Kaspersky LabKLA11048KLA11048 Multiple vulnerabilities in Windows Kernel
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
46.5%
Detect date:
06/13/2017
Severity:
Critical
Description:
Multiple serious vulnerabilities have been found in Microsoft Windows kernel. Malicious users can exploit these vulnerabilities to obtain sensitive information and gain privileges.
Affected products:
Microsoft Windows 7 Service Pack 1
Microsoft Windows RT 8.1
Microsoft Windows 8.1
Microsoft Windows 10
Microsoft Windows Server 2008 Pack 2
Microsoft Windows Server 2008 R2 Service Pack 1
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Microsoft Windows Server 2016
Solution:
Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)
Original advisories:
CVE-2017-8478
CVE-2017-8479
CVE-2017-8474
CVE-2017-8476
CVE-2017-8477
CVE-2017-0300
CVE-2017-8481
CVE-2017-8480
CVE-2017-8482
CVE-2017-8485
CVE-2017-8484
CVE-2017-8489
CVE-2017-0299
CVE-2017-0297
CVE-2017-8469
CVE-2017-8468
CVE-2017-8465
CVE-2017-8462
CVE-2017-8494
CVE-2017-8492
CVE-2017-8490
CVE-2017-8491
CVE-2017-8479
CVE-2017-0299
CVE-2017-8485
CVE-2017-8478
CVE-2017-8476
CVE-2017-8494
CVE-2017-8480
CVE-2017-8489
CVE-2017-0300
CVE-2017-8491
CVE-2017-8477
CVE-2017-8462
CVE-2017-8482
CVE-2017-8492
CVE-2017-8490
CVE-2017-8484
CVE-2017-8481
CVE-2017-8468
CVE-2017-8469
CVE-2017-8474
CVE-2017-8465
CVE-2017-0297
Impacts:
OSI
Related products:
CVE-IDS:
CVE-2017-84791.9Warning
CVE-2017-02991.9Warning
CVE-2017-84851.9Warning
CVE-2017-84781.9Warning
CVE-2017-84761.9Warning
CVE-2017-84946.9High
CVE-2017-84801.9Warning
CVE-2017-84891.9Warning
CVE-2017-03001.9Warning
CVE-2017-84911.9Warning
CVE-2017-84771.9Warning
CVE-2017-84621.9Warning
CVE-2017-84821.9Warning
CVE-2017-84921.9Warning
CVE-2017-84901.9Warning
CVE-2017-84841.9Warning
CVE-2017-84811.9Warning
CVE-2017-84687.2High
CVE-2017-84692.1Warning
CVE-2017-84741.9Warning
CVE-2017-84657.2High
CVE-2017-02971.9Warning
Microsoft official advisories:
KB list:
4022719
4022726
4022714
4022724
4022727
4022715
4022725
4022722
4022717
4022718
4022013
4022887
4034741
Exploitation:
Public exploits exist for this vulnerability.
References
support.microsoft.com/kb/4022013
support.microsoft.com/kb/4022714
support.microsoft.com/kb/4022715
support.microsoft.com/kb/4022717
support.microsoft.com/kb/4022718
support.microsoft.com/kb/4022719
support.microsoft.com/kb/4022722
support.microsoft.com/kb/4022724
support.microsoft.com/kb/4022725
support.microsoft.com/kb/4022726
support.microsoft.com/kb/4022727
support.microsoft.com/kb/4022887
support.microsoft.com/kb/4034741
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0297
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0299
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0300
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8462
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8465
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8468
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8469
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8474
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8476
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8477
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8478
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8479
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8480
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8481
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8482
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8484
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8485
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8489
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8490
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8491
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8492
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8494
portal.msrc.microsoft.com/en-us/security-guidance
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0297
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0297
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0299
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0299
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0300
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0300
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8462
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8462
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8465
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8465
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8468
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8468
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8469
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8469
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8474
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8474
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8476
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8476
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8477
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8477
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8478
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8478
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8479
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8479
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8480
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8480
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8481
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8481
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8482
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8482
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8484
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8484
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8485
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8485
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8489
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8489
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8490
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8490
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8491
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8491
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8492
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8492
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8494
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8494
statistics.securelist.com/vulnerability-scan/month
threats.kaspersky.com/en/class/Exploit/
threats.kaspersky.com/en/product/Microsoft-Windows-10/
threats.kaspersky.com/en/product/Microsoft-Windows-7/
threats.kaspersky.com/en/product/Microsoft-Windows-Server-2008/
threats.kaspersky.com/en/product/Microsoft-Windows-Server-2012/
threats.kaspersky.com/en/product/Windows-RT/
Related
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
46.5%