KLA10840Multiple vulnerabilities in Microsoft Windows

2016-07-12T00:00:00
ID KLA10840
Type kaspersky
Reporter Kaspersky Lab
Modified 2018-07-05T00:00:00

Description

CVSS:

9.3

Detect date:

07/12/2016

Severity:

Critical

Description:

Multiple serious vulnerabilities have been found in Microsoft Windows. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges or obtain sensitive information.

Affected products:

Microsoft Windows Vista Service Pack 2
Microsoft Windows Server 2008 Service Pack 2
Microsoft Windows 7 Service Pack 1
Micorosft Windows 2008 R2 Service Pack 1
Microsoft Windows 8.1
Microsoft Windows 2012
Microsoft Windows 2012 R2
Microsoft Windows RT
Microsoft Windows 10
Microsoft Windows 10 Version 1511

Solution:

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories:

MS16-094
MS16-089
MS16-087
MS16-092
MS16-090

Impacts:

ACE

Related products:

Windows RT

CVE-IDS:

CVE-2016-3251
CVE-2016-3250
CVE-2016-3252
CVE-2016-3286
CVE-2016-3254
CVE-2016-3256
CVE-2016-3258
CVE-2016-3287
CVE-2016-3249
CVE-2016-3239
CVE-2016-3238

Microsoft official advisories:

MS16-094

KB list:

3172985
3170377
3163912
3170455
3168965
3172727
4038782
4038786
4038783
4038792
4038799
4038793
4038781
4038779
4038777