Kaspersky Threats

Описание

Multiple vulnerabilities were found in Microsoft Products (Extended Security Update). Malicious users can exploit these vulnerabilities to gain privileges, cause denial of service, execute arbitrary code, obtain sensitive information, bypass security restrictions.

Below is a complete list of vulnerabilities:

An elevation of privilege vulnerability in Windows Telephony Server can be exploited remotely to gain privileges.
A denial of service vulnerability in Windows Standards-Based Storage Management Service can be exploited remotely to cause denial of service.
A remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server can be exploited remotely to execute arbitrary code.
A remote code execution vulnerability in Microsoft ODBC Driver can be exploited remotely to execute arbitrary code.
An elevation of privilege vulnerability in NTFS can be exploited remotely to gain privileges.
An information disclosure vulnerability in Windows Kernel can be exploited remotely to obtain sensitive information.
An elevation of privilege vulnerability in Windows Print Spooler can be exploited remotely to gain privileges.
An elevation of privilege vulnerability in Windows Kernel can be exploited remotely to gain privileges.
An elevation of privilege vulnerability in Windows Update Stack can be exploited remotely to gain privileges.
A remote code execution vulnerability in Windows USB Attached SCSI (UAS) Protocol can be exploited remotely to execute arbitrary code.
An elevation of privilege vulnerability in Windows Graphics Component can be exploited remotely to gain privileges.
A remote code execution vulnerability in Windows Hyper-V can be exploited remotely to execute arbitrary code.
A security feature bypass vulnerability in Windows Kerberos can be exploited remotely to bypass security restrictions.
A remote code execution vulnerability in Windows USB Hub Driver can be exploited remotely to execute arbitrary code.
An elevation of privilege vulnerability in Windows Error Reporting Service can be exploited remotely to gain privileges.
An elevation of privilege vulnerability in Windows Installer can be exploited remotely to gain privileges.
A denial of service vulnerability in Windows Kernel can be exploited remotely to cause denial of service.
An information disclosure vulnerability in RFDS can be exploited remotely to obtain sensitive information.

Первичный источник обнаружения

Эксплуатация

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Связанные продукты

Список CVE

CVE-2024-21439
high
CVE-2024-26197
high
CVE-2024-21441
critical
CVE-2024-21450
warning
CVE-2024-26161
critical
CVE-2024-26162
critical
CVE-2024-21446
critical
CVE-2024-26166
critical
CVE-2024-26159
critical
CVE-2024-21440
warning
CVE-2024-26177
high
CVE-2024-21433
high
CVE-2024-21444
critical
CVE-2024-26176
warning
CVE-2024-26173
critical
CVE-2024-21432
high
CVE-2024-21430
warning
CVE-2024-26174
high
CVE-2024-21437
critical
CVE-2024-21407
critical
CVE-2024-21427
critical
CVE-2024-21429
high
CVE-2024-21451
critical
CVE-2024-26169
critical
CVE-2024-21436
critical
CVE-2024-26181
high
CVE-2023-28746
warning
CVE-2024-26178
critical

Список KB

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com

Нашли неточность в описании этой уязвимости? Дайте нам знать!