Critical 1 exploited CVE WID-SEC-2024-0619 41 CVEs

Microsoft Windows: Mehrere Schwachstellen

Published Mar 12, 2024 · Updated Jun 26, 2024 · Revision 4 · de-DE

Vendor: Hitachi Vendor: Microsoft Product: Storage Product: Windows 10 Product: Windows 11 Product: Windows Server Product: Windows Server 2012 Product: Windows Server 2012 R2 Product: Windows Server 2016 Product: Windows Server 2019 Product: Windows Server 2022 Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Microsoft Windows ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen, beliebigen Programmcode auszuführen, seine Privilegien zu erweitern, einen Denial of Service Zustand herbeizuführen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder Infor mationen offenzulegen.

Product

Windows ist ein Betriebssystem von Microsoft.

Vulnerabilities 41

High 7.8

CVE-2024-26169 Exploited · Ransomware Public exploit

Windows Error Reporting Service Elevation of Privilege Vulnerability

Windows Error Reporting Service Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 12, 2024
KEV Jun 13, 2024
High 8.8

CVE-2024-21435

Windows OLE Remote Code Execution Vulnerability

Windows OLE Remote Code Execution Vulnerability

Microsoft Windows 11 version 23H2 Windows 11 version 22H2 Windows 11 version 22H3 Windows

Mar 12, 2024
High 8.8

CVE-2024-21440

Microsoft ODBC Driver Remote Code Execution Vulnerability

Microsoft ODBC Driver Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 12, 2024
High 8.8

CVE-2024-21441

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 12, 2024
High 8.8

CVE-2024-21444

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 12, 2024
High 8.8

CVE-2024-21450

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 12, 2024
High 8.8

CVE-2024-21451

Microsoft ODBC Driver Remote Code Execution Vulnerability

Microsoft ODBC Driver Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 12, 2024
High 8.8

CVE-2024-26159

Microsoft ODBC Driver Remote Code Execution Vulnerability

Microsoft ODBC Driver Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 12, 2024
High 8.8

CVE-2024-26161

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 12, 2024
High 8.8

CVE-2024-26162

Microsoft ODBC Driver Remote Code Execution Vulnerability

Microsoft ODBC Driver Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 12, 2024
High 8.8

CVE-2024-26166

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 12, 2024
High 8.1

CVE-2024-21407 EPSS 16%

Windows Hyper-V Remote Code Execution Vulnerability

Windows Hyper-V Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 12, 2024
High 7.8

CVE-2024-21431

Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability

Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability

Microsoft Windows Server 2022 Windows 10 Version 21H2 Windows 10 Version 22H2 Windows

Mar 12, 2024
High 7.8

CVE-2024-21434

Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability

Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 12, 2024
High 7.8

CVE-2024-21436

Windows Installer Elevation of Privilege Vulnerability

Windows Installer Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 12, 2024
High 7.8

CVE-2024-21437

Windows Graphics Component Elevation of Privilege Vulnerability

Windows Graphics Component Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 12, 2024
High 7.8

CVE-2024-21442

Windows USB Print Driver Elevation of Privilege Vulnerability

Windows USB Print Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2022 Windows 10 Version 21H2 Windows 10 Version 22H2 Windows

Mar 12, 2024
High 7.8

CVE-2024-21446

NTFS Elevation of Privilege Vulnerability

NTFS Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 12, 2024
High 7.8

CVE-2024-26170 Public exploit

Windows Composite Image File System (CimFS) Elevation of Privilege Vulnerability

Windows Composite Image File System (CimFS) Elevation of Privilege Vulnerability

Microsoft Windows Server 2022 Windows 10 Version 21H2 Windows 10 Version 22H2 Windows

