Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA11773
HistoryMay 12, 2020 - 12:00 a.m.

KLA11773 Multiple vulnerabilities in Microsoft Windows

2020-05-1200:00:00
Kaspersky Lab
threats.kaspersky.com
18

9.9 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

9.2 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.194 Low

EPSS

Percentile

96.2%

JSON

Detect date:

05/12/2020

Severity:

Critical

Description:

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges, cause denial of service, execute arbitrary code, bypass security restrictions, spoof user interface.

Exploitation:

Public exploits exist for this vulnerability.

Affected products:

Windows 10 Version 1803 for x64-based Systems
Windows 10 for 32-bit Systems
Windows 10 Version 1607 for x64-based Systems
Windows Server 2019 (Server Core installation)
Windows Server 2012 (Server Core installation)
Windows 10 Version 1903 for 32-bit Systems
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Windows 10 Version 1709 for x64-based Systems
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
Windows Server, version 1803 (Server Core Installation)
Windows Server 2012 R2
Windows 10 Version 1709 for 32-bit Systems
Windows 10 Version 1803 for 32-bit Systems
Windows 10 Version 1909 for 32-bit Systems
Windows Server 2016 (Server Core installation)
Windows Server 2019
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows 10 Version 1903 for x64-based Systems
Windows 8.1 for 32-bit systems
Windows 10 Version 1809 for ARM64-based Systems
Windows Server 2008 for Itanium-Based Systems Service Pack 2
Windows Server, version 1903 (Server Core installation)
Windows 10 Version 1607 for 32-bit Systems
Windows 8.1 for x64-based systems
Windows Server 2008 for x64-based Systems Service Pack 2
Windows 10 Version 1803 for ARM64-based Systems
Windows Server, version 1909 (Server Core installation)
Windows 10 Version 1909 for x64-based Systems
Windows 10 for x64-based Systems
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows 10 Version 1709 for ARM64-based Systems
Windows 10 Version 1809 for x64-based Systems
Windows Server 2012
Windows 10 Version 1903 for ARM64-based Systems
Windows RT 8.1
Windows 10 Version 1909 for ARM64-based Systems
Windows Server 2016
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2012 R2 (Server Core installation)
Windows 7 for 32-bit Systems Service Pack 1
Windows 10 Version 1809 for 32-bit Systems

Solution:

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories:

CVE-2020-1145
CVE-2020-1048
CVE-2020-1084
CVE-2020-0963
CVE-2020-1112
CVE-2020-1131
CVE-2020-1118
CVE-2020-1134
CVE-2020-1179
CVE-2020-1136
CVE-2020-0909
CVE-2020-1174
CVE-2020-1113
CVE-2020-1176
CVE-2020-1111
CVE-2020-1116
CVE-2020-1117
CVE-2020-1114
CVE-2020-1156
CVE-2020-1157
CVE-2020-1077
CVE-2020-1155
CVE-2020-1071
CVE-2020-1070
CVE-2020-1055
CVE-2020-1072
CVE-2020-1110
CVE-2020-1079
CVE-2020-1078
CVE-2020-1158
CVE-2020-1090
CVE-2020-1139
CVE-2020-1054
CVE-2020-1190
CVE-2020-1191
CVE-2020-1138
CVE-2020-1143
CVE-2020-1075
CVE-2020-1067
CVE-2020-1125
CVE-2020-1051
CVE-2020-1109
CVE-2020-1126
CVE-2020-1028
CVE-2020-1154
CVE-2020-1123
CVE-2020-1121
CVE-2020-1142
CVE-2020-1021
CVE-2020-1153
CVE-2020-1088
CVE-2020-1144
CVE-2020-1141
CVE-2020-1166
CVE-2020-1165
CVE-2020-1061
CVE-2020-1175
CVE-2020-1081
CVE-2020-1082
CVE-2020-1151
CVE-2020-1149
CVE-2020-1132
CVE-2020-1086
CVE-2020-1087
CVE-2020-1010
CVE-2020-1068
CVE-2020-1140
CVE-2020-1124
CVE-2020-1137
CVE-2020-1184
CVE-2020-1187
CVE-2020-1186
CVE-2020-1189
CVE-2020-1188
CVE-2020-1185
CVE-2020-1164
CVE-2020-1076
CVE-2020-1135

