Summary
Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Microsoft Windows Betriebssystemen und Microsoft Windows Azure Stack ausnutzen, um einen Denial of Service Angriff durchzuführen, Code mit erweiterten Privilegien zur Ausführung zu bringen, Sicherheitsmechanismen zu umgehen, Spoofing Angriffe durchzuführen, vertrauliche Daten einzusehen oder seine Privilegien zu erweitern.
Product
Windows ist ein Betriebssystem von Microsoft.
Microsoft Windows RT ist eine Version des Windows-Betriebssystems von Microsoft für Geräte basierend auf der ARM-Architektur, wie beispielsweise Tablet-Computer.
Die Windows Azure-Plattform ist eine Cloud Computing-Plattform von Microsoft.
Vulnerabilities 56
-
High 7.8CVE-2019-1385 Exploited · Ransomware
An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privileg…
KEV May 23, 2022 -
High 7.8
An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user…
KEV Apr 7, 2023 -
High 7.8
An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allow…
KEV Mar 15, 2022 -
Medium 6.5
TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potent…
-
Unscored —
Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may a…
-
Unscored —
A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly valid…
-
Unscored —CVE-2019-0721 EPSS 12%
A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly val…
-
Unscored —CVE-2019-1234 EPSS 75%
A spoofing vulnerability exists when Azure Stack fails to validate certain requests, aka 'Azure Stack Spoofing Vulnerab…
-
Unscored —
A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly valid…
-
Unscored —
A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly valid…
-
Unscored —
An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles IPv6 flowlabel filled i…
-
Unscored —
An information disclosure vulnerability exists in the way Windows Error Reporting (WER) handles objects in memory, aka …
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations…
-
Unscored —
A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 …
-
Unscored —
An information disclosure vulnerability exists when the Windows Servicing Stack allows access to unprivileged file loca…
-
Unscored —
An elevation of privilege vulnerability exists when ActiveX Installer service may allow access to files without proper …
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations…
-
Unscored —
A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign mess…
-
Unscored —
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input fro…
-
Unscored —
A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Serv…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka …
-
Unscored —
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…
-
Unscored —
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…
-
Unscored —
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…
-
Unscored —
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…
-
Unscored —
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input fro…
-
Unscored —
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input fro…
-
Unscored —
A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from …
-
Unscored —CVE-2019-1406 EPSS 13%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory…
-
Unscored —
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…
-
Unscored —
An information disclosure vulnerability exists when the Windows Remote Procedure Call (RPC) runtime improperly initiali…
-
Unscored —
An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'D…
-
Unscored —
An information disclosure vulnerability exists in Windows Adobe Type Manager Font Driver (ATMFD.dll) when it fails to p…
-
Unscored —
An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certai…
-
Unscored —
An elevation of privilege vulnerability exists due to a race condition in Windows Subsystem for Linux, aka 'Windows Sub…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations…
-
Unscored —
An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka '…
-
Unscored —CVE-2019-1419 EPSS 12%
A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperl…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the dssvc.dll handles file creation allowing for a file …
-
Unscored —CVE-2019-1422 Public exploit
An elevation of privilege vulnerability exists in the way that the iphlpsvc.dll handles file creation allowing for a fi…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the StartTileData.dll handles file creation in protected…
-
Unscored —
A security feature bypass vulnerability exists when Windows Netlogon improperly handles a secure communications channel…
-
Unscored —CVE-2019-1430 EPSS 14%
A remote code execution vulnerability exists when Windows Media Foundation improperly parses specially crafted QuickTim…
-
Unscored —
An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'D…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory…
-
Unscored —
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle …
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory…
-
Unscored —
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'W…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory…
-
Unscored —CVE-2019-1439 EPSS 75%
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its …
-
Unscored —
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'W…
-
Unscored —CVE-2019-1441 EPSS 13%
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedde…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symli…
-
Unscored —
A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperl…
Revision history
-
#3
Exploit aufgenommen
-
#2
Neue Updates von HITACHI aufgenommen
-
#1
Initiale Fassung
References
-
CISA Known Exploited Vulnerabilities Catalog vom 2023-04-10
https://www.cisa.gov/news-events/alerts/2023/04/07/cisa-adds-five-known-exploited-vulnerabilities-catalog
-
Microsoft Leitfaden für Sicherheitsupdates vom 2019-11-12
https://portal.msrc.microsoft.com/de-de/security-guidance
-
Hitachi Vulnerability Information HITACHI-SEC-2019-311 vom 2019-12-05
http://www.hitachi.co.jp/products/it/storage-solutions/global/sec_info/2019/11.html