Kaspersky ID:
KLA12259
Дата обнаружения:
10/08/2021
Обновлено:
31/03/2025

Описание

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface, cause denial of service, obtain sensitive information.

Below is a complete list of vulnerabilities:

  1. A remote code execution vulnerability in Windows Graphics Component Font Parsing can be exploited remotely to execute arbitrary code.
  2. A remote code execution vulnerability in Windows TCP/IP can be exploited remotely to execute arbitrary code.
  3. An elevation of privilege vulnerability in Windows Bluetooth Driver can be exploited remotely to gain privileges.
  4. An elevation of privilege vulnerability in Windows Event Tracing can be exploited remotely to gain privileges.
  5. A remote code execution vulnerability in Windows Print Spooler can be exploited remotely to execute arbitrary code.
  6. An elevation of privilege vulnerability in Windows Print Spooler can be exploited remotely to gain privileges.
  7. A remote code execution vulnerability in Windows Media MPEG-4 Video Decoder can be exploited remotely to execute arbitrary code.
  8. A spoofing vulnerability in Windows LSA can be exploited remotely to spoof user interface.
  9. An elevation of privilege vulnerability in Windows User Profile Service can be exploited remotely to gain privileges.
  10. A remote code execution vulnerability in Remote Desktop Client can be exploited remotely to execute arbitrary code.
  11. An elevation of privilege vulnerability in Windows Digital TV Tuner device registration application can be exploited remotely to gain privileges.
  12. A memory corruption vulnerability in Scripting Engine can be exploited remotely to cause denial of service.
  13. An elevation of privilege vulnerability in Windows Update Medic Service can be exploited remotely to gain privileges.
  14. An information disclosure vulnerability in Windows Services for NFS ONCRPC XDR Driver can be exploited remotely to obtain sensitive information.
  15. An elevation of privilege vulnerability in Windows 10 Update Assistant can be exploited remotely to gain privileges.
  16. A remote code execution vulnerability in Windows Services for NFS ONCRPC XDR Driver can be exploited remotely to execute arbitrary code.
  17. A remote code execution vulnerability in Windows Graphics Component can be exploited remotely to execute arbitrary code.
  18. A remote code execution vulnerability in Windows MSHTML Platform can be exploited remotely to execute arbitrary code.
  19. An elevation of privilege vulnerability in Windows Recovery Environment Agent can be exploited remotely to gain privileges.
  20. An elevation of privilege vulnerability in Windows User Account Profile Picture can be exploited remotely to gain privileges.
  21. An elevation of privilege vulnerability in Storage Spaces Controller can be exploited remotely to gain privileges.
  22. An information disclosure vulnerability in Windows Cryptographic Primitives Library can be exploited remotely to obtain sensitive information.

Первичный источник обнаружения

Эксплуатация

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Связанные продукты

Список CVE

  • CVE-2021-34533
    critical
  • CVE-2021-26424
    critical
  • CVE-2021-34537
    critical
  • CVE-2021-26425
    critical
  • CVE-2021-36936
    critical
  • CVE-2021-34483
    critical
  • CVE-2021-36937
    critical
  • CVE-2021-36942
    critical
  • CVE-2021-36947
    critical
  • CVE-2021-34484
    critical
  • CVE-2021-34535
    critical
  • CVE-2021-36927
    critical
  • CVE-2021-34480
    critical
  • CVE-2021-36948
    critical
  • CVE-2021-26433
    critical
  • CVE-2021-36945
    critical
  • CVE-2021-26432
    critical
  • CVE-2021-36926
    critical
  • CVE-2021-34487
    critical
  • CVE-2021-34530
    critical
  • CVE-2021-34534
    critical
  • CVE-2021-34486
    critical
  • CVE-2021-36932
    critical
  • CVE-2021-26431
    critical
  • CVE-2021-26426
    critical
  • CVE-2021-34536
    critical
  • CVE-2021-36933
    critical
  • CVE-2021-36938
    high

Список KB

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com

Нашли неточность в описании этой уязвимости? Дайте нам знать!
Kaspersky IT Security Calculator:
Оцените ваш профиль кибербезопасности
Узнать больше
Встречай новый Kaspersky!
Каждая минута твоей онлайн-жизни заслуживает топовой защиты.
Узнать больше
Confirm changes?
Your message has been sent successfully.