Kaspersky Threats

Описание

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information, cause denial of service, spoof user interface, bypass security restrictions.

Below is a complete list of vulnerabilities:

An elevation of privilege vulnerability in Windows Win32 Kernel Subsystem can be exploited remotely to gain privileges.
A remote code execution vulnerability in Windows Remote Desktop Licensing Service can be exploited remotely to execute arbitrary code.
An elevation of privilege vulnerability in Windows Graphics Component can be exploited remotely to gain privileges.
An elevation of privilege vulnerability in PowerShell can be exploited remotely to gain privileges.
A remote code execution vulnerability in Windows libarchive can be exploited remotely to execute arbitrary code.
An elevation of privilege vulnerability in Windows Installer can be exploited remotely to gain privileges.
An information disclosure vulnerability in Windows Authentication can be exploited remotely to obtain sensitive information.
An elevation of privilege vulnerability in Kernel Streaming Service Driver can be exploited remotely to gain privileges.
An elevation of privilege vulnerability in Win32k can be exploited remotely to gain privileges.
A denial of service vulnerability in Windows Networking can be exploited remotely to cause denial of service.
A spoofing vulnerability in Windows MSHTML Platform can be exploited remotely to spoof user interface.
An elevation of privilege vulnerability in Windows Kerberos can be exploited remotely to gain privileges.
A security feature bypass vulnerability in Windows Security Zone Mapping can be exploited remotely to bypass security restrictions.
An elevation of privilege vulnerability in Windows Storage can be exploited remotely to gain privileges.
A denial of service vulnerability in Windows Hyper-V can be exploited remotely to cause denial of service.
A spoofing vulnerability in Windows Remote Desktop Licensing Service can be exploited remotely to spoof user interface.
A security feature bypass vulnerability in Windows Mark of the Web can be exploited remotely to bypass security restrictions.
An information disclosure vulnerability in Windows Remote Desktop Licensing Service can be exploited remotely to obtain sensitive information.
A remote code execution vulnerability in Windows TCP/IP can be exploited remotely to execute arbitrary code.
A denial of service vulnerability in Windows Standards-Based Storage Management Service can be exploited remotely to cause denial of service.
An elevation of privilege vulnerability in Windows Setup and Deployment can be exploited remotely to gain privileges.
An elevation of privilege vulnerability in Kernel Streaming WOW Thunk Service Driver can be exploited remotely to gain privileges.
A denial of service vulnerability in Windows Remote Desktop Licensing Service can be exploited remotely to cause denial of service.
An information disclosure vulnerability in Microsoft AllJoyn API can be exploited remotely to obtain sensitive information.
A remote code execution vulnerability in Windows Network Address Translation (NAT) can be exploited remotely to execute arbitrary code.
A remote code execution vulnerability in Microsoft Management Console can be exploited remotely to execute arbitrary code.
A denial of service vulnerability in DHCP Server Service can be exploited remotely to cause denial of service.
An elevation of privilege vulnerability in Windows Remote Access Connection Manager can be exploited remotely to gain privileges.
An information disclosure vulnerability in Windows Kernel-Mode Driver can be exploited remotely to obtain sensitive information.
A remote code execution vulnerability in Microsoft Windows Update can be exploited remotely to execute arbitrary code.
An information disclosure vulnerability in Windows Networking can be exploited remotely to obtain sensitive information.

Первичный источник обнаружения

Эксплуатация

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Связанные продукты

Список CVE

CVE-2024-38250
critical
CVE-2024-43454
high
CVE-2024-38260
critical
CVE-2024-38247
critical
CVE-2024-38230
critical
CVE-2024-38245
critical
CVE-2024-38231
critical
CVE-2024-38014
critical
CVE-2024-43487
high
CVE-2024-43461
critical
CVE-2024-38236
critical
CVE-2024-38240
critical
CVE-2024-38239
high
CVE-2024-38263
critical
CVE-2024-30073
critical
CVE-2024-38256
high
CVE-2024-43455
critical
CVE-2024-38217
high
CVE-2024-38249
critical
CVE-2024-38258
critical
CVE-2024-43467
critical
CVE-2024-38234
high
CVE-2024-38252
critical
CVE-2024-38046
critical
CVE-2024-38253
critical
CVE-2024-43495
high
CVE-2024-38254
high
CVE-2024-38242
critical
CVE-2024-38246
high
CVE-2024-38233
critical
CVE-2024-38241
critical
CVE-2024-38248
high
CVE-2024-38243
critical
CVE-2024-38235
high
CVE-2024-38045
critical
CVE-2024-21416
critical
CVE-2024-38238
critical
CVE-2024-43457
critical
CVE-2024-38237
critical
CVE-2024-38244
critical
CVE-2024-38257
critical
CVE-2024-38119
critical
CVE-2024-38259
critical
CVE-2024-38232
critical
CVE-2024-43491
critical
CVE-2024-43458
critical

Список KB

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com

Нашли неточность в описании этой уязвимости? Дайте нам знать!