Multiple vulnerabilities in Microsoft Windows

Описание

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, execute arbitrary code, bypass security restrictions, cause denial of service.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in Active Directory Domain Services can be exploited remotely to gain privileges.
2. An elevation of privilege vulnerability in NTFS can be exploited remotely to gain privileges.
3. An information disclosure vulnerability in Windows Remote Desktop Protocol (RDP) can be exploited remotely to obtain sensitive information.
4. An information disclosure vulnerability in Remote Desktop Protocol Client can be exploited remotely to obtain sensitive information.
5. A remote code execution vulnerability in Remote Desktop Client can be exploited remotely to execute arbitrary code.
6. An elevation of privilege vulnerability in Windows Fast FAT File System Driver can be exploited remotely to gain privileges.
7. An elevation of privilege vulnerability in Windows Installer can be exploited remotely to gain privileges.
8. An elevation of privilege vulnerability in Windows Kernel can be exploited remotely to gain privileges.
9. A remote code execution vulnerability in Microsoft COM for Windows can be exploited remotely to execute arbitrary code.
10. A remote code execution vulnerability in Microsoft Virtual Machine Bus (VMBus) can be exploited remotely to execute arbitrary code.
11. An elevation of privilege vulnerability in Windows Feedback Hub can be exploited remotely to gain privileges.
12. A security feature bypass vulnerability in Windows Hello can be exploited remotely to bypass security restrictions.
13. A remote code execution vulnerability in Microsoft Windows Media Foundation can be exploited remotely to execute arbitrary code.
14. An elevation of privilege vulnerability in Windows Desktop Bridge can be exploited remotely to gain privileges.
15. A memory corruption vulnerability in Chakra Scripting Engine can be exploited remotely to execute arbitrary code.
16. A denial of service vulnerability in Windows Hyper-V can be exploited remotely to cause denial of service.
17. An elevation of privilege vulnerability in Windows Core Shell SI Host Extension Framework for Composable Shell can be exploited remotely to gain privileges.
18. A denial of service vulnerability in Windows Hyper-V Discrete Device Assignment (DDA) can be exploited remotely to cause denial of service.
19. An elevation of privilege vulnerability in Diagnostics Hub Standard Collector can be exploited remotely to gain privileges.
20. A remote code execution vulnerability in Windows NTFS can be exploited remotely to execute arbitrary code.
21. A denial of service vulnerability in Windows can be exploited remotely to cause denial of service.
22. An elevation of privilege vulnerability in Credential Security Support Provider Protocol (CredSSP) can be exploited remotely to gain privileges.

Первичный источник обнаружения

• CVE-2021-42282
  CVE-2021-41367
  CVE-2021-41371
  CVE-2021-38665
  CVE-2021-38666
  CVE-2021-42291
  CVE-2021-42278
  CVE-2021-41377
  CVE-2021-41379
  CVE-2021-42285
  CVE-2021-42283
  CVE-2021-42275
  CVE-2021-38631
  CVE-2021-41370
  CVE-2021-42287
  CVE-2021-26443
  CVE-2021-42280
  CVE-2021-42288
  CVE-2021-42276
  CVE-2021-36957
  CVE-2021-42279
  CVE-2021-42284
  CVE-2021-42286
  CVE-2021-42274
  CVE-2021-42277
  CVE-2021-41378
  CVE-2021-41356
  CVE-2021-41366
  CVE-2021-41366
  CVE-2021-42284
  

Эксплуатация

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Связанные продукты

• Microsoft-Windows
• Microsoft-Windows-Server
• Microsoft-Windows-8
• Windows-RT
• Microsoft-Windows-10
• Microsoft-Windows-Server-2016
• Microsoft-Windows-Server-2019
• Microsoft-Windows-11
• Microsoft-Remote-Desktop

Список CVE

• CVE-2021-42282
  critical
• CVE-2021-41367
  critical
• CVE-2021-41371
  warning
• CVE-2021-38665
  high
• CVE-2021-38666
  critical
• CVE-2021-42291
  critical
• CVE-2021-42278
  critical
• CVE-2021-41377
  critical
• CVE-2021-41379
  critical
• CVE-2021-42285
  critical
• CVE-2021-42283
  critical
• CVE-2021-42275
  critical
• CVE-2021-38631
  warning
• CVE-2021-41370
  critical
• CVE-2021-42287
  critical
• CVE-2021-26443
  critical
• CVE-2021-42280
  critical
• CVE-2021-42288
  high
• CVE-2021-42276
  critical
• CVE-2021-36957
  critical
• CVE-2021-42279
  critical
• CVE-2021-42284
  critical
• CVE-2021-42286
  critical
• CVE-2021-42274
  high
• CVE-2021-42277
  critical
• CVE-2021-41378
  critical
• CVE-2021-41356
  critical
• CVE-2021-41366
  critical

Список KB

• 5007255
• 5007206
• 5007207
• 5007186
• 5007192
• 5007215
• 5007205
• 5007247
• 5007189

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com