Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA12004
HistoryNov 10, 2020 - 12:00 a.m.

KLA12004 Multiple vulnerabilities in Microsoft Windows

2020-11-1000:00:00
Kaspersky Lab
threats.kaspersky.com
49

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.143 Low

EPSS

Percentile

95.6%

JSON

Detect date:

11/10/2020

Severity:

Critical

Description:

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, bypass security restrictions, cause denial of service, spoof user interface.

Exploitation:

Public exploits exist for this vulnerability.

Affected products:

Windows 10 Version 1909 for ARM64-based Systems
Windows Server 2019
Windows 10 Version 1903 for ARM64-based Systems
Windows 8.1 for x64-based systems
Windows Server, version 1903 (Server Core installation)
Raw Image Extension
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Windows 10 Version 1809 for ARM64-based Systems
Windows 10 Version 1803 for 32-bit Systems
Windows Server 2012 R2 (Server Core installation)
Windows 10 Version 1607 for x64-based Systems
Windows Server 2019 (Server Core installation)
Windows 10 Version 1809 for 32-bit Systems
Windows Server, version 1909 (Server Core installation)
Windows 10 Version 20H2 for x64-based Systems
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows 10 for 32-bit Systems
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows 10 Version 2004 for ARM64-based Systems
AV1 Video Extension
Windows 10 Version 20H2 for 32-bit Systems
Windows 10 Version 1909 for x64-based Systems
Windows RT 8.1
WebP Image Extension
Windows 10 Version 1803 for ARM64-based Systems
Windows Server, version 20H2 (Server Core Installation)
Windows 10 Version 1607 for 32-bit Systems
Windows 10 Version 1809 for x64-based Systems
Windows Server 2012 (Server Core installation)
Windows 10 Version 2004 for x64-based Systems
Windows 10 Version 2004 for 32-bit Systems
Windows 10 Version 1903 for x64-based Systems
Windows 10 Version 1803 for x64-based Systems
HEVC Video Extensions
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Windows 10 for x64-based Systems
Windows Server 2012
HEIF Image Extension
Windows Server 2016 (Server Core installation)
Windows 7 for x64-based Systems Service Pack 1
Windows 8.1 for 32-bit systems
Windows Server 2012 R2
Windows 10 Version 1903 for 32-bit Systems
Windows Server 2016
Windows 10 Version 20H2 for ARM64-based Systems
Windows 10 Version 1909 for 32-bit Systems
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
Windows Server, version 2004 (Server Core installation)
Windows 7 for 32-bit Systems Service Pack 1

Solution:

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories:

CVE-2020-17081
CVE-2020-17082
CVE-2020-17075
CVE-2020-17049
CVE-2020-17086
CVE-2020-17087
CVE-2020-17088
CVE-2020-17045
CVE-2020-17046
CVE-2020-17047
CVE-2020-17040
CVE-2020-17041
CVE-2020-17042
CVE-2020-17043
CVE-2020-17101
CVE-2020-17026
CVE-2020-17102
CVE-2020-17106
CVE-2020-17028
CVE-2020-17029
CVE-2020-17000
CVE-2020-17001
CVE-2020-17024
CVE-2020-17025
CVE-2020-17004
CVE-2020-17068
CVE-2020-17007
CVE-2020-17069
CVE-2020-16999
CVE-2020-17038
CVE-2020-17034
CVE-2020-1599
CVE-2020-17044
CVE-2020-17109
CVE-2020-17033
CVE-2020-17090
CVE-2020-17027
CVE-2020-17030
CVE-2020-17051
CVE-2020-17057
CVE-2020-17056
CVE-2020-17055
CVE-2020-17108
CVE-2020-17070
CVE-2020-17073
CVE-2020-17014
CVE-2020-17013
CVE-2020-17074
CVE-2020-17011
CVE-2020-17010
CVE-2020-17035
CVE-2020-17078
CVE-2020-17037
CVE-2020-17036
CVE-2020-17031
CVE-2020-16998
CVE-2020-17076
CVE-2020-17032
CVE-2020-16997
CVE-2020-17071
CVE-2020-17113
CVE-2020-17077
CVE-2020-17110
CVE-2020-17107
CVE-2020-17105
CVE-2020-17079
CVE-2020-17012

Impacts:

ACE

Related products:

Microsoft Windows Server 2012

CVE-IDS:

