Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA11165
HistoryJan 03, 2018 - 12:00 a.m.

KLA11165 Microsoft vulnerabilities in Microsoft Windows

2018-01-0300:00:00
Kaspersky Lab
threats.kaspersky.com
482

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.005 Low

EPSS

Percentile

75.0%

JSON

Detect date:

01/03/2018

Severity:

High

Description:

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, cause denial of service.

Affected products:

Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2012 R2 (Server Core installation)
Windows 10 Version 1511 for 32-bit Systems
Windows 8.1 for 32-bit systems
Windows 8.1 for x64-based systems
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
Windows 10 Version 1511 for x64-based Systems
Windows 10 Version 1607 for x64-based Systems
Windows 10 Version 1607 for 32-bit Systems
Windows 7 for x64-based Systems Service Pack 1
Windows 10 for x64-based Systems
Windows 7 for 32-bit Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Windows Server 2012 R2
Windows 10 for 32-bit Systems
Windows Server 2016
Windows 10 Version 1703 for x64-based Systems
Windows 10 Version 1703 for 32-bit Systems
Windows 10 Version 1709 for 32-bit Systems
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for Itanium-Based Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Windows Server 2012
Windows Server 2012 (Server Core installation)
Windows Server 2016 (Server Core installation)
Windows 10 Version 1709 for x64-based Systems

Solution:

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories:

CVE-2018-0743
CVE-2018-0744
CVE-2018-0745
CVE-2018-0746
CVE-2018-0747
CVE-2018-0748
CVE-2018-0749
CVE-2018-0751
CVE-2018-0752
CVE-2018-0753
CVE-2018-0754
CVE-2018-0788
ADV180002

Impacts:

OSI

Related products:

Microsoft Windows

CVE-IDS:

CVE-2018-07434.4Warning
CVE-2018-07444.4Warning
CVE-2018-07451.9Warning
CVE-2018-07461.9Warning
CVE-2018-07471.9Warning
CVE-2018-07484.6Warning
CVE-2018-07494.6Warning
CVE-2018-07513.6Warning
CVE-2018-07524.6Warning
CVE-2018-07537.1High
CVE-2018-07542.1Warning
CVE-2018-07886.9High

Microsoft official advisories:

KB list:

4093112
4056898
4056888
4056890
4056893
4056891
4056892
4056896
4056899
4074591
4056895
4074590
4103723
4284860
4284874
4338830
4338820
4338816
4338831
4345424
4345425
4467708
4493464
4493467
4493446

Exploitation:

Public exploits exist for this vulnerability.

References

Related

mskb 17
openvas 8
nessus 9
prion 12
cve 12
kaspersky 1
mscve 12
zdt 8
packetstorm 1
symantec 1
googleprojectzero 2
talosblog 1
trendmicroblog 1
mskb
mskb
January 3, 2018—KB4056899 (Security-only update)
2018-01-03 08:00:00
January 3, 2018—KB4056898 (Security-only update)
2018-01-03 08:00:00
January 4, 2018—KB4056896 (Monthly Rollup)
2018-01-03 08:00:00
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB4056899)
2018-01-04 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4056898)
2018-01-04 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4056897)
2018-01-04 00:00:00
nessus
nessus
KB4056899: Windows Server 2012 January 2018 Security Update
2018-01-04 00:00:00
KB4056898: Windows 8.1 and Windows Server 2012 R2 January 2018 Security Update (Meltdown)(Spectre)
2018-01-04 00:00:00
KB4056891: Windows 10 Version 1703 January 2018 Security Update (Meltdown)(Spectre)
2018-01-04 00:00:00
prion
prion
Information disclosure
2018-01-04 14:29:00
Information disclosure
2018-01-04 14:29:00
Information disclosure
2018-01-04 14:29:00
cve
cve
CVE-2018-0745
2018-01-04 14:29:00
CVE-2018-0747
2018-01-04 14:29:00
CVE-2018-0746
2018-01-04 14:29:00
kaspersky
kaspersky
KLA11167 Multiple vulnerabilities in Microsoft Products (ESU)
2018-01-03 00:00:00
mscve
mscve
Windows Kernel Information Disclosure Vulnerability
2018-01-03 08:00:00
Windows Kernel Elevation of Privilege Vulnerability
2018-01-03 08:00:00
Windows Elevation of Privilege Vulnerability
2018-01-03 08:00:00
zdt
zdt
Microsoft Windows - nt!NtQueryInformationProcess (information class 76, QueryProcessEnergyValues) Ke
2018-01-09 00:00:00
Microsoft Windows win32k - Using SetClassLong to Switch Between CS_CLASSDC and CS_OWNDC Corrupts DC
2018-01-06 00:00:00
Microsoft Windows Subsystem for Linux - execve() Local Privilege Escalation Exploit
2018-02-03 00:00:00
packetstorm
packetstorm
Microsoft Windows Subsystem For Linux Local Privilege Escalation
2018-02-02 00:00:00
symantec
symantec
Microsoft Windows Kernel CVE-2018-0746 Local Information Disclosure Vulnerability
2018-01-03 00:00:00
googleprojectzero
googleprojectzero
Windows‌ ‌Exploitation‌ ‌Tricks:‌ ‌Spoofing‌ ‌Named‌ ‌Pipe‌ ‌Client‌ ‌PID‌
2019-09-25 00:00:00
Windows Kernel Logic Bug Class: Access Mode Mismatch in IO Manager
2019-03-14 00:00:00
talosblog
talosblog
Microsoft Patch Tuesday - January 2018
2018-01-09 13:36:00
trendmicroblog
trendmicroblog
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of January 8, 2018
2018-01-12 15:09:44

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.005 Low

EPSS

Percentile

75.0%

JSON
Related for KLA11165
mskb17openvas8nessus9prion12cve12kaspersky1mscve12zdt8packetstorm1symantec1googleprojectzero2talosblog1trendmicroblog1