Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA11354
HistoryNov 13, 2018 - 12:00 a.m.

KLA11354 Multiple vulnerabilities in Microsoft Windows

2018-11-1300:00:00
Kaspersky Lab
threats.kaspersky.com
676

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.6 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.947 High

EPSS

Percentile

99.2%

JSON

Detect date:

11/13/2018

Severity:

Critical

Description:

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, bypass security restrictions, spoof user interface.

Affected products:

Windows 10 Version 1709 for 32-bit Systems
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
Windows Server 2008 for x64-based Systems Service Pack 2
Windows 10 for x64-based Systems
Windows 10 Version 1703 for x64-based Systems
Windows Server 2016
Windows Server 2012 (Server Core installation)
Windows Server 2012 R2
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Windows 8.1 for 32-bit systems
Windows 10 Version 1607 for x64-based Systems
Windows Server 2008 for Itanium-Based Systems Service Pack 2
Windows 10 Version 1607 for 32-bit Systems
Windows 10 Version 1803 for 32-bit Systems
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
Windows 7 for 32-bit Systems Service Pack 1
Windows Server 2012 R2 (Server Core installation)
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Windows 8.1 for x64-based systems
Windows 10 Version 1709 for ARM64-based Systems
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2012
Windows RT 8.1
Windows 10 for 32-bit Systems
Windows 10 Version 1803 for ARM64-based Systems
Windows 10 Version 1803 for x64-based Systems
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows 10 Version 1703 for 32-bit Systems
Windows 10 Version 1809 for 32-bit Systems
Windows Server 2019
Windows 10 Version 1809 for x64-based Systems
Windows 10 Version 1809 for ARM64-based Systems
PowerShell Core 6.0
PowerShell Core 6.1
Microsoft.PowerShell.Archive 1.2.2.0
Windows Server 2016 (Server Core installation)
Windows Server 2019 (Server Core installation)
Windows Server, version 1803 (Server Core Installation)
Windows 10 Version 1709 for x64-based Systems

Solution:

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories:

CVE-2018-8408
CVE-2018-8553
CVE-2018-8550
CVE-2018-8454
CVE-2018-8562
CVE-2018-8566
CVE-2018-8561
CVE-2018-8563
CVE-2018-8592
CVE-2018-8415
CVE-2018-8471
CVE-2018-8547
CVE-2018-8544
CVE-2018-8584
CVE-2018-8485
CVE-2018-8476
CVE-2018-8256
CVE-2018-8565
CVE-2018-8554
CVE-2018-8417
CVE-2018-8549
CVE-2018-8450
CVE-2018-8407
ADV990001

Impacts:

ACE

Related products:

Microsoft Windows

CVE-IDS:

CVE-2018-84085.5High
CVE-2018-85537.8Critical
CVE-2018-85507.8Critical
CVE-2018-84545.5High
CVE-2018-85627.8Critical
CVE-2018-85664.6Warning
CVE-2018-85617.8Critical
CVE-2018-85635.5High
CVE-2018-85926.4High
CVE-2018-84157.8Critical
CVE-2018-84717.8Critical
CVE-2018-85475.4High
CVE-2018-85448.8Critical
CVE-2018-85847.8Critical
CVE-2018-84857.8Critical
CVE-2018-84769.8Critical
CVE-2018-82568.8Critical
CVE-2018-85655.5High
CVE-2018-85547.8Critical
CVE-2018-84175.3High
CVE-2018-85495.5High
CVE-2018-84508.8Critical
CVE-2018-84075.5High

KB list:

4467680
4467708
4467691
4467702
4467686
4467696
4467701
4467697
4465664
4465663
4467703
4465660
4467678
4465659
4465661
4565553
5005112
4586863
5001400
5005260
5005412
5018922
5035962
5035966

Microsoft official advisories:

Exploitation:

Public exploits exist for this vulnerability.

