Описание
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, bypass security restrictions, execute arbitrary code, cause denial of service, spoof user interface.
Below is a complete list of vulnerabilities:
- An elevation of privilege vulnerability in Win32k can be exploited remotely to gain privileges.
- An information disclosure vulnerability in Windows TCP/IP can be exploited remotely to obtain sensitive information.
- A security feature bypass vulnerability in Hypervisor-Protected Code Integrity (HVCI) can be exploited remotely to bypass security restrictions.
- A security feature bypass vulnerability in Windows HTML Platforms can be exploited remotely to bypass security restrictions.
- An information disclosure vulnerability in Microsoft Message Queuing can be exploited remotely to obtain sensitive information.
- An elevation of privilege vulnerability in Windows Cloud Files Mini Filter Driver can be exploited remotely to gain privileges.
- An information disclosure vulnerability in Windows Online Certificate Status Protocol (OCSP) can be exploited remotely to obtain sensitive information.
- A remote code execution vulnerability in Microsoft Printer Metadata Troubleshooter Tool can be exploited remotely to execute arbitrary code.
- A denial of service vulnerability in Windows Hyper-V can be exploited remotely to cause denial of service.
- An information disclosure vulnerability in Microsoft Windows CoreMessaging can be exploited remotely to obtain sensitive information.
- A security feature bypass vulnerability in BitLocker can be exploited remotely to bypass security restrictions.
- An elevation of privilege vulnerability in Windows Kernel-Mode Driver can be exploited remotely to gain privileges.
- A remote code execution vulnerability in Windows Libarchive can be exploited remotely to execute arbitrary code.
- An elevation of privilege vulnerability in Microsoft Virtual Hard Disk can be exploited remotely to gain privileges.
- A remote code execution vulnerability in Microsoft Online Certificate Status Protocol (OCSP) can be exploited remotely to execute arbitrary code.
- A security feature bypass vulnerability in Windows Server Key Distribution Service can be exploited remotely to bypass security restrictions.
- A spoofing vulnerability in Windows Nearby Sharing can be exploited remotely to spoof user interface.
- A remote code execution vulnerability in Windows Hyper-V can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in Windows Cryptographic Services can be exploited remotely to execute arbitrary code.
- A spoofing vulnerability in Windows Themes can be exploited remotely to spoof user interface.
- An information disclosure vulnerability in MSMQC can be exploited remotely to obtain sensitive information.
- A security feature bypass vulnerability in Windows Kerberos can be exploited remotely to bypass security restrictions.
- An elevation of privilege vulnerability in Windows Group Policy can be exploited remotely to gain privileges.
- A denial of service vulnerability in Microsoft AllJoyn API can be exploited remotely to cause denial of service.
- A array-bounds overflow vulnerability in SQLite can be exploited remotely to execute arbitrary code.
- An elevation of privilege vulnerability in Windows Kernel can be exploited remotely to gain privileges.
- A denial of service vulnerability in Microsoft Message Queuing can be exploited remotely to cause denial of service.
- An information disclosure vulnerability in Windows Themes can be exploited remotely to obtain sensitive information.
- A spoofing vulnerability in Microsoft Bluetooth Driver can be exploited remotely to spoof user interface.
- A remote code execution vulnerability in Microsoft ODBC Driver can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in Remote Desktop Client can be exploited remotely to execute arbitrary code.
- An elevation of privilege vulnerability in Windows Subsystem for Linux can be exploited remotely to gain privileges.
- An elevation of privilege vulnerability in Microsoft Common Log File System can be exploited remotely to gain privileges.
- An information disclosure vulnerability in Windows Cryptographic Services can be exploited remotely to obtain sensitive information.
- An information disclosure vulnerability in Microsoft Local Security Authority Subsystem Service can be exploited remotely to obtain sensitive information.
Первичный источник обнаружения
- CVE-2024-20686
CVE-2024-21313
CVE-2024-21305
CVE-2024-20652
CVE-2024-20660
CVE-2024-21310
CVE-2024-20662
CVE-2024-21325
CVE-2024-20699
CVE-2024-20694
CVE-2024-20666
CVE-2024-21314
CVE-2024-21309
CVE-2024-20697
CVE-2024-20658
CVE-2024-20655
CVE-2024-21316
CVE-2024-20690
CVE-2024-20700
CVE-2024-20682
CVE-2024-21320
CVE-2024-20680
CVE-2024-20674
CVE-2024-20696
CVE-2024-20657
CVE-2024-20687
CVE-2022-35737
CVE-2024-20698
CVE-2024-20664
CVE-2024-20661
CVE-2024-20691
CVE-2024-21306
CVE-2024-20683
CVE-2024-20654
CVE-2024-21307
CVE-2024-20681
CVE-2024-20653
CVE-2024-20663
CVE-2024-21311
CVE-2024-20692
Эксплуатация
Public exploits exist for this vulnerability.
Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.
Связанные продукты
- Microsoft-Windows
- Microsoft-Windows-Server
- Microsoft-Windows-10
- Microsoft-Windows-Server-2016
- Microsoft-Windows-Server-2019
- Microsoft-Windows-11
Список CVE
- CVE-2022-35737 critical
- CVE-2024-21320 high
- CVE-2024-20680 high
- CVE-2024-20674 critical
- CVE-2024-20692 high
- CVE-2024-21313 high
- CVE-2024-20652 critical
- CVE-2024-20657 high
- CVE-2024-20660 high
- CVE-2024-20664 high
- CVE-2024-20662 warning
- CVE-2024-20661 critical
- CVE-2024-20691 warning
- CVE-2024-20683 critical
- CVE-2024-20654 critical
- CVE-2024-21307 critical
- CVE-2024-21314 high
- CVE-2024-20653 critical
- CVE-2024-20663 high
- CVE-2024-20658 critical
- CVE-2024-20655 high
- CVE-2024-21311 high
- CVE-2024-20682 critical
- CVE-2024-20686 critical
- CVE-2024-21305 warning
- CVE-2024-21310 critical
- CVE-2024-21325 critical
- CVE-2024-20699 high
- CVE-2024-20694 high
- CVE-2024-20666 high
- CVE-2024-21309 critical
- CVE-2024-20697 high
- CVE-2024-21316 high
- CVE-2024-20690 high
- CVE-2024-20700 critical
- CVE-2024-20696 high
- CVE-2024-20687 critical
- CVE-2024-20698 critical
- CVE-2024-21306 high
- CVE-2024-20681 critical
Список KB
Смотрите также
Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com
Нашли неточность в описании этой уязвимости? Дайте нам знать!