KLA11931 Multiple vulnerabilities in Microsoft Windows

🗓️ 11 Aug 2020 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 189 Views

Multiple vulnerabilities in Microsoft Windows regarding remote code execution, elevation of privilege, and information disclosure, leading to arbitrary code execution, privilege escalation, and sensitive information obtainment

Reporter	Title	Published	Views	Family All 191
Information Security Automation	Microsoft Patch Tuesday August 2020: vulnerabilities with Detected Exploitation, useful for phishing and others	30 Aug 202022:13	–	avleonov
BDU FSTEC	The vulnerability of the Windows Media Foundation component in Windows operating systems allows attackers to install programs, view, modify, or delete data with the privileges of a legitimate user.	20 Aug 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges	26 Aug 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of AppX Deployment Extensions in Windows operating systems allows attackers to enhance their privileges.	26 Aug 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the CSC Service in Windows operating systems allows attackers to escalate their privileges.	26 Aug 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Work Folder Service in Windows operating systems arises from improper handling of file operations, which allows attackers to exploit their privileges.	28 Aug 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Windows Runtime component of the Windows operating system, related to errors in memory object handling, allows a perpetrator to execute arbitrary code with elevated privileges.	28 Aug 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Jet Database Engine database management system in the Windows operating system, related to errors in object processing in memory, allows a perpetrator to execute arbitrary code.	28 Aug 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the WalletService service on Windows operating systems allows a perpetrator to escalate their privileges.	28 Aug 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft JET Database Engine database driver on the Windows operating system allows a hacker to execute arbitrary code.	28 Aug 202000:00	–	bdu_fstec

Source	Link
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-1492
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-1490
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-1552
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-1553
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-1550
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-1551
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-1556
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-1557
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-1554
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-1558

30 Sep 2026 00:00Current

8.1High risk

Vulners AI Score8.1

CVSS 29.3

CVSS 3.17.8 - 8

EPSS0.04179

SSVC