Kaspersky ID:
KLA12250
Дата обнаружения:
10/08/2021
Обновлено:
09/03/2022

Описание

Multiple vulnerabilities were found in Microsoft Products (Extended Security Update). Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface, cause denial of service.

Below is a complete list of vulnerabilities:

  1. A remote code execution vulnerability in Windows Graphics Component Font Parsing can be exploited remotely to execute arbitrary code.
  2. A remote code execution vulnerability in Windows TCP/IP can be exploited remotely to execute arbitrary code.
  3. An elevation of privilege vulnerability in Windows Bluetooth Driver can be exploited remotely to gain privileges.
  4. An elevation of privilege vulnerability in Windows Event Tracing can be exploited remotely to gain privileges.
  5. A remote code execution vulnerability in Windows Print Spooler can be exploited remotely to execute arbitrary code.
  6. An elevation of privilege vulnerability in Windows Print Spooler can be exploited remotely to gain privileges.
  7. A remote code execution vulnerability in Windows Media MPEG-4 Video Decoder can be exploited remotely to execute arbitrary code.
  8. A spoofing vulnerability in Windows LSA can be exploited remotely to spoof user interface.
  9. An elevation of privilege vulnerability in Windows User Profile Service can be exploited remotely to gain privileges.
  10. A remote code execution vulnerability in Remote Desktop Client can be exploited remotely to execute arbitrary code.
  11. An elevation of privilege vulnerability in Windows Digital TV Tuner device registration application can be exploited remotely to gain privileges.
  12. A memory corruption vulnerability in Scripting Engine can be exploited remotely to cause denial of service.

Первичный источник обнаружения

Эксплуатация

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Связанные продукты

Список CVE

  • CVE-2021-34533
    unknown
  • CVE-2021-26424
    unknown
  • CVE-2021-34537
    unknown
  • CVE-2021-26425
    unknown
  • CVE-2021-36936
    unknown
  • CVE-2021-34483
    unknown
  • CVE-2021-36937
    unknown
  • CVE-2021-36942
    unknown
  • CVE-2021-36947
    unknown
  • CVE-2021-34484
    unknown
  • CVE-2021-34535
    unknown
  • CVE-2021-36927
    unknown
  • CVE-2021-34480
    unknown

Список KB

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com

Нашли неточность в описании этой уязвимости? Дайте нам знать!
Узнай больше об угрозах и векторах атаки на Энциклопедии Kaspersky
Бесплатно
Читать
Kaspersky Premium
Комплексное решение для защиты вашей цифровой жизни
Премиум
Скачать
Confirm changes?
Your message has been sent successfully.