KLA11874 Multiple vulnerabilities in Microsoft Products (ESU)

🗓️ 11 Jun 2019 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 128 Views

Multiple vulnerabilities in Microsoft Products. Malicious exploits for information disclosure, privilege gain, code execution, UI spoofing, denial of service, and security restriction bypass. Complete list below

Reporter	Title	Published	Views	Family All 299
BDU FSTEC	The vulnerability of the JET Database Engine database driver for Windows operating systems arises from the possibility of operations occurring outside the buffer in memory, allowing an attacker to execute arbitrary code.	18 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Windows GDI interface on Windows operating systems allows attackers to disclose protected information.	18 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Windows GDI interface on Windows operating systems allows attackers to disclose protected information.	18 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Windows GDI component in Windows operating systems allows attackers to disclose protected information.	21 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Windows GDI component in Windows operating systems allows attackers to disclose protected information.	21 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Windows GDI component in Windows operating systems allows attackers to disclose protected information.	21 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Win32k component of the Windows operating system allows a hacker to increase their privileges and execute arbitrary code in kernel mode.	21 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Windows Jet Database Engine database management system in the Windows operating system allows a hacker to execute arbitrary code.	21 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Windows Jet Database Engine database management system in the Windows operating system allows a hacker to execute arbitrary code.	21 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Windows GDI component in Windows operating systems allows attackers to disclose protected information.	21 Jun 201900:00	–	bdu_fstec

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2019-0986
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2019-0973
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1040
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2019-0909
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2019-0948
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1019
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1010
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1053
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2019-0908
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2019-0977

31 Aug 2026 00:00Current

7.9High risk

Vulners AI Score7.9

CVSS 38.8

CVSS 29.3

CVSS 3.17.8

EPSS0.48488