Продукты:
Для дома
Для малого бизнеса
Для среднего бизнеса
Для крупного бизнеса
Уязвимости Угрозы
Главная Уязвимости

Multiple vulnerabilities in Microsoft Windows

Kaspersky ID:
KLA73915
Дата обнаружения:
08/10/2024
Обновлено:
10/10/2024

Описание

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, spoof user interface, execute arbitrary code, cause denial of service, obtain sensitive information, bypass security restrictions.

Below is a complete list of vulnerabilities:

  1. An elevation of privilege vulnerability in Windows Kerberos can be exploited remotely to gain privileges.
  2. An elevation of privilege vulnerability in Windows Kernel can be exploited remotely to gain privileges.
  3. An elevation of privilege vulnerability in NT OS Kernel can be exploited remotely to gain privileges.
  4. An elevation of privilege vulnerability in Windows Kernel-Mode Driver can be exploited remotely to gain privileges.
  5. An elevation of privilege vulnerability in Windows Common Log File System Driver can be exploited remotely to gain privileges.
  6. A tampering vulnerability in Windows Remote Desktop Services can be exploited remotely to spoof user interface.
  7. A remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server can be exploited remotely to execute arbitrary code.
  8. A remote code execution vulnerability in Microsoft OpenSSH for Windows can be exploited remotely to execute arbitrary code.
  9. A denial of service vulnerability in Windows Mobile Broadband Driver can be exploited remotely to cause denial of service.
  10. An elevation of privilege vulnerability in Windows Secure Kernel Mode can be exploited remotely to gain privileges.
  11. A remote code execution vulnerability in Windows Mobile Broadband Driver can be exploited remotely to execute arbitrary code.
  12. A denial of service vulnerability in Windows Kernel can be exploited remotely to cause denial of service.
  13. An information disclosure vulnerability in Windows Kernel-Mode Driver can be exploited remotely to obtain sensitive information.
  14. A remote code execution vulnerability in Windows Routing and Remote Access Service (RRAS) can be exploited remotely to execute arbitrary code.
  15. A remote code execution vulnerability in Microsoft Management Console can be exploited remotely to execute arbitrary code.
  16. A remote code execution vulnerability in Microsoft Mariner can be exploited remotely to execute arbitrary code.
  17. A denial of service vulnerability in Windows Hyper-V can be exploited remotely to cause denial of service.
  18. An information disclosure vulnerability in Windows Graphics Component can be exploited remotely to obtain sensitive information.
  19. A security feature bypass vulnerability in Windows Resume Extensible Firmware Interface can be exploited remotely to bypass security restrictions.
  20. A denial of service vulnerability in Windows Online Certificate Status Protocol (OCSP) Server can be exploited remotely to cause denial of service.
  21. A denial of service vulnerability in Microsoft Simple Certificate Enrollment Protocol can be exploited remotely to cause denial of service.
  22. An elevation of privilege vulnerability in Windows Ancillary Function Driver for WinSock can be exploited remotely to gain privileges.
  23. A remote code execution vulnerability in Remote Desktop Client can be exploited remotely to execute arbitrary code.
  24. An elevation of privilege vulnerability in Windows Graphics Component can be exploited remotely to gain privileges.
