KLA11951 Multiple vulnerabilities in Microsoft Windows

🗓️ 08 Sep 2020 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 74 Views

Multiple vulnerabilities in Microsoft Windows including elevation of privilege, remote code execution, information disclosure, denial of service, and spoofing

Reporter	Title	Published	Views	Family All 169
Information Security Automation	Microsoft Patch Tuesday September 2020: Zerologon and other exploits, RCEs in SharePoint and Exchange	30 Sep 202023:46	–	avleonov
BDU FSTEC	The vulnerability of the Win32k component of the Windows operating system, which allows a hacker to disclose protected information	22 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the dnsrslvr.dll library in the Windows operating system allows a hacker to increase their privileges.	22 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Active Directory Federation Services (ADFS) for Windows operating systems allows a perpetrator to carry out spoofing attacks.	22 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the NTFS file system in Windows operating systems allows attackers to increase their privileges.	22 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Active Directory integrated DNS (ADIDNS) component in Microsoft Windows operating systems allows a perpetrator to gain unauthorized access to protected information.	22 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Component Object Model (COM) in Windows operating systems allows a hacker to execute arbitrary code.	22 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the win32k component of the Windows operating system, which allows a hacker to disclose protected information	22 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Windows DNS services in Windows operating systems allows a perpetrator to cause service failures.	22 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Hyper-V hardware virtualization system for Windows operating systems allows a perpetrator to trigger a service failure.	22 Sep 202000:00	–	bdu_fstec

Source	Link
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0838
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0839
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0922
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-1250
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0856
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0836
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0837
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0890
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0989
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-1228

26 Jun 2026 00:00Current

9.7Critical risk

Vulners AI Score9.7

CVSS 29.3

CVSS 3.18.8

EPSS0.05051

SSVC