Multiple vulnerabilities in Microsoft Products (ESU)

Описание

Multiple vulnerabilities were found in Microsoft Products (Extended Security Update). Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service, execute arbitrary code, gain privileges, bypass security restrictions.

Below is a complete list of vulnerabilities:

1. An information disclosure vulnerability in Windows Common Log File System Driver can be exploited remotely to obtain sensitive information.
2. A denial of service vulnerability in Windows Media Center Update can be exploited remotely to cause denial of service.
3. A remote code execution vulnerability in Remote Desktop Client can be exploited remotely to execute arbitrary code.
4. An elevation of privilege vulnerability in Windows Installer can be exploited remotely to gain privileges.
5. An elevation of privilege vulnerability in Windows Security Support Provider Interface can be exploited remotely to gain privileges.
6. An elevation of privilege vulnerability in Windows Fast FAT File System Driver can be exploited remotely to gain privileges.
7. An information disclosure vulnerability in Remote Desktop Protocol Client can be exploited remotely to obtain sensitive information.
8. A security feature bypass vulnerability in Windows HTML Platforms can be exploited remotely to bypass security restrictions.
9. An information disclosure vulnerability in Windows NT Lan Manager Datagram Receiver Driver can be exploited remotely to obtain sensitive information.
10. An elevation of privilege vulnerability in Windows NT OS Kernel can be exploited remotely to gain privileges.
11. A denial of service vulnerability in Point-to-Point Tunneling Protocol can be exploited remotely to cause denial of service.
12. An elevation of privilege vulnerability in Windows ALPC can be exploited remotely to gain privileges.
13. An elevation of privilege vulnerability in Windows Fax and Scan Service can be exploited remotely to gain privileges.
14. An elevation of privilege vulnerability in Windows PDEV can be exploited remotely to gain privileges.
15. An elevation of privilege vulnerability in Windows Inking COM can be exploited remotely to gain privileges.

Первичный источник обнаружения

• CVE-2022-23281
  CVE-2022-21973
  CVE-2022-23285
  CVE-2022-23296
  CVE-2022-24454
  CVE-2022-23293
  CVE-2022-24503
  CVE-2022-24502
  CVE-2022-23297
  CVE-2022-23298
  CVE-2022-23253
  CVE-2022-23283
  CVE-2022-24459
  CVE-2022-21990
  CVE-2022-23299
  CVE-2022-23290
  

Эксплуатация

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Связанные продукты

• Microsoft-Windows
• Microsoft-Windows-Server
• Microsoft-Windows-Server-2012
• Microsoft-Windows-8
• Microsoft-Windows-7
• Microsoft-Windows-Server-2008
• Windows-RT
• Microsoft-Windows-10
• Microsoft-Windows-Server-2016
• Microsoft-Windows-Server-2019

Список CVE

• CVE-2022-23281
  high
• CVE-2022-21973
  high
• CVE-2022-23285
  critical
• CVE-2022-23296
  critical
• CVE-2022-24454
  critical
• CVE-2022-23293
  critical
• CVE-2022-24503
  high
• CVE-2022-24502
  warning
• CVE-2022-23297
  high
• CVE-2022-23298
  high
• CVE-2022-23253
  high
• CVE-2022-23283
  high
• CVE-2022-24459
  critical
• CVE-2022-21990
  critical
• CVE-2022-23299
  critical
• CVE-2022-23290
  critical

Список KB

• 5011525
• 5011534
• 5011552
• 5011529
• 5011486

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com