  25. An elevation of privilege vulnerability in Windows Storage can be exploited remotely to gain privileges.
  26. An information disclosure vulnerability in Windows Kerberos can be exploited remotely to obtain sensitive information.
  27. A denial of service vulnerability in Internet Small Computer Systems Interface (iSCSI) can be exploited remotely to cause denial of service.
  28. An elevation of privilege vulnerability in Windows Resilient File System (ReFS) can be exploited remotely to gain privileges.
  29. A remote code execution vulnerability in Windows Shell can be exploited remotely to execute arbitrary code.
  30. An elevation of privilege vulnerability in Windows Netlogon can be exploited remotely to gain privileges.
  31. A remote code execution vulnerability in Microsoft ActiveX Data Objects can be exploited remotely to execute arbitrary code.
  32. An elevation of privilege vulnerability in Windows Local Security Authority (LSA) can be exploited remotely to gain privileges.
  33. A denial of service vulnerability in Windows Standards-Based Storage Management Service can be exploited remotely to cause denial of service.
  34. An elevation of privilege vulnerability in Remote Registry Service can be exploited remotely to gain privileges.
  35. A remote code execution vulnerability in Windows Telephony Server can be exploited remotely to execute arbitrary code.
  36. A denial of service vulnerability in Windows Network Address Translation (NAT) can be exploited remotely to cause denial of service.
  37. A spoofing vulnerability in Windows Secure Channel can be exploited remotely to spoof user interface.
  38. An elevation of privilege vulnerability in Winlogon can be exploited remotely to gain privileges.
  39. A remote code execution vulnerability in Windows Remote Desktop Licensing Service can be exploited remotely to execute arbitrary code.
  40. A spoofing vulnerability in Windows MSHTML Platform can be exploited remotely to spoof user interface.
  41. A spoofing vulnerability in Sudo for Windows can be exploited remotely to spoof user interface.
  42. A security feature bypass vulnerability in Code Integrity Guard can be exploited remotely to bypass security restrictions.
  43. A denial of service vulnerability in BranchCache can be exploited remotely to cause denial of service.
  44. An information disclosure vulnerability in Windows Cryptographic can be exploited remotely to obtain sensitive information.
  45. A security feature bypass vulnerability in Windows Scripting Engine can be exploited remotely to bypass security restrictions.
  46. A remote code execution vulnerability in Remote Desktop Protocol Server can be exploited remotely to execute arbitrary code.
  47. An information disclosure vulnerability in Windows Resilient File System (ReFS) can be exploited remotely to obtain sensitive information.
  48. A remote code execution vulnerability in Microsoft Speech Application Programming Interface (SAPI) can be exploited remotely to execute arbitrary code.
  49. An elevation of privilege vulnerability in Windows Print Spooler can be exploited remotely to gain privileges.
  50. A security feature bypass vulnerability in BitLocker can be exploited remotely to bypass security restrictions.
  51. A remote code execution vulnerability in Windows Hyper-V can be exploited remotely to execute arbitrary code.
  52. An elevation of privilege vulnerability in Microsoft Windows Storage Port Driver can be exploited remotely to gain privileges.
  53. A security feature bypass vulnerability in Windows Hyper-V can be exploited remotely to bypass security restrictions.
 
