Kaspersky ID:
KLA12457
Дата обнаружения:
08/02/2022
Обновлено:
22/01/2024

Описание

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, execute arbitrary code, cause denial of service.

Below is a complete list of vulnerabilities:

  1. An elevation of privilege vulnerability in Windows Print Spooler can be exploited remotely to gain privileges.
  2. An information disclosure vulnerability in Windows Common Log File System Driver can be exploited remotely to obtain sensitive information.
  3. A remote code execution vulnerability in HEVC Video Extensions can be exploited remotely to execute arbitrary code.
  4. An elevation of privilege vulnerability in Windows Remote Access Connection Manager can be exploited remotely to gain privileges.
  5. An elevation of privilege vulnerability in Windows Common Log File System Driver can be exploited remotely to gain privileges.
  6. An elevation of privilege vulnerability in Named Pipe File System can be exploited remotely to gain privileges.
  7. A remote code execution vulnerability in Windows Hyper-V can be exploited remotely to execute arbitrary code.
  8. A denial of service vulnerability in Windows Common Log File System Driver can be exploited remotely to cause denial of service.
  9. An elevation of privilege vulnerability in Windows DWM Core Library can be exploited remotely to gain privileges.
  10. A remote code execution vulnerability in Roaming Security Rights Management Services can be exploited remotely to execute arbitrary code.
  11. A denial of service vulnerability in Windows User Account Profile Picture can be exploited remotely to cause denial of service.
  12. An elevation of privilege vulnerability in Win32k can be exploited remotely to gain privileges.
  13. A remote code execution vulnerability in Windows Mobile Device Management can be exploited remotely to execute arbitrary code.
  14. An information disclosure vulnerability in Windows Remote Access Connection Manager can be exploited remotely to obtain sensitive information.
  15. A denial of service vulnerability in Windows Hyper-V can be exploited remotely to cause denial of service.
  16. A remote code execution vulnerability in Windows Runtime can be exploited remotely to execute arbitrary code.
  17. A remote code execution vulnerability in Windows DNS Server can be exploited remotely to execute arbitrary code.
  18. An information disclosure vulnerability in Windows Services for NFS ONCRPC XDR Driver can be exploited remotely to obtain sensitive information.
  19. An elevation of privilege vulnerability in Windows Kernel can be exploited remotely to gain privileges.
  20. A remote code execution vulnerability in VP9 Video Extensions can be exploited remotely to execute arbitrary code.

Первичный источник обнаружения

Эксплуатация

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Связанные продукты

Список CVE

  • CVE-2022-22717
    high
  • CVE-2022-21998
    warning
  • CVE-2022-22718
    high
  • CVE-2022-21926
    high
  • CVE-2022-22001
    high
  • CVE-2022-21981
    warning
  • CVE-2022-22715
    high
  • CVE-2022-21995
    high
  • CVE-2022-22710
    warning
  • CVE-2022-21994
    high
  • CVE-2022-21974
    critical
  • CVE-2022-21927
    high
  • CVE-2022-22002
    warning
  • CVE-2022-21997
    warning
  • CVE-2022-21996
    high
  • CVE-2022-21992
    critical
  • CVE-2022-21985
    warning
  • CVE-2022-22712
    warning
  • CVE-2022-21971
    critical
  • CVE-2022-21844
    high
  • CVE-2022-21984
    high
  • CVE-2022-21999
    warning
  • CVE-2022-21993
    critical
  • CVE-2022-21989
    high
  • CVE-2022-22709
    high
  • CVE-2022-22000
    high

Список KB

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com

Нашли неточность в описании этой уязвимости? Дайте нам знать!
Kaspersky IT Security Calculator:
Оцените ваш профиль кибербезопасности
Узнать больше
Встречай новый Kaspersky!
Каждая минута твоей онлайн-жизни заслуживает топовой защиты.
Узнать больше
Confirm changes?
Your message has been sent successfully.