Multiple vulnerabilities in Microsoft Windows

Описание

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface, cause denial of service, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in Windows Graphics Component Font Parsing can be exploited remotely to execute arbitrary code.
2. A remote code execution vulnerability in Windows TCP/IP can be exploited remotely to execute arbitrary code.
3. An elevation of privilege vulnerability in Windows Bluetooth Driver can be exploited remotely to gain privileges.
4. An elevation of privilege vulnerability in Windows Event Tracing can be exploited remotely to gain privileges.
5. A remote code execution vulnerability in Windows Print Spooler can be exploited remotely to execute arbitrary code.
6. An elevation of privilege vulnerability in Windows Print Spooler can be exploited remotely to gain privileges.
7. A remote code execution vulnerability in Windows Media MPEG-4 Video Decoder can be exploited remotely to execute arbitrary code.
8. A spoofing vulnerability in Windows LSA can be exploited remotely to spoof user interface.
9. An elevation of privilege vulnerability in Windows User Profile Service can be exploited remotely to gain privileges.
10. A remote code execution vulnerability in Remote Desktop Client can be exploited remotely to execute arbitrary code.
11. An elevation of privilege vulnerability in Windows Digital TV Tuner device registration application can be exploited remotely to gain privileges.
12. A memory corruption vulnerability in Scripting Engine can be exploited remotely to cause denial of service.
13. An elevation of privilege vulnerability in Windows Update Medic Service can be exploited remotely to gain privileges.
14. An information disclosure vulnerability in Windows Services for NFS ONCRPC XDR Driver can be exploited remotely to obtain sensitive information.
15. An elevation of privilege vulnerability in Windows 10 Update Assistant can be exploited remotely to gain privileges.
16. A remote code execution vulnerability in Windows Services for NFS ONCRPC XDR Driver can be exploited remotely to execute arbitrary code.
17. A remote code execution vulnerability in Windows Graphics Component can be exploited remotely to execute arbitrary code.
18. A remote code execution vulnerability in Windows MSHTML Platform can be exploited remotely to execute arbitrary code.
19. An elevation of privilege vulnerability in Windows Recovery Environment Agent can be exploited remotely to gain privileges.
20. An elevation of privilege vulnerability in Windows User Account Profile Picture can be exploited remotely to gain privileges.
21. An elevation of privilege vulnerability in Storage Spaces Controller can be exploited remotely to gain privileges.
22. An information disclosure vulnerability in Windows Cryptographic Primitives Library can be exploited remotely to obtain sensitive information.

Первичный источник обнаружения

• CVE-2021-36948
  CVE-2021-26424
  CVE-2021-26433
  CVE-2021-36945
  CVE-2021-26432
  CVE-2021-36926
  CVE-2021-36942
  CVE-2021-36947
  CVE-2021-34487
  CVE-2021-34530
  CVE-2021-34480
  CVE-2021-34534
  CVE-2021-36927
  CVE-2021-34486
  CVE-2021-36932
  CVE-2021-34533
  CVE-2021-34537
  CVE-2021-36937
  CVE-2021-36936
  CVE-2021-26425
  CVE-2021-34483
  CVE-2021-26431
  CVE-2021-26426
  CVE-2021-34536
  CVE-2021-34484
  CVE-2021-34535
  CVE-2021-36933
  CVE-2021-36938
  

Эксплуатация

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Связанные продукты

• Microsoft-Windows
• Microsoft-Windows-Server
• Microsoft-Windows-Server-2012
• Microsoft-Windows-8
• Microsoft-Windows-7
• Microsoft-Windows-Server-2008
• Windows-RT
• Microsoft-Windows-10

Список CVE

• CVE-2021-34533
  high
• CVE-2021-26424
  high
• CVE-2021-34537
  high
• CVE-2021-26425
  warning
• CVE-2021-36936
  critical
• CVE-2021-34483
  warning
• CVE-2021-36937
  high
• CVE-2021-36942
  warning
• CVE-2021-36947
  high
• CVE-2021-34484
  warning
• CVE-2021-34535
  high
• CVE-2021-36927
  warning
• CVE-2021-34480
  high
• CVE-2021-36948
  warning
• CVE-2021-26433
  warning
• CVE-2021-36945
  high
• CVE-2021-26432
  critical
• CVE-2021-36926
  warning
• CVE-2021-34487
  warning
• CVE-2021-34530
  high
• CVE-2021-34534
  high
• CVE-2021-34486
  warning
• CVE-2021-36932
  warning
• CVE-2021-26431
  warning
• CVE-2021-26426
  warning
• CVE-2021-34536
  warning
• CVE-2021-36933
  warning
• CVE-2021-36938
  warning

Список KB

• 4023814
• 5005036
• 5005031
• 5005033
• 5005030
• 5005106
• 5005040
• 5005099
• 5005043
• 5005076
• 5005094
• 5011535
• 5011564
• 5011560
• 5011527

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com