 

 

 

Первичный источник обнаружения

Связанные продукты

Список CVE

  • CVE-2024-6197
    critical
  • CVE-2024-38124
    critical
  • CVE-2024-43553
    high
  • CVE-2024-43608
    critical
  • CVE-2024-43535
    high
  • CVE-2024-43501
    critical
  • CVE-2024-43456
    warning
  • CVE-2024-43519
    critical
  • CVE-2024-43517
    critical
  • CVE-2024-43567
    critical
  • CVE-2024-43592
    critical
  • CVE-2024-43512
    high
  • CVE-2024-43520
    warning
  • CVE-2024-43593
    critical
  • CVE-2024-43564
    critical
  • CVE-2024-43611
    critical
  • CVE-2024-43532
    critical
  • CVE-2024-38265
    critical
  • CVE-2024-43572
    critical
  • CVE-2024-43453
    critical
  • CVE-2024-43518
    critical
  • CVE-2024-43556
    critical
  • CVE-2024-43550
    high
  • CVE-2024-43583
    critical
  • CVE-2024-38262
    critical
  • CVE-2024-43521
    critical
  • CVE-2024-43573
    high
  • CVE-2024-43534
    high
  • CVE-2024-37982
    high
  • CVE-2024-43545
    critical
  • CVE-2024-43549
    critical
  • CVE-2024-37979
    high
  • CVE-2024-43570
    high
  • CVE-2024-37976
    high
  • CVE-2024-38261
    critical
  • CVE-2024-43506
    critical
  • CVE-2024-43541
    critical
  • CVE-2024-43563
    critical
  • CVE-2024-43599
    critical
  • CVE-2024-37983
    high
  • CVE-2024-38212
    critical
  • CVE-2024-43607
    critical
  • CVE-2024-43509
    critical
  • CVE-2024-43544
    critical
  • CVE-2024-43515
    critical
  • CVE-2024-43547
    high
  • CVE-2024-43513
    high
  • CVE-2024-38149
    critical
  • CVE-2024-43560
    critical
  • CVE-2024-43514
    critical
  • CVE-2024-43589
    critical
  • CVE-2024-38129
    high
  • CVE-2024-43511
    high
  • CVE-2024-43615
    high
  • CVE-2024-43537
    high
  • CVE-2024-43516
    high
  • CVE-2024-43555
    high
  • CVE-2024-43536
    high
  • CVE-2024-43554
    high
  • CVE-2024-43575
    high
  • CVE-2024-43526
    high
  • CVE-2024-43528
    high
  • CVE-2024-43523
    high
  • CVE-2024-43538
    high
  • CVE-2024-43551
    high
  • CVE-2024-43502
    high
  • CVE-2024-43527
    high
  • CVE-2024-43552
    high
  • CVE-2024-43557
    high
  • CVE-2024-43525
    high
  • CVE-2024-43581
    high
  • CVE-2024-43522
    high
  • CVE-2024-43533
    high
  • CVE-2024-43561
    high
  • CVE-2024-43543
    high
  • CVE-2024-43565
    high
  • CVE-2024-43524
    high
  • CVE-2024-43540
    high
  • CVE-2024-43558
    high
  • CVE-2024-43571
    high
  • CVE-2024-43508
    high
  • CVE-2024-43585
    high
  • CVE-2024-43546
    high
  • CVE-2024-38029
    high
  • CVE-2024-43559
    high
  • CVE-2024-43584
    high
  • CVE-2024-43582
    high
  • CVE-2024-43500
    high
  • CVE-2024-43574
    high
  • CVE-2024-43529
    high
  • CVE-2024-30092
    high
  • CVE-2024-43562
    high
  • CVE-2024-43542
    high
  • CVE-2024-20659
    high

Список KB

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com

Нашли неточность в описании этой уязвимости? Дайте нам знать!
Kaspersky IT Security Calculator:
Оцените ваш профиль кибербезопасности
Узнать больше
Встречай новый Kaspersky!
Каждая минута твоей онлайн-жизни заслуживает топовой защиты.
Узнать больше
Related articles
21 October 2024
Securelist
Стилер там, стилер здесь, стилеры везде!
18 October 2024
Securelist
Анализ группы Crypt Ghouls: продолжаем исследовать серию атак на Россию
17 October 2024
Securelist
Рассылка Horns&Hooves доставляет NetSupport RAT и BurnsRAT
07 October 2024
Securelist
Awaken Likho не спит: разбираем новые техники APT-группы
04 October 2024
Securelist
Система управления событиями опасности
26 September 2024
Securelist
Ландшафт угроз для систем промышленной автоматизации. Второй квартал 2024 года
Нашли неточность в описании этой уязвимости?
Если вы нашли новую угрозу или уязвимость, пожалуйста дайте нам знать по электронной почте:
newvirus@kaspersky.com
Нашли новую угрозу или уязвимость?
Если вы нашли новую угрозу или уязвимость, пожалуйста дайте нам знать по электронной почте:
newvirus@kaspersky.com
Продукты
Для дома
Для малого бизнеса
Для среднего бизнеса
Для крупного бизнеса
Select language
Sorting
Kaspersky ID
Уязвимость
Detect date
Уровень угрозы
Confirm changes?
Your message has been sent successfully.