Описание
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface, cause denial of service, obtain sensitive information.
Below is a complete list of vulnerabilities:
- A remote code execution vulnerability in Windows Graphics Component Font Parsing can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in Windows TCP/IP can be exploited remotely to execute arbitrary code.
- An elevation of privilege vulnerability in Windows Bluetooth Driver can be exploited remotely to gain privileges.
- An elevation of privilege vulnerability in Windows Event Tracing can be exploited remotely to gain privileges.
- A remote code execution vulnerability in Windows Print Spooler can be exploited remotely to execute arbitrary code.
- An elevation of privilege vulnerability in Windows Print Spooler can be exploited remotely to gain privileges.
- A remote code execution vulnerability in Windows Media MPEG-4 Video Decoder can be exploited remotely to execute arbitrary code.
- A spoofing vulnerability in Windows LSA can be exploited remotely to spoof user interface.
- An elevation of privilege vulnerability in Windows User Profile Service can be exploited remotely to gain privileges.
- A remote code execution vulnerability in Remote Desktop Client can be exploited remotely to execute arbitrary code.
- An elevation of privilege vulnerability in Windows Digital TV Tuner device registration application can be exploited remotely to gain privileges.
- A memory corruption vulnerability in Scripting Engine can be exploited remotely to cause denial of service.
- An elevation of privilege vulnerability in Windows Update Medic Service can be exploited remotely to gain privileges.
- An information disclosure vulnerability in Windows Services for NFS ONCRPC XDR Driver can be exploited remotely to obtain sensitive information.
- An elevation of privilege vulnerability in Windows 10 Update Assistant can be exploited remotely to gain privileges.
- A remote code execution vulnerability in Windows Services for NFS ONCRPC XDR Driver can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in Windows Graphics Component can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in Windows MSHTML Platform can be exploited remotely to execute arbitrary code.
- An elevation of privilege vulnerability in Windows Recovery Environment Agent can be exploited remotely to gain privileges.
- An elevation of privilege vulnerability in Windows User Account Profile Picture can be exploited remotely to gain privileges.
- An elevation of privilege vulnerability in Storage Spaces Controller can be exploited remotely to gain privileges.
- An information disclosure vulnerability in Windows Cryptographic Primitives Library can be exploited remotely to obtain sensitive information.
Первичный источник обнаружения
- CVE-2021-36948
CVE-2021-26424
CVE-2021-26433
CVE-2021-36945
CVE-2021-26432
CVE-2021-36926
CVE-2021-36942
CVE-2021-36947
CVE-2021-34487
CVE-2021-34530
CVE-2021-34480
CVE-2021-34534
CVE-2021-36927
CVE-2021-34486
CVE-2021-36932
CVE-2021-34533
CVE-2021-34537
CVE-2021-36937
CVE-2021-36936
CVE-2021-26425
CVE-2021-34483
CVE-2021-26431
CVE-2021-26426
CVE-2021-34536
CVE-2021-34484
CVE-2021-34535
CVE-2021-36933
CVE-2021-36938
Эксплуатация
Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.
Связанные продукты
- Microsoft-Windows
- Microsoft-Windows-Server
- Microsoft-Windows-Server-2012
- Microsoft-Windows-8
- Microsoft-Windows-7
- Microsoft-Windows-Server-2008
- Windows-RT
- Microsoft-Windows-10
Список CVE
- CVE-2021-34533 critical
- CVE-2021-26424 critical
- CVE-2021-34537 critical
- CVE-2021-26425 critical
- CVE-2021-36936 critical
- CVE-2021-34483 critical
- CVE-2021-36937 critical
- CVE-2021-36942 critical
- CVE-2021-36947 critical
- CVE-2021-34484 critical
- CVE-2021-34535 critical
- CVE-2021-36927 critical
- CVE-2021-34480 critical
- CVE-2021-36948 critical
- CVE-2021-26433 critical
- CVE-2021-36945 critical
- CVE-2021-26432 critical
- CVE-2021-36926 critical
- CVE-2021-34487 critical
- CVE-2021-34530 critical
- CVE-2021-34534 critical
- CVE-2021-34486 critical
- CVE-2021-36932 critical
- CVE-2021-26431 critical
- CVE-2021-26426 critical
- CVE-2021-34536 critical
- CVE-2021-36933 critical
- CVE-2021-36938 high
Список KB
- 4023814
- 5005036
- 5005031
- 5005033
- 5005030
- 5005106
- 5005040
- 5005099
- 5005043
- 5005076
- 5005094
- 5011535
- 5011564
- 5011560
- 5011527
Смотрите также
Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com
Нашли неточность в описании этой уязвимости? Дайте нам знать!