NCSC-2024-0279 — Kwetsbaarheden verholpen in Microsoft Windows

Summary

Microsoft heeft kwetsbaarheden verholpen in Windows.

Details

Interpretaties
Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade:

- Denial-of-Service (DoS)
- Omzeilen van beveiligingsmaatregel
- (Remote) code execution (Administrator/Root rechten)
- (Remote) code execution (Gebruikersrechten)
- SQL Injection
- Toegang tot systeemgegevens
- Verhoogde gebruikersrechten

De ernstigste kwetsbaarheden hebben kenmerk CVE-2024-38076, CVE-2024-38074 en CVE-2024-38076 toegewezen gekregen en bevindt zich in Windows Remote Desktop Licensing Service. Een ongeauthenticeerde kwaadwillende kan de kwetsbaarheid misbruiken om willekeurige code uit te voeren met verhoogde rechten.

```

---
Windows Server Backup:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38013 | 6.70 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows PowerShell:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38043 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2024-38033 | 7.30 | Verkrijgen van verhoogde rechten |
| CVE-2024-38047 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Remote Desktop:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38015 | 7.50 | Denial-of-Service |
| CVE-2024-38076 | 9.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|

Windows Image Acquisition:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38022 | 7.00 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Internet Connection Sharing (ICS):
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38102 | 6.50 | Denial-of-Service |
| CVE-2024-38053 | 8.80 | Uitvoeren van willekeurige code |
| CVE-2024-38101 | 6.50 | Denial-of-Service |
| CVE-2024-38105 | 6.50 | Denial-of-Service |
|----------------|------|-------------------------------------|

Intel:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-37985 | 5.90 | Toegang tot gevoelige gegevens |
|----------------|------|-------------------------------------|

Windows Online Certificate Status Protocol (OCSP):
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38031 | 7.50 | Denial-of-Service |
| CVE-2024-38067 | 7.50 | Denial-of-Service |
| CVE-2024-38068 | 7.50 | Denial-of-Service |
|----------------|------|-------------------------------------|

Windows COM Session:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38100 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Kernel:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38041 | 5.50 | Toegang tot gevoelige gegevens |
|----------------|------|-------------------------------------|

Windows Secure Boot:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-28899 | 8.80 | Omzeilen van beveiligingsmaatregel |
| CVE-2024-37969 | 8.00 | Omzeilen van beveiligingsmaatregel |
| CVE-2024-37970 | 8.00 | Omzeilen van beveiligingsmaatregel |
| CVE-2024-37974 | 8.00 | Omzeilen van beveiligingsmaatregel |
| CVE-2024-37981 | 8.00 | Omzeilen van beveiligingsmaatregel |
| CVE-2024-37986 | 8.00 | Omzeilen van beveiligingsmaatregel |
| CVE-2024-37987 | 8.00 | Omzeilen van beveiligingsmaatregel |
| CVE-2024-26184 | 6.80 | Omzeilen van beveiligingsmaatregel |
| CVE-2024-37971 | 8.00 | Omzeilen van beveiligingsmaatregel |
| CVE-2024-37972 | 8.00 | Omzeilen van beveiligingsmaatregel |
| CVE-2024-37973 | 7.80 | Omzeilen van beveiligingsmaatregel |
| CVE-2024-37975 | 8.00 | Omzeilen van beveiligingsmaatregel |
| CVE-2024-37977 | 8.00 | Omzeilen van beveiligingsmaatregel |
| CVE-2024-37978 | 8.00 | Omzeilen van beveiligingsmaatregel |
| CVE-2024-37984 | 8.40 | Omzeilen van beveiligingsmaatregel |
| CVE-2024-37988 | 8.00 | Omzeilen van beveiligingsmaatregel |
| CVE-2024-37989 | 8.00 | Omzeilen van beveiligingsmaatregel |
| CVE-2024-38010 | 8.00 | Omzeilen van beveiligingsmaatregel |
| CVE-2024-38011 | 8.00 | Omzeilen van beveiligingsmaatregel |
| CVE-2024-38065 | 6.80 | Omzeilen van beveiligingsmaatregel |
|----------------|------|-------------------------------------|

Windows Kernel-Mode Drivers:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38062 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Win32 Kernel Subsystem:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38085 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Microsoft Windows Codecs Library:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38055 | 5.50 | Toegang tot gevoelige gegevens |
| CVE-2024-38056 | 5.50 | Toegang tot gevoelige gegevens |
| CVE-2024-38060 | 8.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|

Windows Workstation Service:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38050 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows LockDown Policy (WLDP):
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38070 | 7.80 | Omzeilen van beveiligingsmaatregel |
|----------------|------|-------------------------------------|

Microsoft Graphics Component:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38051 | 7.80 | Uitvoeren van willekeurige code |
| CVE-2024-38079 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows MultiPoint Services:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-30013 | 8.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|

Line Printer Daemon Service (LPD):
