Kaspersky ID:
KLA73222
Дата обнаружения:
10/09/2024
Обновлено:
12/09/2024

Описание

Multiple vulnerabilities were found in Microsoft Products (Extended Security Update). Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, cause denial of service, bypass security restrictions, spoof user interface, obtain sensitive information.

Below is a complete list of vulnerabilities:

  1. An elevation of privilege vulnerability in Windows Graphics Component can be exploited remotely to gain privileges.
  2. A remote code execution vulnerability in Windows Remote Desktop Licensing Service can be exploited remotely to execute arbitrary code.
  3. A denial of service vulnerability in Windows Standards-Based Storage Management Service can be exploited remotely to cause denial of service.
  4. An elevation of privilege vulnerability in Kernel Streaming Service Driver can be exploited remotely to gain privileges.
  5. A denial of service vulnerability in Windows Remote Desktop Licensing Service can be exploited remotely to cause denial of service.
  6. An elevation of privilege vulnerability in Windows Installer can be exploited remotely to gain privileges.
  7. A security feature bypass vulnerability in Windows Mark of the Web can be exploited remotely to bypass security restrictions.
  8. A spoofing vulnerability in Windows MSHTML Platform can be exploited remotely to spoof user interface.
  9. A denial of service vulnerability in DHCP Server Service can be exploited remotely to cause denial of service.
  10. An elevation of privilege vulnerability in Windows Remote Access Connection Manager can be exploited remotely to gain privileges.
  11. An information disclosure vulnerability in Microsoft Windows Admin Center can be exploited remotely to obtain sensitive information.
  12. An elevation of privilege vulnerability in Windows Kerberos can be exploited remotely to gain privileges.
  13. A security feature bypass vulnerability in Windows Security Zone Mapping can be exploited remotely to bypass security restrictions.
  14. An information disclosure vulnerability in Windows Kernel-Mode Driver can be exploited remotely to obtain sensitive information.
  15. A spoofing vulnerability in Windows Remote Desktop Licensing Service can be exploited remotely to spoof user interface.
  16. An information disclosure vulnerability in Windows Remote Desktop Licensing Service can be exploited remotely to obtain sensitive information.
  17. A denial of service vulnerability in Windows Networking can be exploited remotely to cause denial of service.

Первичный источник обнаружения

Эксплуатация

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Связанные продукты

Список CVE

  • CVE-2024-38250
    critical
  • CVE-2024-43454
    high
  • CVE-2024-38260
    critical
  • CVE-2024-38247
    critical
  • CVE-2024-38230
    high
  • CVE-2024-38245
    critical
  • CVE-2024-38231
    high
  • CVE-2024-38014
    critical
  • CVE-2024-43487
    high
  • CVE-2024-43461
    critical
  • CVE-2024-38236
    critical
  • CVE-2024-38240
    critical
  • CVE-2024-43475
    high
  • CVE-2024-38239
    high
  • CVE-2024-38263
    critical
  • CVE-2024-30073
    critical
  • CVE-2024-38256
    high
  • CVE-2024-43455
    critical
  • CVE-2024-38217
    high
  • CVE-2024-38249
    critical
  • CVE-2024-38258
    high
  • CVE-2024-43467
    critical
  • CVE-2024-38234
    high

Список KB

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com

Нашли неточность в описании этой уязвимости? Дайте нам знать!
Kaspersky IT Security Calculator:
Оцените ваш профиль кибербезопасности
Узнать больше
Встречай новый Kaspersky!
Каждая минута твоей онлайн-жизни заслуживает топовой защиты.
Узнать больше
Confirm changes?
Your message has been sent successfully.