Impacts:

ACE

Related products:

Microsoft Windows

CVE-IDS:

CVE-2020-11452.1Warning
CVE-2020-10487.2High
CVE-2020-10842.1Warning
CVE-2020-09634.3Warning
CVE-2020-11129.0Critical
CVE-2020-11314.6Warning
CVE-2020-11187.8Critical
CVE-2020-11344.6Warning
CVE-2020-11794.3Warning
CVE-2020-11369.3Critical
CVE-2020-09095.0Warning
CVE-2020-11749.3Critical
CVE-2020-11139.3Critical
CVE-2020-11769.3Critical
CVE-2020-11117.2High
CVE-2020-11162.1Warning
CVE-2020-11179.3Critical
CVE-2020-11147.2High
CVE-2020-11566.8High
CVE-2020-11576.8High
CVE-2020-10774.6Warning
CVE-2020-11556.8High
CVE-2020-10717.2High
CVE-2020-10707.2High
CVE-2020-10554.3Warning
CVE-2020-10722.1Warning
CVE-2020-11107.2High
CVE-2020-10797.2High
CVE-2020-10784.6Warning
CVE-2020-11586.8High
CVE-2020-10904.6Warning
CVE-2020-11396.8High
CVE-2020-10547.2High
CVE-2020-11904.6Warning
CVE-2020-11914.6Warning
CVE-2020-11387.2High
CVE-2020-11437.2High
CVE-2020-10752.1Warning
CVE-2020-10679.0Critical
CVE-2020-11256.8High
CVE-2020-10519.3Critical
CVE-2020-11097.2High
CVE-2020-11269.3Critical
CVE-2020-10289.3Critical
CVE-2020-11547.2High
CVE-2020-11232.1Warning
CVE-2020-11217.2High
CVE-2020-11427.2High
CVE-2020-10214.6Warning
CVE-2020-11539.3Critical
CVE-2020-10884.6Warning
CVE-2020-11444.6Warning
CVE-2020-11412.1Warning
CVE-2020-11667.2High
CVE-2020-11657.2High
CVE-2020-10619.3Critical
CVE-2020-11759.3Critical
CVE-2020-10817.2High
CVE-2020-10824.6Warning
CVE-2020-11516.8High
CVE-2020-11496.8High
CVE-2020-11327.2High
CVE-2020-10864.6Warning
CVE-2020-10874.6Warning
CVE-2020-10107.2High
CVE-2020-10687.2High
CVE-2020-11407.2High
CVE-2020-11244.6Warning
CVE-2020-11377.2High
CVE-2020-11844.6Warning
CVE-2020-11874.6Warning
CVE-2020-11864.6Warning
CVE-2020-11894.6Warning
CVE-2020-11884.6Warning
CVE-2020-11854.6Warning
CVE-2020-11646.8High
CVE-2020-10762.1Warning
CVE-2020-11357.2High

KB list:

4556799
4556846
4556840
4556826
4556813
4556812
4551853
4556807
4556852
4556853

Microsoft official advisories:

