WID-SEC-W-2024-0036

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Microsoft Windows und Microsoft Windows Server: Mehrere Schwachstellen

view advisory published 2024-01-09

Ein Angreifer kann mehrere Schwachstellen in verschiedenen Versionen von Microsoft Windows und Microsoft Windows Server ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen, seine Berechtigungen zu erweitern und Informationen falsch darzustellen.

01

describes (40)

Related CVEs.

IDseverity exploitable
CVE-2024-21325US——
Microsoft Printer Metadata Troubleshooter Tool Remote Code Execution Vulnerability
CVE-2024-21320USmedium6.5Exploit
Windows Themes Spoofing Vulnerability
CVE-2024-21316US——
Windows Server Key Distribution Service Security Feature Bypass
CVE-2024-21314US——
Microsoft Message Queuing Information Disclosure Vulnerability
CVE-2024-21313US——
Windows TCP/IP Information Disclosure Vulnerability
CVE-2024-21311US——
Windows Cryptographic Services Information Disclosure Vulnerability
CVE-2024-21310US——
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2024-21309US——
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
CVE-2024-21307US——
Remote Desktop Client Remote Code Execution Vulnerability
CVE-2024-21306US—OT elevatedExploit
Microsoft Bluetooth Driver Spoofing Vulnerability
CVE-2024-21305US—Exploit
Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability
CVE-2024-20700US——
Windows Hyper-V Remote Code Execution Vulnerability
CVE-2024-20699US——
Windows Hyper-V Denial of Service Vulnerability
CVE-2024-20698US—Exploit
Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-20697US——
Windows libarchive Remote Code Execution Vulnerability
CVE-2024-20696US—Exploit
Windows libarchive Remote Code Execution Vulnerability
CVE-2024-20694US——
Windows CoreMessaging Information Disclosure Vulnerability
CVE-2024-20692USmedium5.7—
Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability
CVE-2024-20691US——
Windows Themes Information Disclosure Vulnerability
CVE-2024-20690US——
Windows Nearby Sharing Spoofing Vulnerability
showing 20 of 40
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan