Kaspersky ID:
KLA12024
Дата обнаружения:
08/12/2020
Обновлено:
25/01/2024

Описание

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, bypass security restrictions, execute arbitrary code.

Below is a complete list of vulnerabilities:

  1. An elevation of privilege vulnerability in Windows Cloud Files Mini Filter Driver can be exploited remotely to gain privileges.
  2. An elevation of privilege vulnerability in Windows Backup Engine can be exploited remotely to gain privileges.
  3. An information disclosure vulnerability in Windows SMB can be exploited remotely to obtain sensitive information.
  4. A security feature bypass vulnerability in Windows Lock Screen can be exploited remotely to bypass security restrictions.
  5. An information disclosure vulnerability in Windows GDI+ can be exploited remotely to obtain sensitive information.
  6. An elevation of privilege vulnerability in Windows Digital Media Receiver can be exploited remotely to gain privileges.
  7. A remote code execution vulnerability in Windows NTFS can be exploited remotely to execute arbitrary code.
  8. A remote code execution vulnerability in Hyper-V can be exploited remotely to execute arbitrary code.
  9. An information disclosure vulnerability in Windows Error Reporting can be exploited remotely to obtain sensitive information.
  10. An elevation of privilege vulnerability in Windows Network Connections Service can be exploited remotely to gain privileges.
  11. A security feature bypass vulnerability in Windows Overlay Filter can be exploited remotely to bypass security restrictions.
  12. An elevation of privilege vulnerability in DirectX Graphics Kernel can be exploited remotely to gain privileges.
  13. A security feature bypass vulnerability in Kerberos can be exploited remotely to bypass security restrictions.

Первичный источник обнаружения

Эксплуатация

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Связанные продукты

Список CVE

  • CVE-2020-17103
    high
  • CVE-2020-16964
    critical
  • CVE-2020-16960
    critical
  • CVE-2020-17140
    critical
  • CVE-2020-16962
    critical
  • CVE-2020-16963
    critical
  • CVE-2020-16961
    critical
  • CVE-2020-17099
    high
  • CVE-2020-17098
    high
  • CVE-2020-17097
    warning
  • CVE-2020-17096
    critical
  • CVE-2020-17095
    critical
  • CVE-2020-17094
    high
  • CVE-2020-17092
    critical
  • CVE-2020-17138
    high
  • CVE-2020-17139
    critical
  • CVE-2020-17134
    critical
  • CVE-2020-17136
    critical
  • CVE-2020-17137
    critical
  • CVE-2020-16996
    high
  • CVE-2020-16959
    critical
  • CVE-2020-16958
    critical

Список KB

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com

Нашли неточность в описании этой уязвимости? Дайте нам знать!
Узнай больше об угрозах и векторах атаки на Энциклопедии Kaspersky
Бесплатно
Читать
Kaspersky Premium
Комплексное решение для защиты вашей цифровой жизни
Премиум
Скачать
Confirm changes?
Your message has been sent successfully.