1194
CVE-2020-1299
CVE-2020-1291
CVE-2020-1317
CVE-2020-1239
CVE-2020-1214
CVE-2020-1236
CVE-2020-1230
CVE-2020-1314
CVE-2020-1315
CVE-2020-1213
CVE-2020-1212
CVE-2020-1215
CVE-2020-1311
CVE-2020-1216
CVE-2020-1255
CVE-2020-1254
CVE-2020-1271
CVE-2020-1270
CVE-2020-1251
CVE-2020-1253
CVE-2020-1272
CVE-2020-1302
Эксплуатация
Public exploits exist for this vulnerability.
Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.
Связанные продукты
- Microsoft-Internet-Explorer
- Microsoft-Windows
- Microsoft-Windows-Server
- Microsoft-Windows-Server-2012
- Microsoft-Windows-8
- Microsoft-Windows-7
- Microsoft-Windows-Server-2008
- Windows-RT
- Microsoft-Windows-10
Список CVE
- CVE-2020-1160 high
- CVE-2020-1281 critical
- CVE-2020-1287 critical
- CVE-2020-1348 high
- CVE-2020-1301 critical
- CVE-2020-1260 critical
- CVE-2020-1207 critical
- CVE-2020-1262 critical
- CVE-2020-1263 high
- CVE-2020-1246 critical
- CVE-2020-1247 critical
- CVE-2020-1208 critical
- CVE-2020-1300 critical
- CVE-2020-1196 critical
- CVE-2020-1194 high
- CVE-2020-1299 critical
- CVE-2020-1291 critical
- CVE-2020-1317 critical
- CVE-2020-1239 critical
- CVE-2020-1214 critical
- CVE-2020-1236 critical
- CVE-2020-1230 critical
- CVE-2020-1314 critical
- CVE-2020-1315 high
- CVE-2020-1213 critical
- CVE-2020-1212 critical
- CVE-2020-1215 critical
- CVE-2020-1311 critical
- CVE-2020-1216 critical
- CVE-2020-1255 critical
- CVE-2020-1254 critical
- CVE-2020-1271 critical
- CVE-2020-1270 critical
- CVE-2020-1251 high
- CVE-2020-1253 high
- CVE-2020-1272 critical
- CVE-2020-1302 critical
Список KB
Смотрите также
Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com
Нашли неточность в описании этой уязвимости? Дайте нам знать!