Multiple vulnerabilities in Microsoft Products (ESU)

Açıklama

Multiple vulnerabilities were found in Microsoft Products (Extended Security Update). Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, cause denial of service.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in Windows Print Spooler can be exploited remotely to gain privileges.
2. An information disclosure vulnerability in Windows Common Log File System Driver can be exploited remotely to obtain sensitive information.
3. An elevation of privilege vulnerability in Windows Common Log File System Driver can be exploited remotely to gain privileges.
4. A denial of service vulnerability in Windows Common Log File System Driver can be exploited remotely to cause denial of service.
5. An information disclosure vulnerability in Windows Remote Access Connection Manager can be exploited remotely to obtain sensitive information.
6. An elevation of privilege vulnerability in Windows Kernel can be exploited remotely to gain privileges.
7. An elevation of privilege vulnerability in Windows Remote Access Connection Manager can be exploited remotely to gain privileges.
8. An information disclosure vulnerability in Windows Services for NFS ONCRPC XDR Driver can be exploited remotely to obtain sensitive information.
9. A denial of service vulnerability in Windows User Account Profile Picture can be exploited remotely to cause denial of service.

Orijinal öneriler

• CVE-2022-22717

• CVE-2022-21998
• CVE-2022-22718
• CVE-2022-21981
• CVE-2022-22710
• CVE-2022-21997
• CVE-2022-21985
• CVE-2022-21999
• CVE-2022-21989
• CVE-2022-22000
• CVE-2022-22001
• CVE-2022-21993
• CVE-2022-22002

Kötüye kullanma

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

İlgili ürünler

• Microsoft-Windows
• Microsoft-Windows-Server
• Microsoft-Windows-Server-2012
• Microsoft-Windows-7
• Microsoft-Windows-Server-2008

CVE Listesi

• CVE-2022-22717
  high
• CVE-2022-21998
  high
• CVE-2022-22718
  critical
• CVE-2022-22001
  critical
• CVE-2022-21981
  critical
• CVE-2022-22710
  high
• CVE-2022-22002
  high
• CVE-2022-21997
  high
• CVE-2022-21985
  high
• CVE-2022-21999
  critical
• CVE-2022-21993
  critical
• CVE-2022-21989
  critical
• CVE-2022-22000
  critical

KB Listesi

• 5010384
• 5010422
• 5010403
• 5010404
• 5010419
• 5010395
• 5010392
• 5010412

Daha fazlasını okuyun

Bölgenizde yayılan güvenlik açıklarının istatistiklerini öğrenin statistics.securelist.com