References

Related

nessus 15
openvas 16
mskb 22
kaspersky 2
prion 23
cve 23
talosblog 1
thn 1
qualysblog 1
osv 2
mscve 23
symantec 17
checkpoint_advisories 10
veracode 1
zdi 2
zdt 3
myhack58 2
exploitpack 1
packetstorm 1
exploitdb 1
krebs 1
threatpost 1
nessus
nessus
KB4467702: Windows 10 Version 1803 and Windows Server Version 1803 November 2018 Security Update
2019-03-13 00:00:00
KB4467686: Windows 10 Version 1709 and Windows Server Version 1709 November 2018 Security Update
2018-11-13 00:00:00
KB4467703: Windows 8.1 and Windows Server 2012 R2 November 2018 Security Update
2018-11-13 00:00:00
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB4467697)
2018-11-14 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4467107)
2018-11-14 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4467691)
2018-11-14 00:00:00
mskb
mskb
November 13, 2018—KB4467703 (Security-only update)
2018-11-13 08:00:00
November 13, 2018—KB4467678 (Security-only update)
2018-11-13 08:00:00
November 13, 2018—KB4467701 (Monthly Rollup)
2018-11-13 08:00:00
kaspersky
kaspersky
KLA11898 Multiple vulnerabilities in Microsoft Products (ESU)
2018-11-13 00:00:00
KLA11358 Multiple vulnerabilities in Microsoft Development Tools
2018-11-13 00:00:00
prion
prion
Privilege escalation
2018-11-14 01:29:00
Privilege escalation
2018-11-14 01:29:00
Privilege escalation
2018-11-14 01:29:00
cve
cve
CVE-2018-8561
2018-11-14 01:29:00
CVE-2018-8485
2018-11-14 01:29:00
CVE-2018-8554
2018-11-14 01:29:00
talosblog
talosblog
Microsoft Patch Tuesday — November 2018: Vulnerability disclosures and Snort coverage
2018-11-13 10:53:00
thn
thn
63 New Flaws (Including 0-Days) Windows Users Need to Patch Now
2018-11-14 09:55:00
qualysblog
qualysblog
November 2018 Patch Tuesday – 62 Vulns, TFTP Server RCE, Adobe PoC
2018-11-13 18:46:17
osv
osv
CVE-2018-8415
2018-11-14 01:29:00
CVE-2018-8256
2018-11-14 01:29:00
mscve
mscve
Windows Remote Procedure Call Information Disclosure Vulnerability
2018-11-13 08:00:00
Microsoft PowerShell Remote Code Execution Vulnerability
2018-11-13 08:00:00
Windows ALPC Elevation of Privilege Vulnerability
2018-11-13 08:00:00
symantec
symantec
Microsoft Windows PowerShell CVE-2018-8256 Remote Code Execution Vulnerability
2018-11-13 00:00:00
Microsoft Windows BitLocker Security Feature CVE-2018-8566 Local Security Bypass Vulnerability
2018-11-13 00:00:00
Microsoft Powershell CVE-2018-8415 Tampering Security Bypass Vulnerability
2018-11-13 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Windows ALPC Elevation of Privilege (CVE-2018-8584)
2018-11-13 00:00:00
Microsoft JScript Security Feature Bypass (CVE-2018-8417)
2018-11-13 00:00:00
Microsoft Graphics Components Remote Code Execution (CVE-2018-8553)
2018-11-13 00:00:00
veracode
veracode
Code Injection
2018-11-15 06:42:35
zdi
zdi
Microsoft Windows NtGdiExtTextOutW Out-Of-Bounds Write Privilege Escalation Vulnerability
2018-11-21 00:00:00
Microsoft Windows VBScript Class_Terminate Scripting.Dictionary Use-After-Free Remote Code Execution Vulnerability
2018-11-21 00:00:00
zdt
zdt
Microsoft Windows - DSSVC CheckFilePermission Arbitrary File Deletion Exploit
2019-01-09 00:00:00
Microsoft VBScript OLEAUT32!VariantClear / scrrun!VBADictionary::put_Item Use-After-Free
2018-12-01 00:00:00
Microsoft Windows - DfMarshal Unsafe Unmarshaling Privilege Escalation Exploit
2018-11-20 00:00:00
myhack58
myhack58
CNNVD about Microsoft more security vulnerability Advisory-vulnerability warning-the black bar safety net
2018-11-15 00:00:00
By 2019, 3-month Microsoft patch day multiple vulnerabilities early warning-vulnerability warning-the black bar safety net
2019-03-17 00:00:00
exploitpack
exploitpack
Microsoft Windows - DfMarshal Unsafe Unmarshaling Privilege Escalation
2018-11-20 00:00:00
packetstorm
packetstorm
Microsoft VBScript OLEAUT32!VariantClear / scrrun!VBADictionary::put_Item Use-After-Free
2018-11-30 00:00:00
exploitdb
exploitdb
Microsoft Windows - DfMarshal Unsafe Unmarshaling Privilege Escalation
2018-11-20 00:00:00
krebs
krebs
Patch Tuesday, November 2018 Edition
2018-11-14 13:25:13
threatpost
threatpost
Microsoft Patches Zero-Day Bug in Win7, Server 2008 and 2008 R2
2018-11-13 22:10:46

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.6 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.947 High

EPSS

Percentile

99.2%

JSON
Related for KLA11354
nessus15openvas16mskb22kaspersky2prion23cve23talosblog1thn1qualysblog1osv2mscve23symantec17checkpoint_advisories10veracode1zdi2zdt3myhack582exploitpack1packetstorm1exploitdb1krebs1threatpost1