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38027 | 6.50 | Denial-of-Service |
|----------------|------|-------------------------------------|

NDIS:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38048 | 6.50 | Denial-of-Service |
|----------------|------|-------------------------------------|

Windows CoreMessaging:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-21417 | 8.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Remote Access Connection Manager:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-30071 | 4.70 | Toegang tot gevoelige gegevens |
| CVE-2024-30079 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Cryptographic Services:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-30098 | 7.50 | Omzeilen van beveiligingsmaatregel |
|----------------|------|-------------------------------------|

Windows Win32K - GRFX:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38066 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Role: Windows Hyper-V:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38080 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

NPS RADIUS Server:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-3596 | 7.50 | Voordoen als andere gebruiker |
|----------------|------|-------------------------------------|

Microsoft Streaming Service:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38054 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2024-38052 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2024-38057 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Remote Desktop Licensing Service:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38071 | 7.50 | Denial-of-Service |
| CVE-2024-38072 | 7.50 | Denial-of-Service |
| CVE-2024-38077 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2024-38073 | 7.50 | Denial-of-Service |
| CVE-2024-38074 | 9.80 | Uitvoeren van willekeurige code |
| CVE-2024-38099 | 5.90 | Denial-of-Service |
|----------------|------|-------------------------------------|

Windows NTLM:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-30081 | 7.10 | Voordoen als andere gebruiker |
|----------------|------|-------------------------------------|

Microsoft WS-Discovery:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38091 | 7.50 | Denial-of-Service |
|----------------|------|-------------------------------------|

Windows Distributed Transaction Coordinator:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38049 | 6.60 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|

Windows Performance Monitor:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38025 | 7.20 | Uitvoeren van willekeurige code |
| CVE-2024-38019 | 7.20 | Uitvoeren van willekeurige code |
| CVE-2024-38028 | 7.20 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|

XBox Crypto Graphic Services:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38032 | 7.10 | Uitvoeren van willekeurige code |
| CVE-2024-38078 | 7.50 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|

Windows iSCSI:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-35270 | 5.30 | Denial-of-Service |
|----------------|------|-------------------------------------|

Windows Enroll Engine:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38069 | 7.00 | Omzeilen van beveiligingsmaatregel |
|----------------|------|-------------------------------------|

Windows Fax and Scan Service:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38104 | 8.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|

Windows TCP/IP:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38064 | 7.50 | Toegang tot gevoelige gegevens |
|----------------|------|-------------------------------------|

Windows DHCP Server:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38044 | 7.20 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|

Windows Themes:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38030 | 6.50 | Voordoen als andere gebruiker |
|----------------|------|-------------------------------------|

Windows Message Queuing:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38017 | 5.50 | Toegang tot gevoelige gegevens |
|----------------|------|-------------------------------------|

Windows Win32K - ICOMP:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38059 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Active Directory Rights Management Services:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38517 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2024-39684 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows BitLocker:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38058 | 6.80 | Omzeilen van beveiligingsmaatregel |
|----------------|------|-------------------------------------|

Role: Active Directory Certificate Services; Active Directory Domain Services:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38061 | 7.50 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Filtering:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38034 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows MSHTML Platform:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38112 | 7.50 | Omzeilen van beveiligingsmaatregel |
|----------------|------|-------------------------------------|

---

