Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA11266
HistoryJun 12, 2018 - 12:00 a.m.

KLA11266 Multiple vulnerabilities in Microsoft Windows

2018-06-1200:00:00
Kaspersky Lab
threats.kaspersky.com
80

8.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.231 Low

EPSS

Percentile

96.5%

JSON

Detect date:

06/12/2018

Severity:

Critical

Description:

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, cause denial of service, bypass security restrictions, execute arbitrary code, obtain sensitive information.

Affected products:

Windows 10 Version 1607 for 32-bit Systems
Windows 10 Version 1607 for x64-based Systems
Windows 10 Version 1703 for 32-bit Systems
Windows 10 Version 1703 for x64-based Systems
Windows 10 Version 1709 for 32-bit Systems
Windows 10 Version 1803 for 32-bit Systems
Windows 10 Version 1803 for x64-based Systems
Windows 10 for 32-bit Systems
Windows 10 for x64-based Systems
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows 8.1 for 32-bit systems
Windows 8.1 for x64-based systems
Windows RT 8.1
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Windows Server 2008 for Itanium-Based Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
Windows Server 2012
Windows Server 2012 (Server Core installation)
Windows Server 2012 R2
Windows Server 2012 R2 (Server Core installation)
Windows Server 2016
Windows Server, version 1803 (Server Core Installation)
Windows Server 2016 (Server Core installation)
Windows 10 Version 1709 for x64-based Systems
Windows Server, version 1709 (Server Core Installation)

Solution:

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories:

CVE-2018-8140
CVE-2018-8226
CVE-2018-1040
CVE-2018-8212
CVE-2018-8201
CVE-2018-8205
CVE-2018-8221
CVE-2018-8213
CVE-2018-8219
CVE-2018-8217
CVE-2018-8210
CVE-2018-8233
CVE-2018-8169
CVE-2018-8239
CVE-2018-1036
CVE-2018-8121
CVE-2018-8231
CVE-2018-8207
CVE-2018-8251
CVE-2018-0982
CVE-2018-8215
CVE-2018-8211
CVE-2018-8214
CVE-2018-8218
CVE-2018-8225
CVE-2018-8209
CVE-2018-8208
CVE-2018-8175
CVE-2018-8216

Impacts:

ACE

Related products:

Microsoft Windows

CVE-IDS:

CVE-2018-81404.6Warning
CVE-2018-82267.8Critical
CVE-2018-10405.4High
CVE-2018-82124.6Warning
CVE-2018-82014.4Warning
CVE-2018-82054.9Warning
CVE-2018-82214.6Warning
CVE-2018-82137.2High
CVE-2018-82194.6Warning
CVE-2018-82174.6Warning
CVE-2018-82107.2High
CVE-2018-82337.2High
CVE-2018-81696.9High
CVE-2018-82394.3Warning
CVE-2018-10366.9High
CVE-2018-81211.9Warning
CVE-2018-82319.3Critical
CVE-2018-82071.9Warning
CVE-2018-82517.6Critical
CVE-2018-09826.9High
CVE-2018-82154.6Warning
CVE-2018-82114.6Warning
CVE-2018-82146.9High
CVE-2018-82186.8High
CVE-2018-82259.3Critical
CVE-2018-82092.7Warning
CVE-2018-82086.9High
CVE-2018-81757.1High
CVE-2018-82164.6Warning

Microsoft official advisories:

KB list:

4284860
4284874
4284835
4284880
4284819
4284855
4284815
4284878
4284846

Exploitation:

Public exploits exist for this vulnerability.

