Продукты:
Для дома
Для малого бизнеса
Для среднего бизнеса
Для крупного бизнеса
Уязвимости Угрозы
Главная Уязвимости

Multiple vulnerabilities in Microsoft Windows

Kaspersky ID:
KLA12502
Дата обнаружения:
12/04/2022
Обновлено:
19/10/2024

Описание

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, cause denial of service, obtain sensitive information.

Below is a complete list of vulnerabilities:

  1. An elevation of privilege vulnerability in Connected User Experiences and Telemetry can be exploited remotely to gain privileges.
  2. A remote code execution vulnerability in Windows Hyper-V can be exploited remotely to execute arbitrary code.
  3. A denial of service vulnerability in Windows Cluster Shared Volume (CSV) can be exploited remotely to cause denial of service.
  4. A remote code execution vulnerability in Windows Fax Compose Form can be exploited remotely to execute arbitrary code.
  5. An information disclosure vulnerability in Windows Hyper-V Shared Virtual Hard Disks can be exploited remotely to obtain sensitive information.
  6. An elevation of privilege vulnerability in Windows Print Spooler can be exploited remotely to gain privileges.
  7. An elevation of privilege vulnerability in PowerShell can be exploited remotely to gain privileges.
  8. A remote code execution vulnerability in Win32 File Enumeration can be exploited remotely to execute arbitrary code.
  9. A remote code execution vulnerability in Windows DNS Server can be exploited remotely to execute arbitrary code.
  10. An elevation of privilege vulnerability in Cluster Client Failover (CCF) can be exploited remotely to gain privileges.
  11. Information disclosure vulnerability in Windows iSCSI Target Service can be exploited to obtain sensitive information.
  12. An information disclosure vulnerability in Windows Graphics Component can be exploited remotely to obtain sensitive information.
  13. A remote code execution vulnerability in Remote Desktop Protocol can be exploited remotely to execute arbitrary code.
  14. A remote code execution vulnerability in Windows Graphics Component can be exploited remotely to execute arbitrary code.
  15. A denial of service vulnerability in Windows Cluster Shared Volume (CSV) can be exploited remotely to cause denial of service.
  16. An elevation of privilege vulnerability in Windows Common Log File System Driver can be exploited remotely to gain privileges.
  17. A remote code execution vulnerability in Windows SMB can be exploited remotely to execute arbitrary code.
  18. A remote code execution vulnerability in Windows Server Service can be exploited remotely to execute arbitrary code.
  19. A remote code execution vulnerability in Windows Kerberos can be exploited remotely to execute arbitrary code.
  20. A remote code execution vulnerability in Windows Network File System can be exploited remotely to execute arbitrary code.
  21. A denial of service vulnerability in Windows Hyper-V can be exploited remotely to cause denial of service.
  22. An elevation of privilege vulnerability in Windows AppX Package Manager can be exploited remotely to gain privileges.
  23. A remote code execution vulnerability in Windows Upgrade Assistant can be exploited remotely to execute arbitrary code.
  24. A remote code execution vulnerability in Windows Stream Enumeration can be exploited remotely to execute arbitrary code.
  25. A denial of service vulnerability in Windows Secure Channel can be exploited remotely to cause denial of service.
  26. A remote code execution vulnerability in Win32 Stream Enumeration can be exploited remotely to execute arbitrary code.
  27. An elevation of privilege vulnerability in Windows Installer can be exploited remotely to gain privileges.
  28. A denial of service vulnerability in Windows LDAP can be exploited remotely to cause denial of service.
  29. An elevation of privilege vulnerability in Windows Win32k can be exploited remotely to gain privileges.
  30. A remote code execution vulnerability in Remote Procedure Call Runtime can be exploited remotely to execute arbitrary code.
  31. An elevation of privilege vulnerability in Windows Bluetooth Driver can be exploited remotely to gain privileges.
  32. An elevation of privilege vulnerability in Windows File Server Resource Management Service can be exploited remotely to gain privileges.
  33. A remote code execution vulnerability in Windows Local Security Authority (LSA) can be exploited remotely to execute arbitrary code.
  34. A remote code execution vulnerability in DiskUsage.exe can be exploited remotely to execute arbitrary code.
  35. An elevation of privilege vulnerability in Windows Desktop Bridge can be exploited remotely to gain privileges.
  36. An elevation of privilege vulnerability in Windows Ancillary Function Driver for WinSock can be exploited remotely to gain privileges.
  37. An information disclosure vulnerability in Windows Kernel can be exploited remotely to obtain sensitive information.
  38. A remote code execution vulnerability in HEVC Video Extensions can be exploited remotely to execute arbitrary code.
  39. An elevation of privilege vulnerability in Windows User Profile Service can be exploited remotely to gain privileges.
  40. A remote code execution vulnerability in Windows LDAP can be exploited remotely to execute arbitrary code.
  41. An elevation of privilege vulnerability in Windows File Explorer can be exploited remotely to gain privileges.
  42. An information disclosure vulnerability in Microsoft Local Security Authority (LSA) Server can be exploited remotely to obtain sensitive information.
  43. An elevation of privilege vulnerability in Local Security Authority (LSA) can be exploited remotely to gain privileges.
  44. An elevation of privilege vulnerability in Windows Work Folder Service can be exploited remotely to gain privileges.
  45. An elevation of privilege vulnerability in Windows DWM Core Library can be exploited remotely to gain privileges.
  46. An elevation of privilege vulnerability in Windows Kerberos can be exploited remotely to gain privileges.
  47. An elevation of privilege vulnerability in Windows Digital Media Receiver can be exploited remotely to gain privileges.
  48. An elevation of privilege vulnerability in Windows ALPC can be exploited remotely to gain privileges.
  49. A remote code execution vulnerability in Windows Direct Show can be exploited remotely to execute arbitrary code.
  50. An information disclosure vulnerability in Windows DNS Server can be exploited remotely to obtain sensitive information.
  51. An elevation of privilege vulnerability in Win32k can be exploited remotely to gain privileges.
  52. An elevation of privilege vulnerability in Windows Telephony Server can be exploited remotely to gain privileges.