CVE-2020-170437.8Critical
CVE-2020-170695.5High
CVE-2020-170877.8Critical
CVE-2020-170887.8Critical
CVE-2020-170455.5High
CVE-2020-170519.8Critical
CVE-2020-170477.5Critical
CVE-2020-170428.8Critical
CVE-2020-15995.5High
CVE-2020-170447.8Critical
CVE-2020-169977.7Critical
CVE-2020-170147.8Critical
CVE-2020-170387.8Critical
CVE-2020-170117.8Critical
CVE-2020-170295.5High
CVE-2020-170005.5High
CVE-2020-170017.8Critical
CVE-2020-170687.8Critical
CVE-2020-170365.5High
CVE-2020-170045.5High
CVE-2020-170815.5High
CVE-2020-170827.8Critical
CVE-2020-170757.8Critical
CVE-2020-170496.6High
CVE-2020-170867.8Critical
CVE-2020-170465.5High
CVE-2020-170406.5High
CVE-2020-170417.8Critical
CVE-2020-171017.8Critical
CVE-2020-170267.8Critical
CVE-2020-171025.5High
CVE-2020-171067.8Critical
CVE-2020-170287.8Critical
CVE-2020-170247.8Critical
CVE-2020-170257.8Critical
CVE-2020-170077.0High
CVE-2020-169995.5High
CVE-2020-170347.8Critical
CVE-2020-171097.8Critical
CVE-2020-170337.8Critical
CVE-2020-170905.3High
CVE-2020-170277.8Critical
CVE-2020-170305.5High
CVE-2020-170577.0High
CVE-2020-170565.5High
CVE-2020-170557.8Critical
CVE-2020-171087.8Critical
CVE-2020-170707.8Critical
CVE-2020-170737.8Critical
CVE-2020-170135.5High
CVE-2020-170747.8Critical
CVE-2020-170107.8Critical
CVE-2020-170357.8Critical
CVE-2020-170787.8Critical
CVE-2020-170377.8Critical
CVE-2020-170317.8Critical
CVE-2020-169987.0High
CVE-2020-170767.8Critical
CVE-2020-170327.8Critical
CVE-2020-170715.5High
CVE-2020-171135.5High
CVE-2020-170777.8Critical
CVE-2020-171107.8Critical
CVE-2020-171077.8Critical
CVE-2020-171057.8Critical
CVE-2020-170797.8Critical
CVE-2020-170127.8Critical

KB list:

4586785
4586793
4586787
4586786
4586781
4586834
4586830
4586845
4586808
4586823
4592449
4598278
4598297
5001337
5004238
5004302
5004294
5004237
5004244
5004298
5004285

Microsoft official advisories:

References

Related

nessus 10
openvas 9
mskb 14
kaspersky 1
threatpost 1
prion 48
cve 43
mscve 44
krebs 1
checkpoint_advisories 5
thn 1
cnvd 18
githubexploit 2
zdi 2
nessus
nessus
KB4586793: Windows 10 Version 1809 and Windows Server 2019 November 2020 Security Update
2020-11-10 00:00:00
KB4586786: Windows 10 Version 1903 and Windows 10 Version 1909 November 2020 Security Update
2020-11-10 00:00:00
KB4586785: Windows 10 Version 1803 November 2020 Security Update
2020-11-10 00:00:00
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB4586785)
2020-11-11 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4586781)
2020-11-11 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4586845)
2020-11-11 00:00:00
mskb
mskb
November 10, 2020—KB4586823 (Security-only update)
2020-11-10 08:00:00
November 10, 2020—KB4586808 (Security-only update)
2020-11-10 08:00:00
November 10, 2020—KB4586786 (OS Builds 18362.1198 and 18363.1198) - EXPIRED
2020-11-10 08:00:00
kaspersky
kaspersky
KLA12003 Multiple vulnerabilities in Microsoft Products (ESU)
2020-11-10 00:00:00
threatpost
threatpost
Microsoft Patch Tuesday Update Fixes 17 Critical Bugs
2020-11-10 21:12:21
prion
prion
Remote code execution
2020-11-11 07:15:00
Remote code execution
2020-11-11 07:15:00
Privilege escalation
2020-11-11 07:15:00
cve
cve
CVE-2020-17078
2020-11-11 07:15:00
CVE-2020-17106
2020-11-11 07:15:00
CVE-2020-17108
2020-11-11 07:15:00
mscve
mscve
Raw Image Extension Remote Code Execution Vulnerability
2020-11-10 08:00:00
WebP Image Extensions Information Disclosure Vulnerability
2020-11-10 08:00:00
HEVC Video Extensions Remote Code Execution Vulnerability
2020-11-10 08:00:00
krebs
krebs
Patch Tuesday, November 2020 Edition
2020-11-11 01:56:41
checkpoint_advisories
checkpoint_advisories
Microsoft DirectX Elevation of Privilege (CVE-2020-16998)
2020-11-10 00:00:00
Microsoft Windows Network File System Denial of Service (CVE-2020-17047)
2020-11-16 00:00:00
Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2020-17088)
2020-11-10 00:00:00
thn
thn
Microsoft Releases Windows Security Updates For Critical Flaws
2020-11-11 10:09:00
cnvd
cnvd
Microsoft Windows/Windows Server Information Disclosure Vulnerability (CNVD-2021-63308)
2020-11-12 00:00:00
Microsoft Windows/Windows Server Elevation of Privilege Vulnerability (CNVD-2021-66114)
2020-11-13 00:00:00
Microsoft Windows/Windows Server Elevation of Privilege Vulnerability (CNVD-2021-66108)
2020-11-13 00:00:00
githubexploit
githubexploit
Exploit for Vulnerability in Microsoft
2021-02-24 13:19:44
Exploit for Vulnerability in Microsoft
2020-12-23 10:02:47
zdi
zdi
Microsoft Windows DirectComposition Uninitialized Pointer Privilege Escalation Vulnerability
2020-11-11 00:00:00
Microsoft Windows Print Spooler Directory Junction Denial-of-Service Vulnerability
2020-11-11 00:00:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.143 Low

EPSS

Percentile

95.6%

JSON
Related for KLA12004
nessus10openvas9mskb14kaspersky1threatpost1prion48cve43mscve44krebs1checkpoint_advisories5thn1cnvd18githubexploit2zdi2