Kaspersky ID:
KLA62824
Дата обнаружения:
09/01/2024
Обновлено:
02/04/2024

Описание

Multiple vulnerabilities were found in Microsoft Products (Extended Security Update). Malicious users can exploit these vulnerabilities to spoof user interface, obtain sensitive information, bypass security restrictions, gain privileges, cause denial of service, execute arbitrary code.

Below is a complete list of vulnerabilities:

  1. A spoofing vulnerability in Windows Themes can be exploited remotely to spoof user interface.
  2. An information disclosure vulnerability in MSMQC can be exploited remotely to obtain sensitive information.
  3. A security feature bypass vulnerability in Windows Kerberos can be exploited remotely to bypass security restrictions.
  4. An information disclosure vulnerability in Microsoft Local Security Authority Subsystem Service can be exploited remotely to obtain sensitive information.
  5. An information disclosure vulnerability in Windows TCP/IP can be exploited remotely to obtain sensitive information.
  6. A security feature bypass vulnerability in Windows HTML Platforms can be exploited remotely to bypass security restrictions.
  7. An elevation of privilege vulnerability in Windows Group Policy can be exploited remotely to gain privileges.
  8. An information disclosure vulnerability in Microsoft Message Queuing can be exploited remotely to obtain sensitive information.
  9. An information disclosure vulnerability in Windows Online Certificate Status Protocol (OCSP) can be exploited remotely to obtain sensitive information.
  10. A denial of service vulnerability in Microsoft Message Queuing can be exploited remotely to cause denial of service.
  11. An information disclosure vulnerability in Windows Themes can be exploited remotely to obtain sensitive information.
  12. An elevation of privilege vulnerability in Win32k can be exploited remotely to gain privileges.
  13. A remote code execution vulnerability in Microsoft ODBC Driver can be exploited remotely to execute arbitrary code.
  14. A remote code execution vulnerability in Remote Desktop Client can be exploited remotely to execute arbitrary code.
  15. An elevation of privilege vulnerability in Microsoft Common Log File System can be exploited remotely to gain privileges.
  16. An elevation of privilege vulnerability in Microsoft Virtual Hard Disk can be exploited remotely to gain privileges.
  17. A remote code execution vulnerability in Microsoft Online Certificate Status Protocol (OCSP) can be exploited remotely to execute arbitrary code.
  18. An information disclosure vulnerability in Windows Cryptographic Services can be exploited remotely to obtain sensitive information.
  19. A remote code execution vulnerability in Windows Cryptographic Services can be exploited remotely to execute arbitrary code.

Первичный источник обнаружения

Эксплуатация

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Связанные продукты

Список CVE

  • CVE-2024-21320
    high
  • CVE-2024-20680
    high
  • CVE-2024-20674
    critical
  • CVE-2024-20692
    high
  • CVE-2024-21313
    high
  • CVE-2024-20652
    critical
  • CVE-2024-20657
    high
  • CVE-2024-20660
    high
  • CVE-2024-20664
    high
  • CVE-2024-20662
    warning
  • CVE-2024-20661
    critical
  • CVE-2024-20691
    warning
  • CVE-2024-20683
    critical
  • CVE-2024-20654
    critical
  • CVE-2024-21307
    critical
  • CVE-2024-21314
    high
  • CVE-2024-20653
    critical
  • CVE-2024-20663
    high
  • CVE-2024-20658
    critical
  • CVE-2024-20655
    high
  • CVE-2024-21311
    high
  • CVE-2024-20682
    critical

Список KB

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com

Нашли неточность в описании этой уязвимости? Дайте нам знать!
Kaspersky IT Security Calculator:
Оцените ваш профиль кибербезопасности
Узнать больше
Встречай новый Kaspersky!
Каждая минута твоей онлайн-жизни заслуживает топовой защиты.
Узнать больше
Confirm changes?
Your message has been sent successfully.