```

Oplossingen
Microsoft heeft updates beschikbaar gesteld waarmee de beschreven kwetsbaarheden worden verholpen. We raden u aan om deze updates te installeren. Meer informatie over de kwetsbaarheden, de installatie van de updates en eventuele work-arounds vindt u op:

https://portal.msrc.microsoft.com/en-us/security-guidance

Vulnerabilities 86

High 7.8

CVE-2024-38080 Exploited Public exploit

Windows Hyper-V Elevation of Privilege Vulnerability

Windows Hyper-V Elevation of Privilege Vulnerability

Microsoft Windows Server 2022 Windows 11 version 23H2 Windows 11 version 22H2 Windows

Jul 9, 2024
KEV Jul 9, 2024
Critical 9.8

CVE-2024-38074

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Jul 9, 2024
Critical 9.8

CVE-2024-38076

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Jul 9, 2024
Critical 9.8

CVE-2024-38077 Public exploit EPSS 84%

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Jul 9, 2024
Critical 9.0

CVE-2024-3596 Public exploit EPSS 15%

RADIUS Protocol under RFC2865 is vulnerable to forgery attacks.

RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authen…

IETF RFC krb5 freeradius Debian Ubuntu Alpine

Jul 9, 2024
High 8.8

CVE-2024-21417

Windows Text Services Framework Elevation of Privilege Vulnerability

Windows Text Services Framework Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 8.8

CVE-2024-28899

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 8.8

CVE-2024-30013

Windows MultiPoint Services Remote Code Execution Vulnerability

Windows MultiPoint Services Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 8.8

CVE-2024-37973

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 8.8

CVE-2024-38053

Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability

Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 8.8

CVE-2024-38060 EPSS 16%

Windows Imaging Component Remote Code Execution Vulnerability

Windows Imaging Component Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 8.8

CVE-2024-38104

Windows Fax Service Remote Code Execution Vulnerability

Windows Fax Service Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 8.4

CVE-2024-37984

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 8.0

CVE-2024-37969

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 8.0

CVE-2024-37970

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 8.0

CVE-2024-37971

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 8.0

CVE-2024-37972

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 8.0

CVE-2024-37974

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 8.0

CVE-2024-37975

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 8.0

CVE-2024-37977

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Microsoft Windows Server 2022 Windows 11 version 23H2 Windows 11 version 22H2 Windows

Jul 9, 2024
High 8.0

CVE-2024-37978

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Microsoft Windows 11 version 23H2 Windows 11 version 22H2 Windows Server 2022, 23H2 Edition (Server Core installation) Windows

Jul 9, 2024
High 8.0

CVE-2024-37981

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 8.0

CVE-2024-37986

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 8.0

CVE-2024-37987

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 8.0

CVE-2024-37988

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 8.0

CVE-2024-37989

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 8.0

CVE-2024-38010

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 8.0

CVE-2024-38011

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 7.8

CVE-2024-30079

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 7.8

CVE-2024-38034

Windows Filtering Platform Elevation of Privilege Vulnerability

Windows Filtering Platform Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 7.8

CVE-2024-38043

PowerShell Elevation of Privilege Vulnerability

PowerShell Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 7.8

CVE-2024-38047

PowerShell Elevation of Privilege Vulnerability

PowerShell Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 7.8

CVE-2024-38050

Windows Workstation Service Elevation of Privilege Vulnerability

Windows Workstation Service Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 7.8

CVE-2024-38051

Windows Graphics Component Remote Code Execution Vulnerability

Windows Graphics Component Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 7.8

CVE-2024-38052

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 7.8

CVE-2024-38054 EPSS 10%

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 7.8

CVE-2024-38057

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 7.8

CVE-2024-38059

Win32k Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

Microsoft Windows Server 2022 Windows 10 Version 21H2 Windows 10 Version 22H2 Windows

Jul 9, 2024
High 7.8

CVE-2024-38062

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 7.8

CVE-2024-38066

Windows Win32k Elevation of Privilege Vulnerability

Windows Win32k Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 7.8

CVE-2024-38070

Windows LockDown Policy (WLDP) Security Feature Bypass Vulnerability

Windows LockDown Policy (WLDP) Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 7.8

CVE-2024-38079

Windows Graphics Component Elevation of Privilege Vulnerability

Windows Graphics Component Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 7.8

CVE-2024-38085

Windows Graphics Component Elevation of Privilege Vulnerability

Windows Graphics Component Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 7.8

CVE-2024-38100

Windows File Explorer Elevation of Privilege Vulnerability

Windows File Explorer Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Jul 9, 2024
High 7.5

CVE-2024-30098

Windows Cryptographic Services Security Feature Bypass Vulnerability

Windows Cryptographic Services Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 7.5

CVE-2024-38015

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Jul 9, 2024
High 7.5

CVE-2024-38031

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Jul 9, 2024
High 7.5

CVE-2024-38061

DCOM Remote Cross-Session Activation Elevation of Privilege Vulnerability

DCOM Remote Cross-Session Activation Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 7.5

