Kaspersky Threats

Описание

Multiple vulnerabilities were found in Microsoft Products (Extended Support Update). Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, execute arbitrary code, obtain sensitive information, bypass security restrictions.

Below is a complete list of vulnerabilities:

A denial of service vulnerability in Windows Hyper-V can be exploited remotely via specially crafted application to cause denial of service;
An elevation of privilege vulnerability in Win32k can be exploited remotely via specially crafted application to gain privileges;
A remote code execution vulnerability in Hyper-V can be exploited remotely via specially crafted application to execute arbitrary code;
An elevation of privilege vulnerability in Windows Installer can be exploited remotely to gain privileges;
A remote code execution vulnerability in Win32k Graphics can be exploited remotely via specially crafted embedded to execute arbitrary code;
An elevation of privilege vulnerability in Windows UPnP Service can be exploited remotely via specially crafted script to gain privileges;
A remote code execution vulnerability in Jet Database Engine can be exploited remotely via specially crafted file to execute arbitrary code;
An elevation of privilege vulnerability in Windows Graphics Component can be exploited remotely via specially crafted application to gain privileges;
A memory corruption vulnerability in Scripting Engine can be exploited remotely via specially crafted website to execute arbitrary code.
An information disclosure vulnerability in Windows Kernel can be exploited remotely via specially crafted application to obtain sensitive information;
A security feature bypass vulnerability in NetLogon can be exploited remotely to bypass security restrictions;
An elevation of privilege vulnerability in Windows can be exploited remotely via specially crafted application to gain privileges;
An information disclosure vulnerability in Windows Remote Procedure Call can be exploited remotely via specially crafted application to obtain sensitive information;
A denial of service vulnerability in Windows can be exploited remotely via specially crafted application to cause denial of service;
An elevation of privilege vulnerability in Microsoft ActiveX Installer Service can be exploited remotely via specially crafted application to gain privileges;
A security feature bypass vulnerability in Microsoft Windows can be exploited remotely via specially crafted authentication to bypass security restrictions;
A remote code execution vulnerability in Windows Hyper-V can be exploited remotely via specially crafted application to execute arbitrary code;
An elevation of privilege vulnerability in Windows Certificate Dialog can be exploited remotely via specially crafted application to gain privileges;
A remote code execution vulnerability in OpenType Font Parsing can be exploited remotely via specially crafted to execute arbitrary code;
An elevation of privilege vulnerability in Windows User Profile Service can be exploited remotely via specially crafted application to gain privileges;
An information disclosure vulnerability in Windows Modules Installer Service can be exploited remotely via specially crafted application to obtain sensitive information;
An information disclosure vulnerability in Windows GDI can be exploited remotely via specially crafted document to obtain sensitive information;
An information disclosure vulnerability in DirectWrite can be exploited remotely via specially crafted document to obtain sensitive information;
An information disclosure vulnerability in OpenType Font Driver can be exploited remotely via specially crafted fonts to obtain sensitive information;
A remote code execution vulnerability in VBScript can be exploited remotely via specially crafted website to execute arbitrary code.

Первичный источник обнаружения

Эксплуатация

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Связанные продукты

Список CVE

CVE-2019-1429
critical
CVE-2019-1390
critical
CVE-2019-1415
critical
CVE-2019-1411
high
CVE-2019-0712
high
CVE-2019-1424
critical
CVE-2019-1399
high
CVE-2019-1396
critical
CVE-2019-1395
critical
CVE-2019-1439
high
CVE-2019-1454
high
CVE-2018-12207
high
CVE-2019-1406
critical
CVE-2019-1382
high
CVE-2019-1391
high
CVE-2019-11135
high
CVE-2019-1394
critical
CVE-2019-1434
critical
CVE-2019-1433
critical
CVE-2019-1418
warning
CVE-2019-1432
high
CVE-2019-1409
high
CVE-2019-1389
critical
CVE-2019-1393
critical
CVE-2019-0719
critical
CVE-2019-1384
critical
CVE-2019-1441
critical
CVE-2019-1419
critical
CVE-2019-1408
critical
CVE-2019-1456
critical
CVE-2019-1412
high
CVE-2019-1397
critical
CVE-2019-1388
critical
CVE-2019-1405
critical
CVE-2019-1438
critical
CVE-2019-1435
critical
CVE-2019-1422
critical
CVE-2019-1407
critical

Список KB

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com

Нашли неточность в описании этой уязвимости? Дайте нам знать!