Kaspersky ID:
KLA68914
Дата обнаружения:
11/06/2024
Обновлено:
04/07/2024

Описание

Multiple vulnerabilities were found in Microsoft Products (Extended Security Update). Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, gain privileges.

Below is a complete list of vulnerabilities:

  1. A denial of service vulnerability in DNS protocol can be exploited remotely to cause denial of service.
  2. A remote code execution vulnerability in Microsoft Message Queuing (MSMQ) can be exploited remotely to execute arbitrary code.
  3. An elevation of privilege vulnerability in Win32k can be exploited remotely to gain privileges.
  4. An elevation of privilege vulnerability in Windows Kernel-Mode Driver can be exploited remotely to gain privileges.
  5. A remote code execution vulnerability in Windows Wi-Fi Driver can be exploited remotely to execute arbitrary code.
  6. A remote code execution vulnerability in Windows Link Layer Topology Discovery Protocol can be exploited remotely to execute arbitrary code.
  7. An elevation of privilege vulnerability in Microsoft Streaming Service can be exploited remotely to gain privileges.
  8. An elevation of privilege vulnerability in Winlogon can be exploited remotely to gain privileges.
  9. A remote code execution vulnerability in Windows Standards-Based Storage Management Service can be exploited remotely to execute arbitrary code.
  10. An elevation of privilege vulnerability in Windows Storage can be exploited remotely to gain privileges.
  11. An elevation of privilege vulnerability in Windows Win32 Kernel Subsystem can be exploited remotely to gain privileges.
  12. A denial of service vulnerability in Windows Standards-Based Storage Management Service can be exploited remotely to cause denial of service.
  13. A remote code execution vulnerability in Windows Routing and Remote Access Service (RRAS) can be exploited remotely to execute arbitrary code.
  14. A remote code execution vulnerability in Windows OLE can be exploited remotely to execute arbitrary code.
  15. A remote code execution vulnerability in Windows Distributed File System (DFS) can be exploited remotely to execute arbitrary code.
  16. A denial of service vulnerability in Windows Themes can be exploited remotely to cause denial of service.
  17. A denial of service vulnerability in DHCP Server Service can be exploited remotely to cause denial of service.

Первичный источник обнаружения

Эксплуатация

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Связанные продукты

Список CVE

  • CVE-2023-50868
    warning
  • CVE-2024-30080
    critical
  • CVE-2024-30091
    critical
  • CVE-2024-35250
    critical
  • CVE-2024-30084
    high
  • CVE-2024-30078
    critical
  • CVE-2024-30075
    critical
  • CVE-2024-30090
    high
  • CVE-2024-30066
    high
  • CVE-2024-30062
    critical
  • CVE-2024-30093
    high
  • CVE-2024-30087
    critical
  • CVE-2024-30086
    critical
  • CVE-2024-30083
    critical
  • CVE-2024-30095
    critical
  • CVE-2024-30067
    high
  • CVE-2024-30077
    critical
  • CVE-2024-30082
    critical
  • CVE-2024-30094
    critical
  • CVE-2024-30063
    high
  • CVE-2024-30074
    critical
  • CVE-2024-30065
    high
  • CVE-2024-30070
    critical

Список KB

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com

Нашли неточность в описании этой уязвимости? Дайте нам знать!
Встречай новый Kaspersky!
Каждая минута твоей онлайн-жизни заслуживает топовой защиты.
Узнать больше
Kaspersky IT Security Calculator:
Оцените ваш профиль кибербезопасности
Узнать больше
Confirm changes?
Your message has been sent successfully.