CVE-2024-38064

Windows TCP/IP Information Disclosure Vulnerability

Windows TCP/IP Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 7.5

CVE-2024-38067

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Jul 9, 2024
High 7.5

CVE-2024-38068

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 7.5

CVE-2024-38071 EPSS 36%

Windows Remote Desktop Licensing Service Denial of Service Vulnerability

Windows Remote Desktop Licensing Service Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Jul 9, 2024
High 7.5

CVE-2024-38072

Windows Remote Desktop Licensing Service Denial of Service Vulnerability

Windows Remote Desktop Licensing Service Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Jul 9, 2024
High 7.5

CVE-2024-38073

Windows Remote Desktop Licensing Service Denial of Service Vulnerability

Windows Remote Desktop Licensing Service Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Jul 9, 2024
High 7.5

CVE-2024-38078

Xbox Wireless Adapter Remote Code Execution Vulnerability

Xbox Wireless Adapter Remote Code Execution Vulnerability

Microsoft Windows 11 version 23H2 Windows 11 version 22H2 Windows 11 version 21H2 Windows

Jul 9, 2024
High 7.5

CVE-2024-38091

Microsoft WS-Discovery Denial of Service Vulnerability

Microsoft WS-Discovery Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 7.3

CVE-2024-38033

PowerShell Elevation of Privilege Vulnerability

PowerShell Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 7.2

CVE-2024-38019

Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability

Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 7.2

CVE-2024-38025

Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability

Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 7.2

CVE-2024-38028

Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability

Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 7.2

CVE-2024-38044

DHCP Server Service Remote Code Execution Vulnerability

DHCP Server Service Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Jul 9, 2024
High 7.1

CVE-2024-30081 EPSS 24%

Windows NTLM Spoofing Vulnerability

Windows NTLM Spoofing Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 7.1

CVE-2024-38032

Microsoft Xbox Remote Code Execution Vulnerability

Microsoft Xbox Remote Code Execution Vulnerability

Microsoft Windows 10 Version 21H2 Windows 10 Version 22H2 Windows 11 version 23H2 Windows

Jul 9, 2024
High 7.0

CVE-2024-38022

Windows Image Acquisition Elevation of Privilege Vulnerability

Windows Image Acquisition Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
High 7.0

CVE-2024-38069

Windows Enroll Engine Security Feature Bypass Vulnerability

Windows Enroll Engine Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
Medium 6.8

CVE-2024-26184

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Microsoft Windows Server 2022 Windows 10 Version 21H2 Windows 10 Version 22H2 Windows

Jul 9, 2024
Medium 6.8

CVE-2024-38058

BitLocker Security Feature Bypass Vulnerability

BitLocker Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
Medium 6.8

CVE-2024-38065

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
Medium 6.8

CVE-2024-38517

Tencent RapidJSON include/rapidjson/reader.h GenericReader::ParseNumber() Function Template Exponent Parsing Integer Underflow

Tencent RapidJSON is vulnerable to privilege escalation due to an integer underflow in the `GenericReader::ParseNumber()` function of `include/rapidjson/reader.h` when parsing JSON text from a stream. An attacker needs to send the victim a crafted file which …

Tencent RapidJSON ceph opencc Debian Ubuntu Azure Linux Alpine

Jul 9, 2024
Medium 6.8

CVE-2024-39684

Tencent RapidJSON include/rapidjson/reader.h GenericReader::ParseNumber() Function Template Exponent Parsing Integer Overflow

Tencent RapidJSON is vulnerable to privilege escalation due to an integer overflow in the `GenericReader::ParseNumber()` function of `include/rapidjson/reader.h` when parsing JSON text from a stream. An attacker needs to send the victim a crafted file which n…

Tencent RapidJSON ceph opencc Debian Ubuntu Azure Linux

Jul 9, 2024
Medium 6.7

CVE-2024-38013

Microsoft Windows Server Backup Elevation of Privilege Vulnerability

Microsoft Windows Server Backup Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
Medium 6.6

CVE-2024-38049

Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability

Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
Medium 6.5

CVE-2024-38027

Windows Line Printer Daemon Service Denial of Service Vulnerability

Windows Line Printer Daemon Service Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
Medium 6.5

CVE-2024-38030 EPSS 51%

Windows Themes Spoofing Vulnerability

Windows Themes Spoofing Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
Medium 6.5

CVE-2024-38048

Windows Network Driver Interface Specification (NDIS) Denial of Service Vulnerability

Windows Network Driver Interface Specification (NDIS) Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
Medium 6.5

CVE-2024-38101

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
Medium 6.5

CVE-2024-38102

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
Medium 6.5

CVE-2024-38105

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
Medium 5.9

CVE-2024-37985

Windows Kernel Information Disclosure Vulnerability

Windows Kernel Information Disclosure Vulnerability

Microsoft Windows 11 version 22H2 Windows 11 version 22H3 Windows

Sep 17, 2024
Medium 5.9

CVE-2024-38099

Windows Remote Desktop Licensing Service Denial of Service Vulnerability

Windows Remote Desktop Licensing Service Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Jul 9, 2024
Medium 5.5

CVE-2024-38017

Microsoft Message Queuing Information Disclosure Vulnerability

Microsoft Message Queuing Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
Medium 5.5

CVE-2024-38041 Public exploit

Windows Kernel Information Disclosure Vulnerability

Windows Kernel Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
Medium 5.5

CVE-2024-38055

Microsoft Windows Codecs Library Information Disclosure Vulnerability

Microsoft Windows Codecs Library Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
Medium 5.5

CVE-2024-38056

Microsoft Windows Codecs Library Information Disclosure Vulnerability

Microsoft Windows Codecs Library Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
Medium 5.3

CVE-2024-35270

Windows iSCSI Service Denial of Service Vulnerability

Windows iSCSI Service Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024
Medium 4.7

CVE-2024-30071

Windows Remote Access Connection Manager Information Disclosure Vulnerability

Windows Remote Access Connection Manager Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 9, 2024

Revision history

2024-07-09 #0
Initiele versie

Kwetsbaarheden verholpen in Microsoft Windows

Summary

Details

Vulnerabilities 86

Windows Hyper-V Elevation of Privilege Vulnerability

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

RADIUS Protocol under RFC2865 is vulnerable to forgery attacks.

Windows Text Services Framework Elevation of Privilege Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Windows MultiPoint Services Remote Code Execution Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability

Windows Imaging Component Remote Code Execution Vulnerability

Windows Fax Service Remote Code Execution Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

Windows Filtering Platform Elevation of Privilege Vulnerability

PowerShell Elevation of Privilege Vulnerability

PowerShell Elevation of Privilege Vulnerability

Windows Workstation Service Elevation of Privilege Vulnerability

Windows Graphics Component Remote Code Execution Vulnerability

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

Windows Win32k Elevation of Privilege Vulnerability

Windows LockDown Policy (WLDP) Security Feature Bypass Vulnerability

Windows Graphics Component Elevation of Privilege Vulnerability

Windows Graphics Component Elevation of Privilege Vulnerability

Windows File Explorer Elevation of Privilege Vulnerability

Windows Cryptographic Services Security Feature Bypass Vulnerability

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

DCOM Remote Cross-Session Activation Elevation of Privilege Vulnerability

Windows TCP/IP Information Disclosure Vulnerability

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

Windows Remote Desktop Licensing Service Denial of Service Vulnerability

Windows Remote Desktop Licensing Service Denial of Service Vulnerability

Windows Remote Desktop Licensing Service Denial of Service Vulnerability

Xbox Wireless Adapter Remote Code Execution Vulnerability

Microsoft WS-Discovery Denial of Service Vulnerability

PowerShell Elevation of Privilege Vulnerability

Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability

Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability

Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability

DHCP Server Service Remote Code Execution Vulnerability

Windows NTLM Spoofing Vulnerability

Microsoft Xbox Remote Code Execution Vulnerability

Windows Image Acquisition Elevation of Privilege Vulnerability

Windows Enroll Engine Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

BitLocker Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Tencent RapidJSON include/rapidjson/reader.h GenericReader::ParseNumber() Function Template Exponent Parsing Integer Underflow

Tencent RapidJSON include/rapidjson/reader.h GenericReader::ParseNumber() Function Template Exponent Parsing Integer Overflow

Microsoft Windows Server Backup Elevation of Privilege Vulnerability

Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability

Windows Line Printer Daemon Service Denial of Service Vulnerability

Windows Themes Spoofing Vulnerability

Windows Network Driver Interface Specification (NDIS) Denial of Service Vulnerability

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability