KLA11978 Multiple vulnerabilities in Microsoft Products (ESU)

🗓️ 13 Oct 2020 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 52 Views

Multiple vulnerabilities in Microsoft Products (ESU). Malicious users can gain privileges, execute arbitrary code, cause denial of service, and obtain sensitive information. Vulnerabilities found in Windows KernelStream, Network Connections Service, Jet Database Engine, Remote Desktop Service, Application Compatibility Client Library, Microsoft Graphics Components, Windows Installer, Windows Event System, User Profile Service, Windows Hyper-V, NetBT, Backup Service, COM Server, Windows GDI+, and Group Policy

Reporter	Title	Published	Views	Family All 279
ATTACKERKB	CVE-2019-1415	12 Nov 201900:00	–	attackerkb
ATTACKERKB	CVE-2020-16916	16 Oct 202000:00	–	attackerkb
Information Security Automation	Vulristics Vulnerability Score, Automated Data Collection and Microsoft Patch Tuesdays Q4 2020	11 Jan 202101:50	–	avleonov
BDU FSTEC	The vulnerability of the Windows operating system’s event system, which allows a perpetrator to escalate their privileges	16 Oct 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to execute arbitrary code.	16 Oct 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the KernelStream component of the Windows operating system, which allows a hacker to gain unauthorized access to protected information	16 Oct 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementation of the NetBIOS protocol on Windows operating systems allows a perpetrator to gain unauthorized access to protected information.	16 Oct 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Remote Desktop Services (RDS) for Windows operating systems allows a hacker to trigger a service failure.	16 Oct 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Windows COM Server component of the Windows operating system, which allows attackers to escalate their privileges	20 Oct 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Windows operating system installers allows a hacker to increase their privileges.	20 Oct 202000:00	–	bdu_fstec

Source	Link
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-16889
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-16887
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-16924
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-16863
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-16920
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-16922
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-16923
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-16902
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-16900
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-16940

02 Apr 2025 00:00Current

9.5High risk

Vulners AI Score9.5

CVSS 3.18.8

CVSS 29.3

EPSS0.05418

SSVC