KLA11746 Multiple vulnerabilities in Microsoft Apps

Multiple vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to gain privileges.

Below is a complete list of vulnerabilities:

1. Unspecified Microsoft can be exploited remotely to gain privileges.
2. An elevation of privilege vulnerability in Microsoft Remote Desktop App for Mac can be exploited remotely to gain privileges.
3. An elevation of privilege vulnerability in Microsoft RMS Sharing App for Mac can be exploited remotely to gain privileges.

Original advisories

CVE-2020-0943

CVE-2020-0919

CVE-2020-1019

Related products

Microsoft-Authentification-Library-for-Android

CVE list

CVE-2020-0943 warning

CVE-2020-0919 warning

CVE-2020-1019 warning

KB list

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Impacts

• PE

Privilege escalation. Exploitation of vulnerabilities with this impact can lead to performing by abuser actions, which are normally disallowed for current role.

Affected Products

• Microsoft Remote Desktop for MacMicrosoft RMS Sharing for MacMicrosoft Your Phone Companion App for Android