References

Related

mskb 14
openvas 8
nessus 10
cve 64
prion 64
kaspersky 1
avleonov 1
krebs 1
attackerkb 3
threatpost 1
ibm 1
mscve 21
checkpoint_advisories 2
packetstorm 1
zdi 3
zdt 1
fireeye 1
cnvd 2
mskb
mskb
May 12, 2020—KB4556852 (Security-only update)
2020-05-12 07:00:00
May 12, 2020—KB4556854 (Security-only update)
2020-05-12 07:00:00
May 12, 2020—KB4556853 (Security-only update)
2020-05-12 07:00:00
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB4556813)
2020-05-13 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4551853)
2020-05-13 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4556812)
2020-05-13 00:00:00
nessus
nessus
KB4556812: Windows 10 Version 1709 May 2020 Security Update
2020-05-12 00:00:00
KB4556799: Windows 10 Version 1903 and Windows 10 Version 1909 May 2020 Security Update
2020-05-12 00:00:00
KB4556813: Windows 10 Version 1607 and Windows Server 2016 May 2020 Security Update
2020-05-12 00:00:00
cve
cve
CVE-2020-1188
2020-05-21 23:15:00
CVE-2020-1144
2020-05-21 23:15:00
CVE-2020-1124
2020-05-21 23:15:00
prion
prion
Privilege escalation
2020-05-21 23:15:00
Privilege escalation
2020-05-21 23:15:00
Privilege escalation
2020-05-21 23:15:00
kaspersky
kaspersky
KLA11777 Multiple vulnerabilities in Microsoft Products (ESU)
2020-05-12 00:00:00
avleonov
avleonov
Microsoft Patch Tuesday May 2020: comments from VM vendors, promising stuff for phishing, troubles with SharePoint and lulz with Visual Studio
2020-05-13 00:49:16
krebs
krebs
Microsoft Patch Tuesday, May 2020 Edition
2020-05-12 21:16:38
attackerkb
attackerkb
CVE-2020-1143
2020-05-21 00:00:00
CVE-2020-1054
2020-05-21 00:00:00
CVE-2020-1048: Windows Print Spooler Elevation of Privilege Vulnerability
2020-05-21 00:00:00
threatpost
threatpost
Microsoft Addresses 111 Bugs for May Patch Tuesday
2020-05-12 20:14:28
ibm
ibm
Security Bulletin: IBM MaaS360 Cloud Extender has security vulnerabilities (CVE-2020-1155, CVE-2020-1156)
2021-01-13 17:58:33
mscve
mscve
Windows Kernel Elevation of Privilege Vulnerability
2020-05-12 07:00:00
Windows Graphics Component Elevation of Privilege Vulnerability
2020-05-12 07:00:00
Windows Update Stack Elevation of Privilege Vulnerability
2020-05-12 07:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Windows Graphics Component Elevation of Privilege (CVE-2020-1135)
2020-05-12 00:00:00
Microsoft Win32k Elevation of Privilege (CVE-2020-1143)
2020-05-12 00:00:00
packetstorm
packetstorm
Microsoft Windows Task Scheduler Security Feature Bypass
2020-05-15 00:00:00
zdi
zdi
(Pwn2Own) Microsoft Windows DirectComposition SetReferenceArrayProperty Use-After-Free Privilege Escalation Vulnerability
2020-05-12 00:00:00
Microsoft Windows JET Database Engine Memory Corruption Remote Code Execution Vulnerability
2020-05-12 00:00:00
Microsoft Windows JET Database Engine Memory Corruption Remote Code Execution Vulnerability
2020-05-12 00:00:00
zdt
zdt
Microsoft Windows Task Scheduler Security Feature Bypass Vulnerability
2020-05-16 00:00:00
fireeye
fireeye
Fuzzing Image Parsing in Windows, Part One: Color Profiles
2020-09-24 00:00:00
cnvd
cnvd
Microsoft Windows and Windows Server Elevation of Privilege Vulnerability (CNVD-2021-61785)
2020-05-13 00:00:00
Microsoft Windows and Windows Server Remote Code Execution Vulnerability (CNVD-2021-71414)
2020-05-13 00:00:00

9.9 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

9.2 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.194 Low

EPSS

Percentile

96.2%

JSON
Related for KLA11773
mskb14openvas8nessus10cve64prion64kaspersky1avleonov1krebs1attackerkb3threatpost1ibm1mscve21checkpoint_advisories2packetstorm1zdi3zdt1fireeye1cnvd2