References

Related

openvas 7
nessus 9
mskb 15
prion 29
cve 29
talosblog 2
trendmicroblog 1
kaspersky 1
thn 2
qualysblog 1
threatpost 3
mscve 29
symantec 29
checkpoint_advisories 8
zdi 5
zdt 2
talos 1
seebug 1
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB4284880)
2018-06-13 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4284874)
2018-06-13 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4284819)
2018-06-13 00:00:00
nessus
nessus
KB4284880: Windows 10 Version 1607 and Windows Server 2016 June 2018 Security Update
2018-06-12 00:00:00
KB4284874: Windows 10 Version 1703 June 2018 Security Update
2018-06-12 00:00:00
KB4284819: Windows 10 Version 1709 and Windows Server Version 1709 June 2018 Security Update
2018-06-12 00:00:00
mskb
mskb
June 12, 2018—KB4284878 (Security-only update)
2018-06-12 07:00:00
June 12, 2018—KB4284846 (Security-only update)
2018-06-12 07:00:00
June 12, 2018—KB4284880 (OS Build 14393.2312)
2018-06-12 07:00:00
prion
prion
Security feature bypass
2018-06-14 12:29:00
Security feature bypass
2018-06-14 12:29:00
Security feature bypass
2018-06-14 12:29:00
cve
cve
CVE-2018-8221
2018-06-14 12:29:00
CVE-2018-8212
2018-06-14 12:29:00
CVE-2018-8201
2018-06-14 12:29:00
talosblog
talosblog
Microsoft Patch Tuesday - June 2018
2018-06-12 11:58:00
Vulnerability Spotlight: TALOS-2018-0545 - Microsoft wimgapi LoadIntegrityInfo Code Execution Vulnerability
2018-06-13 08:14:00
trendmicroblog
trendmicroblog
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of June 11, 2018
2018-06-15 12:39:57
kaspersky
kaspersky
KLA11892 Multiple vulnerabilties in Microsoft Products (ESU)
2018-06-12 00:00:00
thn
thn
Microsoft June 2018 Patch Tuesday Pushes 11 Critical Security Updates
2018-06-12 18:32:00
Cortana Software Could Help Anyone Unlock Your Windows 10 Computer
2018-06-13 14:40:00
qualysblog
qualysblog
June Patch Tuesday – New Speculative Store Bypass Fixes, Adobe Vulns
2018-06-12 18:32:53
threatpost
threatpost
June Patch Tuesday: Microsoft Issues Critical Fixes for DNS, Cortana
2018-06-12 21:36:17
Black Hat 2018: Cortana Flaw Allowed Takeover of Locked Windows 10 Device
2018-08-09 14:24:34
Microsoft Fixes 17 Critical Bugs in July Patch Tuesday Release
2018-07-10 19:50:41
mscve
mscve
Win32k Elevation of Privilege Vulnerability
2018-06-12 07:00:00
Windows Desktop Bridge Elevation of Privilege Vulnerability
2018-06-12 07:00:00
Windows GDI Information Disclosure Vulnerability
2018-06-12 07:00:00
symantec
symantec
Microsoft Windows WebDAV CVE-2018-8175 Denial of Service Vulnerability
2018-06-12 00:00:00
Microsoft Windows GDI Component CVE-2018-8239 Information Disclosure Vulnerability
2018-06-12 00:00:00
Microsoft Windows Hyper-V Code Integrity CVE-2018-8219 Privilege Escalation Vulnerability
2018-06-12 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Windows Desktop Bridge Elevation of Privilege (CVE-2018-8214)
2018-06-12 00:00:00
Microsoft Win32k Elevation of Privilege (CVE-2018-8233)
2018-06-12 00:00:00
Microsoft Windows Desktop Bridge Elevation of Privilege (CVE-2018-8208)
2018-06-12 00:00:00
zdi
zdi
Microsoft Windows PlayEnhMetaFile Out-Of-Bounds Read Information Disclosure Vulnerability
2018-06-13 00:00:00
Microsoft Internet Explorer EMF Graphic Out-Of-Bounds Read Information Disclosure Vulnerability
2018-07-13 00:00:00
Microsoft Windows PlayEnhMetaFile Out-Of-Bounds Read Information Disclosure Vulnerability
2018-06-13 00:00:00
zdt
zdt
Windows 10 - #Windows10 Desktop Bridge Activation Arbitrary Directory Creation Privilege Escalation
2018-06-20 00:00:00
Windows 10 - #Windows10 Desktop Bridge Virtual Registry Incomplete Fix Privilege Escalation
2018-06-20 00:00:00
talos
talos
Microsoft wimgapi LoadIntegrityInfo Code Execution Vulnerability
2018-06-12 00:00:00
seebug
seebug
Microsoft wimgapi LoadIntegrityInfo Code Execution Vulnerability(CVE-2018-8210)
2018-06-21 00:00:00

8.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.231 Low

EPSS

Percentile

96.5%

JSON
Related for KLA11266
openvas7nessus9mskb15prion29cve29talosblog2trendmicroblog1kaspersky1thn2qualysblog1threatpost3mscve29symantec29checkpoint_advisories8zdi5zdt2talos1seebug1