Первичный источник обнаружения

Эксплуатация

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Связанные продукты

Список CVE

  • CVE-2022-24479
    critical
  • CVE-2022-23257
    critical
  • CVE-2022-26784
    high
  • CVE-2022-26917
    critical
  • CVE-2022-24539
    critical
  • CVE-2022-26803
    critical
  • CVE-2022-26788
    critical
  • CVE-2022-26791
    critical
  • CVE-2022-24485
    critical
  • CVE-2022-26789
    critical
  • CVE-2022-26825
    high
  • CVE-2022-26822
    high
  • CVE-2022-26802
    critical
  • CVE-2022-24489
    critical
  • CVE-2022-24498
    high
  • CVE-2022-26795
    critical
  • CVE-2022-26920
    high
  • CVE-2022-24536
    high
  • CVE-2022-26813
    high
  • CVE-2022-24533
    critical
  • CVE-2022-26903
    critical
  • CVE-2022-24538
    high
  • CVE-2022-26801
    critical
  • CVE-2022-24521
    critical
  • CVE-2022-24500
    critical
  • CVE-2022-24541
    critical
  • CVE-2022-26796
    critical
  • CVE-2022-24545
    critical
  • CVE-2022-26916
    critical
  • CVE-2022-26812
    high
  • CVE-2022-26793
    critical
  • CVE-2022-24491
    critical
  • CVE-2022-23268
    high
  • CVE-2022-26821
    high
  • CVE-2022-24549
    critical
  • CVE-2022-26818
    high
  • CVE-2022-24543
    critical
  • CVE-2022-21983
    critical
  • CVE-2022-24537
    critical
  • CVE-2022-26915
    critical
  • CVE-2022-26829
    high
  • CVE-2022-22008
    critical
  • CVE-2022-24534
    critical
  • CVE-2022-24499
    critical
  • CVE-2022-26831
    critical
  • CVE-2022-24542
    critical
  • CVE-2022-24528
    critical
  • CVE-2022-26828
    high
  • CVE-2022-26810
    critical
  • CVE-2022-24487
    critical
  • CVE-2022-26792
    critical
  • CVE-2022-26830
    critical
  • CVE-2022-26786
    critical
  • CVE-2022-24490
    critical
  • CVE-2022-26918
    critical
  • CVE-2022-24488
    critical
  • CVE-2022-26815
    high
  • CVE-2022-24494
    critical
  • CVE-2022-24483
    high
  • CVE-2022-24484
    high
  • CVE-2022-26814
    high
  • CVE-2022-24532
    critical
  • CVE-2022-26904
    high
  • CVE-2022-26819
    high
  • CVE-2022-26826
    high
  • CVE-2022-24492
    critical
  • CVE-2022-22009
    critical
  • CVE-2022-26809
    critical
  • CVE-2022-26919
    critical
  • CVE-2022-26808
    high
  • CVE-2022-24493
    high
  • CVE-2022-24496
    critical
  • CVE-2022-26785
    high
  • CVE-2022-26798
    critical
  • CVE-2022-26807
    high
  • CVE-2022-26783
    high
  • CVE-2022-26824
    high
  • CVE-2022-24530
    critical
  • CVE-2022-26787
    critical
  • CVE-2022-26817
    high
  • CVE-2022-26797
    critical
  • CVE-2022-24481
    critical
  • CVE-2022-24474
    critical
  • CVE-2022-24546
    critical
  • CVE-2022-24486
    critical
  • CVE-2022-26827
    high
  • CVE-2022-24547
    critical
  • CVE-2022-24544
    critical
  • CVE-2022-26823
    high
  • CVE-2022-24540
    high
  • CVE-2022-24495
    high
  • CVE-2022-26816
    high
  • CVE-2022-26790
    critical
  • CVE-2022-26914
    critical
  • CVE-2022-24550
    critical
  • CVE-2022-26794
    critical
  • CVE-2022-26811
    high
  • CVE-2022-26820
    high

Список KB

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com

Нашли неточность в описании этой уязвимости? Дайте нам знать!
Kaspersky IT Security Calculator:
Оцените ваш профиль кибербезопасности
Узнать больше
Встречай новый Kaspersky!
Каждая минута твоей онлайн-жизни заслуживает топовой защиты.
Узнать больше
Related articles
11 November 2024
Securelist
Ymir атакует: изучаем новый шифровальщик
06 November 2024
Securelist
Новый троянец SteelFox крадет конфиденциальные данные и криптовалюту
31 October 2024
Securelist
Непослушные нейросети и ленивые мошенники
29 October 2024
Securelist
Насущность снижения рисков: как оценка компрометации помогает укрепить киберзащиту
29 October 2024
Securelist
Lumma/Amadey: запусти шелл-код, чтобы доказать, что ты не робот
23 October 2024
Securelist
Криптовалютная игра от APT Lazarus: инвесторы против уязвимостей нулевого дня
Нашли неточность в описании этой уязвимости?
Если вы нашли новую угрозу или уязвимость, пожалуйста дайте нам знать по электронной почте:
newvirus@kaspersky.com
Нашли новую угрозу или уязвимость?
Если вы нашли новую угрозу или уязвимость, пожалуйста дайте нам знать по электронной почте:
newvirus@kaspersky.com
Продукты
Для дома
Для малого бизнеса
Для среднего бизнеса
Для крупного бизнеса
Select language
Sorting
Kaspersky ID
Уязвимость
Detect date
Уровень угрозы
Confirm changes?
Your message has been sent successfully.