Kaspersky ID:
KLA12345
Дата обнаружения:
09/11/2021
Обновлено:
22/01/2024

Описание

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, execute arbitrary code, bypass security restrictions, cause denial of service.

Below is a complete list of vulnerabilities:

  1. An elevation of privilege vulnerability in Active Directory Domain Services can be exploited remotely to gain privileges.
  2. An elevation of privilege vulnerability in NTFS can be exploited remotely to gain privileges.
  3. An information disclosure vulnerability in Windows Remote Desktop Protocol (RDP) can be exploited remotely to obtain sensitive information.
  4. An information disclosure vulnerability in Remote Desktop Protocol Client can be exploited remotely to obtain sensitive information.
  5. A remote code execution vulnerability in Remote Desktop Client can be exploited remotely to execute arbitrary code.
  6. An elevation of privilege vulnerability in Windows Fast FAT File System Driver can be exploited remotely to gain privileges.
  7. An elevation of privilege vulnerability in Windows Installer can be exploited remotely to gain privileges.
  8. An elevation of privilege vulnerability in Windows Kernel can be exploited remotely to gain privileges.
  9. A remote code execution vulnerability in Microsoft COM for Windows can be exploited remotely to execute arbitrary code.
  10. A remote code execution vulnerability in Microsoft Virtual Machine Bus (VMBus) can be exploited remotely to execute arbitrary code.
  11. An elevation of privilege vulnerability in Windows Feedback Hub can be exploited remotely to gain privileges.
  12. A security feature bypass vulnerability in Windows Hello can be exploited remotely to bypass security restrictions.
  13. A remote code execution vulnerability in Microsoft Windows Media Foundation can be exploited remotely to execute arbitrary code.
  14. An elevation of privilege vulnerability in Windows Desktop Bridge can be exploited remotely to gain privileges.
  15. A memory corruption vulnerability in Chakra Scripting Engine can be exploited remotely to execute arbitrary code.
  16. A denial of service vulnerability in Windows Hyper-V can be exploited remotely to cause denial of service.
  17. An elevation of privilege vulnerability in Windows Core Shell SI Host Extension Framework for Composable Shell can be exploited remotely to gain privileges.
  18. A denial of service vulnerability in Windows Hyper-V Discrete Device Assignment (DDA) can be exploited remotely to cause denial of service.
  19. An elevation of privilege vulnerability in Diagnostics Hub Standard Collector can be exploited remotely to gain privileges.
  20. A remote code execution vulnerability in Windows NTFS can be exploited remotely to execute arbitrary code.
  21. A denial of service vulnerability in Windows can be exploited remotely to cause denial of service.
  22. An elevation of privilege vulnerability in Credential Security Support Provider Protocol (CredSSP) can be exploited remotely to gain privileges.

Первичный источник обнаружения

Эксплуатация

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Связанные продукты

Список CVE

  • CVE-2021-42282
    high
  • CVE-2021-41367
    warning
  • CVE-2021-41371
    warning
  • CVE-2021-38665
    warning
  • CVE-2021-38666
    high
  • CVE-2021-42291
    high
  • CVE-2021-42278
    high
  • CVE-2021-41377
    warning
  • CVE-2021-41379
    warning
  • CVE-2021-42285
    high
  • CVE-2021-42283
    warning
  • CVE-2021-42275
    high
  • CVE-2021-38631
    warning
  • CVE-2021-41370
    warning
  • CVE-2021-42287
    high
  • CVE-2021-26443
    critical
  • CVE-2021-42280
    warning
  • CVE-2021-42288
    warning
  • CVE-2021-42276
    high
  • CVE-2021-36957
    warning
  • CVE-2021-42279
    high
  • CVE-2021-42284
    high
  • CVE-2021-42286
    warning
  • CVE-2021-42274
    warning
  • CVE-2021-42277
    warning
  • CVE-2021-41378
    high
  • CVE-2021-41356
    warning
  • CVE-2021-41366
    warning

Список KB

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com

Нашли неточность в описании этой уязвимости? Дайте нам знать!
Узнай больше об угрозах и векторах атаки на Энциклопедии Kaspersky
Бесплатно
Читать
Kaspersky Premium
Комплексное решение для защиты вашей цифровой жизни
Премиум
Скачать
Confirm changes?
Your message has been sent successfully.