WID-SEC-W-2024-3121

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Microsoft Windows: Mehrere Schwachstellen

view advisory published 2024-10-08

Ein Angreifer kann mehrere Schwachstellen in verschiedenen Versionen von Microsoft Windows Server und Microsoft Windows ausnutzen, um seine Privilegien zu erhöhen, um Sicherheitsmechanismen zu umgehen, um einen Denial of Service Zustand herbeizuführen und um beliebigen Code auszuführen.

01

describes (94)

Related CVEs.

IDseverity exploitable
CVE-2024-43615US——
Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
CVE-2024-43611US——
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-43608US——
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-43607US——
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-43599US——
Remote Desktop Client Remote Code Execution Vulnerability
CVE-2024-43593US——
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-43592US——
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-43589US——
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-43585US——
Code Integrity Guard Security Feature Bypass Vulnerability
CVE-2024-43584UShigh8.4—
Windows Scripting Engine Security Feature Bypass Vulnerability
CVE-2024-43583US—Exploit
Winlogon Elevation of Privilege Vulnerability
CVE-2024-43582US——
Remote Desktop Protocol Server Remote Code Execution Vulnerability
CVE-2024-43581US——
Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
CVE-2024-43575US——
Windows Hyper-V Denial of Service Vulnerability
CVE-2024-43574US——
Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability
CVE-2024-43573UShigh8.1OT criticalKEV
Windows MSHTML Platform Spoofing Vulnerability
CVE-2024-43572US—OT criticalKEV
Microsoft Management Console Remote Code Execution Vulnerability
CVE-2024-43571UShigh7.3—
Sudo for Windows Spoofing Vulnerability
CVE-2024-43570UShigh7.0—
Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-43567US——
Windows Hyper-V Denial of Service Vulnerability
showing 20 of 94
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan