Kwetsbaarheden verholpen in Microsoft Windows

Interpretaties
Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot onderstaande categorieën schade.

De ernstigste kwetsbaarheid heeft kenmerk CVE-2024-38124 toegewezen gekregen en bevindt zich in de NETLOGON functionaliteit. Succesvol misbruik is echter niet eenvoudig en vereist voorafgaande kennis van de infrastructuur en precieze timing, waarbij een randvoorwaarde van succes is dat er een nieuwe Domain Controller wordt ingericht.

```
Microsoft Simple Certificate Enrollment Protocol:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-43541 | 7.50 | Denial-of-Service |
| CVE-2024-43544 | 7.50 | Denial-of-Service |
|----------------|------|-------------------------------------|

Windows cURL Implementation:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-6197 | 8.80 | Uitvoeren van willekeurige code, |
|----------------|------|-------------------------------------|

Windows Secure Channel:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-43550 | 7.40 | Voordoen als andere gebruiker |
|----------------|------|-------------------------------------|

Windows Remote Desktop:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-43582 | 8.10 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|

Microsoft ActiveX:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-43517 | 8.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|

Windows Telephony Server:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-43518 | 8.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|

Windows Remote Desktop Services:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-43456 | 4.80 | Manipuleren van gegevens |
|----------------|------|-------------------------------------|

Windows MSHTML Platform:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-43573 | 6.50 | Voordoen als andere gebruiker |
|----------------|------|-------------------------------------|

Windows Mobile Broadband:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-43525 | 6.80 | Uitvoeren van willekeurige code |
| CVE-2024-43526 | 6.80 | Uitvoeren van willekeurige code |
| CVE-2024-43537 | 6.50 | Denial-of-Service |
| CVE-2024-43538 | 6.50 | Denial-of-Service |
| CVE-2024-43540 | 6.50 | Denial-of-Service |
| CVE-2024-43542 | 6.50 | Denial-of-Service |
| CVE-2024-43543 | 6.80 | Uitvoeren van willekeurige code |
| CVE-2024-43523 | 6.80 | Uitvoeren van willekeurige code |
| CVE-2024-43524 | 6.80 | Uitvoeren van willekeurige code |
| CVE-2024-43536 | 6.80 | Uitvoeren van willekeurige code |
| CVE-2024-43555 | 6.50 | Denial-of-Service |
| CVE-2024-43557 | 6.50 | Denial-of-Service |
| CVE-2024-43558 | 6.50 | Denial-of-Service |
| CVE-2024-43559 | 6.50 | Denial-of-Service |
| CVE-2024-43561 | 6.50 | Denial-of-Service |
|----------------|------|-------------------------------------|

Windows Standards-Based Storage Management Service:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-43512 | 6.50 | Denial-of-Service |
|----------------|------|-------------------------------------|

Microsoft WDAC OLE DB provider for SQL:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-43519 | 8.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|

Remote Desktop Client:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-43533 | 8.80 | Uitvoeren van willekeurige code |
| CVE-2024-43599 | 8.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|

Windows Kernel-Mode Drivers:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-43535 | 7.00 | Verkrijgen van verhoogde rechten |
| CVE-2024-43554 | 5.50 | Toegang tot gevoelige gegevens |
|----------------|------|-------------------------------------|

Code Integrity Guard:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-43585 | 5.50 | Omzeilen van beveiligingsmaatregel |
|----------------|------|-------------------------------------|

Windows Print Spooler Components:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-43529 | 7.30 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Resilient File System (ReFS):
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-43500 | 5.50 | Toegang tot gevoelige gegevens |
|----------------|------|-------------------------------------|

Microsoft Management Console:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-43572 | 7.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|

RPC Endpoint Mapper Service:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-43532 | 8.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Microsoft Graphics Component:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-43508 | 5.50 | Toegang tot gevoelige gegevens |
| CVE-2024-43534 | 6.50 | Toegang tot gevoelige gegevens |
| CVE-2024-43509 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2024-43556 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Local Security Authority (LSA):
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-43522 | 7.00 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Sudo for Windows:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-43571 | 5.60 | Voordoen als andere gebruiker |
|----------------|------|-------------------------------------|

Windows Scripting:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-43584 | 7.70 | Omzeilen van beveiligingsmaatregel |
|----------------|------|-------------------------------------|

Winlogon:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-43583 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Kerberos:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38129 | 7.50 | Verkrijgen van verhoogde rechten |
| CVE-2024-43547 | 6.50 | Toegang tot gevoelige gegevens |
|----------------|------|-------------------------------------|

Windows Cryptographic Services:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-43546 | 5.60 | Toegang tot gevoelige gegevens |
|----------------|------|-------------------------------------|

Windows Routing and Remote Access Service (RRAS):
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38261 | 7.80 | Uitvoeren van willekeurige code |
| CVE-2024-43608 | 8.80 | Uitvoeren van willekeurige code |
| CVE-2024-43607 | 8.80 | Uitvoeren van willekeurige code |
| CVE-2024-38265 | 8.80 | Uitvoeren van willekeurige code |
| CVE-2024-43453 | 8.80 | Uitvoeren van willekeurige code |
| CVE-2024-38212 | 8.80 | Uitvoeren van willekeurige code |
| CVE-2024-43549 | 8.80 | Uitvoeren van willekeurige code |
| CVE-2024-43564 | 8.80 | Uitvoeren van willekeurige code |
| CVE-2024-43589 | 8.80 | Uitvoeren van willekeurige code |
| CVE-2024-43592 | 8.80 | Uitvoeren van willekeurige code |
| CVE-2024-43593 | 8.80 | Uitvoeren van willekeurige code |
| CVE-2024-43611 | 8.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|

Windows EFI Partition:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-37976 | 6.70 | Omzeilen van beveiligingsmaatregel |
| CVE-2024-37982 | 6.70 | Omzeilen van beveiligingsmaatregel |
| CVE-2024-37983 | 6.70 | Omzeilen van beveiligingsmaatregel |
|----------------|------|-------------------------------------|

Role: Windows Hyper-V:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-20659 | 7.10 | Omzeilen van beveiligingsmaatregel |
| CVE-2024-43521 | 7.50 | Denial-of-Service |
| CVE-2024-43567 | 7.50 | Denial-of-Service |
| CVE-2024-43575 | 7.50 | Denial-of-Service |
|----------------|------|-------------------------------------|

Windows Hyper-V:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-30092 | 8.00 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|

Windows NT OS Kernel:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-43553 | 7.40 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Network Address Translation (NAT):
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-43562 | 7.50 | Denial-of-Service |
| CVE-2024-43565 | 7.50 | Denial-of-Service |
|----------------|------|-------------------------------------|

Windows Remote Desktop Licensing Service:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38262 | 7.50 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|

OpenSSH for Windows:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-43581 | 7.10 | Uitvoeren van willekeurige code |
| CVE-2024-43615 | 7.10 | Uitvoeren van willekeurige code |
| CVE-2024-38029 | 7.50 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|

Windows NTFS:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-43514 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Netlogon:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38124 | 9.00 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Storage Port Driver:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-43560 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Common Log File System Driver:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-43501 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Secure Kernel Mode:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-43516 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2024-43528 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Microsoft Windows Speech:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-43574 | 8.30 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|

Windows Ancillary Function Driver for WinSock:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-43563 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows BitLocker:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-43513 | 6.40 | Omzeilen van beveiligingsmaatregel |
|----------------|------|-------------------------------------|

Windows Online Certificate Status Protocol (OCSP):
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-43545 | 7.50 | Denial-of-Service |
|----------------|------|-------------------------------------|

Internet Small Computer Systems Interface (iSCSI):
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-43515 | 7.50 | Denial-of-Service |
|----------------|------|-------------------------------------|

Windows Kernel:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-43502 | 7.10 | Verkrijgen van verhoogde rechten |
| CVE-2024-43527 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2024-37979 | 6.70 | Verkrijgen van verhoogde rechten |
| CVE-2024-43511 | 7.00 | Verkrijgen van verhoogde rechten |
| CVE-2024-43520 | 5.00 | Denial-of-Service |
| CVE-2024-43570 | 6.40 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Azure Stack:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38179 | 8.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Storage:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-43551 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Shell:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-43552 | 7.30 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|

BranchCache:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-43506 | 7.50 | Denial-of-Service |
| CVE-2024-38149 | 7.50 | Denial-of-Service |
|----------------|------|-------------------------------------|
```

Oplossingen
Microsoft heeft updates beschikbaar gesteld waarmee de beschreven kwetsbaarheden worden verholpen. We raden u aan om deze updates te installeren. Meer informatie over de kwetsbaarheden, de installatie van de updates en eventuele work-arounds vindt u op:

https://portal.msrc.microsoft.com/en-us/security-guidance