Mar 12, 2024
High 7.8

CVE-2024-26173

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 12, 2024
High 7.8

CVE-2024-26176

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 12, 2024
High 7.8

CVE-2024-26178

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 12, 2024
High 7.8

CVE-2024-26182

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 12, 2024
High 7.5

CVE-2024-21427

Windows Kerberos Security Feature Bypass Vulnerability

Windows Kerberos Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Mar 12, 2024
High 7.5

CVE-2024-21438

Microsoft AllJoyn API Denial of Service Vulnerability

Microsoft AllJoyn API Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 12, 2024
High 7.5

CVE-2024-26190

Microsoft QUIC Denial of Service Vulnerability

Microsoft QUIC Denial of Service Vulnerability

Microsoft Windows Server 2022 Windows 11 version 23H2 Windows 11 version 22H2 Windows Alpine

Mar 12, 2024
High 7.3

CVE-2024-21443

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 12, 2024
High 7.0

CVE-2024-21432

Windows Update Stack Elevation of Privilege Vulnerability

Windows Update Stack Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 12, 2024
High 7.0

CVE-2024-21433

Windows Print Spooler Elevation of Privilege Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 12, 2024
High 7.0

CVE-2024-21439

Windows Telephony Server Elevation of Privilege Vulnerability

Windows Telephony Server Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 12, 2024
High 7.0

CVE-2024-21445

Windows USB Print Driver Elevation of Privilege Vulnerability

Windows USB Print Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2022 Windows 10 Version 21H2 Windows 10 Version 22H2 Windows

Mar 12, 2024
Medium 6.8

CVE-2024-21429

Windows USB Hub Driver Remote Code Execution Vulnerability

Windows USB Hub Driver Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 12, 2024
Medium 6.5

CVE-2023-28746

Information exposure through microarchitectural state after transient execution from some register files for some Intel…

linux xen xen intel-microcode Debian Ubuntu Alpine

Mar 14, 2024
Medium 6.5

CVE-2024-26185 EPSS 30%

Windows Compressed Folder Tampering Vulnerability

Windows Compressed Folder Tampering Vulnerability

Microsoft Windows 11 version 23H2 Windows 11 version 22H2 Windows 11 version 22H3 Windows

Mar 12, 2024
Medium 6.5

CVE-2024-26197

Windows Standards-Based Storage Management Service Denial of Service Vulnerability

Windows Standards-Based Storage Management Service Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Mar 12, 2024
Medium 5.7

CVE-2024-21430

Windows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability

Windows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 12, 2024
Medium 5.5

CVE-2024-21408

Windows Hyper-V Denial of Service Vulnerability

Windows Hyper-V Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 12, 2024
Medium 5.5

CVE-2024-26160 Public exploit EPSS 11%

Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability

Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability

Microsoft Windows 11 version 23H2 Windows 11 version 22H2 Windows Server 2022, 23H2 Edition (Server Core installation) Windows

Mar 12, 2024
Medium 5.5

CVE-2024-26174

Windows Kernel Information Disclosure Vulnerability

Windows Kernel Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 12, 2024
Medium 5.5

CVE-2024-26177

Windows Kernel Information Disclosure Vulnerability

Windows Kernel Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 12, 2024
Medium 5.5

CVE-2024-26181

Windows Kernel Denial of Service Vulnerability

Windows Kernel Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 12, 2024

Revision history

2024-06-26 #4
Neue Updates von HITACHI aufgenommen
2024-06-11 #3
CVE-2024-26169 wird ausgenutzt
2024-03-13 #2
Bewertung angepasst
2024-03-12 #1
Initiale Fassung

References

Microsoft Leitfaden für Sicherheitsupdates vom 2024-03-12
https://msrc.microsoft.com/update-guide
Symantec Threat Hunter Team vom 2024-06-11
https://symantec-enterprise-blogs.security.com/threat-intelligence/black-basta-ransomware-zero-day
Hitachi Vulnerability Information HITACHI-SEC-2024-303 vom 2024-06-27
https://www.hitachi.com/products/it/storage-solutions/sec_info/2024/03.html