Описание
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information, cause denial of service, spoof user interface, bypass security restrictions.
Below is a complete list of vulnerabilities:
- An elevation of privilege vulnerability in Windows Win32 Kernel Subsystem can be exploited remotely to gain privileges.
- A remote code execution vulnerability in Windows Remote Desktop Licensing Service can be exploited remotely to execute arbitrary code.
- An elevation of privilege vulnerability in Windows Graphics Component can be exploited remotely to gain privileges.
- An elevation of privilege vulnerability in PowerShell can be exploited remotely to gain privileges.
- A remote code execution vulnerability in Windows libarchive can be exploited remotely to execute arbitrary code.
- An elevation of privilege vulnerability in Windows Installer can be exploited remotely to gain privileges.
- An information disclosure vulnerability in Windows Authentication can be exploited remotely to obtain sensitive information.
- An elevation of privilege vulnerability in Kernel Streaming Service Driver can be exploited remotely to gain privileges.
- An elevation of privilege vulnerability in Win32k can be exploited remotely to gain privileges.
- A denial of service vulnerability in Windows Networking can be exploited remotely to cause denial of service.
- A spoofing vulnerability in Windows MSHTML Platform can be exploited remotely to spoof user interface.
- An elevation of privilege vulnerability in Windows Kerberos can be exploited remotely to gain privileges.
- A security feature bypass vulnerability in Windows Security Zone Mapping can be exploited remotely to bypass security restrictions.
- An elevation of privilege vulnerability in Windows Storage can be exploited remotely to gain privileges.
- A denial of service vulnerability in Windows Hyper-V can be exploited remotely to cause denial of service.
- A spoofing vulnerability in Windows Remote Desktop Licensing Service can be exploited remotely to spoof user interface.
- A security feature bypass vulnerability in Windows Mark of the Web can be exploited remotely to bypass security restrictions.
- An information disclosure vulnerability in Windows Remote Desktop Licensing Service can be exploited remotely to obtain sensitive information.
- A remote code execution vulnerability in Windows TCP/IP can be exploited remotely to execute arbitrary code.
- A denial of service vulnerability in Windows Standards-Based Storage Management Service can be exploited remotely to cause denial of service.
- An elevation of privilege vulnerability in Windows Setup and Deployment can be exploited remotely to gain privileges.
- An elevation of privilege vulnerability in Kernel Streaming WOW Thunk Service Driver can be exploited remotely to gain privileges.
- A denial of service vulnerability in Windows Remote Desktop Licensing Service can be exploited remotely to cause denial of service.
- An information disclosure vulnerability in Microsoft AllJoyn API can be exploited remotely to obtain sensitive information.
- A remote code execution vulnerability in Windows Network Address Translation (NAT) can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in Microsoft Management Console can be exploited remotely to execute arbitrary code.
- A denial of service vulnerability in DHCP Server Service can be exploited remotely to cause denial of service.
- An elevation of privilege vulnerability in Windows Remote Access Connection Manager can be exploited remotely to gain privileges.
- An information disclosure vulnerability in Windows Kernel-Mode Driver can be exploited remotely to obtain sensitive information.
- A remote code execution vulnerability in Microsoft Windows Update can be exploited remotely to execute arbitrary code.
- An information disclosure vulnerability in Windows Networking can be exploited remotely to obtain sensitive information.
Первичный источник обнаружения
- CVE-2024-38252
CVE-2024-43454
CVE-2024-38260
CVE-2024-38247
CVE-2024-38046
CVE-2024-38253
CVE-2024-43495
CVE-2024-38014
CVE-2024-38254
CVE-2024-38242
CVE-2024-38246
CVE-2024-38233
CVE-2024-43461
CVE-2024-38241
CVE-2024-38239
CVE-2024-30073
CVE-2024-38248
CVE-2024-38243
CVE-2024-38235
CVE-2024-43455
CVE-2024-38217
CVE-2024-38258
CVE-2024-38045
CVE-2024-21416
CVE-2024-43467
CVE-2024-38250
CVE-2024-38238
CVE-2024-38230
CVE-2024-43457
CVE-2024-38245
CVE-2024-38237
CVE-2024-38244
CVE-2024-38231
CVE-2024-38257
CVE-2024-38119
CVE-2024-43487
CVE-2024-38259
CVE-2024-38236
CVE-2024-38240
CVE-2024-38263
CVE-2024-38256
CVE-2024-38232
CVE-2024-38249
CVE-2024-43491
CVE-2024-38234
CVE-2024-43458
Эксплуатация
Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.
Связанные продукты
- Microsoft-Windows
- Microsoft-Windows-Server
- Microsoft-Windows-10
- Microsoft-Windows-Server-2016
- Microsoft-Windows-Server-2019
- Microsoft-Windows-11
- Microsoft-Windows-Server-2022
Список CVE
- CVE-2024-38250 critical
- CVE-2024-43454 high
- CVE-2024-38260 critical
- CVE-2024-38247 critical
- CVE-2024-38230 high
- CVE-2024-38245 critical
- CVE-2024-38231 high
- CVE-2024-38014 critical
- CVE-2024-43487 high
- CVE-2024-43461 critical
- CVE-2024-38236 critical
- CVE-2024-38240 critical
- CVE-2024-38239 high
- CVE-2024-38263 critical
- CVE-2024-30073 critical
- CVE-2024-38256 high
- CVE-2024-43455 critical
- CVE-2024-38217 high
- CVE-2024-38249 critical
- CVE-2024-38258 high
- CVE-2024-43467 critical
- CVE-2024-38234 high
- CVE-2024-38252 critical
- CVE-2024-38046 critical
- CVE-2024-38253 critical
- CVE-2024-43495 high
- CVE-2024-38254 high
- CVE-2024-38242 critical
- CVE-2024-38246 high
- CVE-2024-38233 critical
- CVE-2024-38241 critical
- CVE-2024-38248 high
- CVE-2024-38243 critical
- CVE-2024-38235 high
- CVE-2024-38045 critical
- CVE-2024-21416 critical
- CVE-2024-38238 critical
- CVE-2024-43457 critical
- CVE-2024-38237 critical
- CVE-2024-38244 critical
- CVE-2024-38257 critical
- CVE-2024-38119 critical
- CVE-2024-38259 critical
- CVE-2024-38232 critical
- CVE-2024-43491 critical
- CVE-2024-43458 critical
Список KB
Смотрите также
Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com
Нашли неточность в описании этой уязвимости? Дайте нам знать!