Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA12198
HistoryJun 08, 2021 - 12:00 a.m.

KLA12198 Multiple vulnerabilities in Microsoft Products (ESU)

2021-06-0800:00:00
Kaspersky Lab
threats.kaspersky.com
47

9.4 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

9.6 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.968 High

EPSS

Percentile

99.7%

JSON

Detect date:

06/08/2021

Severity:

Critical

Description:

Multiple vulnerabilities were found in Microsoft Products (Extended Security Update). Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, cause denial of service, bypass security restrictions, obtain sensitive information.

Exploitation:

Public exploits exist for this vulnerability.

Affected products:

Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Windows Server 2012 R2 (Server Core installation)
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2012
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
Windows Server 2012 (Server Core installation)
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Windows 7 for 32-bit Systems Service Pack 1
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2012 R2
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1

Solution:

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories:

CVE-2021-31956
CVE-2021-31973
CVE-2021-33742
CVE-2021-31954
CVE-2021-31201
CVE-2021-31199
CVE-2021-1675
CVE-2021-31953
CVE-2021-31968
CVE-2021-31958
CVE-2021-31971
CVE-2021-26414
CVE-2021-31959
CVE-2021-31962
CVE-2021-31976
CVE-2021-31974
CVE-2021-31975
CVE-2021-31970
CVE-2021-31972

Impacts:

ACE

Related products:

Microsoft Windows

CVE-IDS:

CVE-2021-319567.8Critical
CVE-2021-319737.8Critical
CVE-2021-337427.5Critical
CVE-2021-319547.8Critical
CVE-2021-312015.2High
CVE-2021-311995.2High
CVE-2021-16757.8Critical
CVE-2021-319537.8Critical
CVE-2021-319687.5Critical
CVE-2021-319587.5Critical
CVE-2021-319716.8High
CVE-2021-264144.8Warning
CVE-2021-319596.4High
CVE-2021-319629.4Critical
CVE-2021-319757.5Critical
CVE-2021-319725.5High
CVE-2021-319767.5Critical
CVE-2021-319705.5High
CVE-2021-319747.5Critical

Microsoft official advisories:

KB list:

5003695
5003636
5003661
5003667
5003694
5003681
5003671
5003696
5003697
5014742
5014748
5023752
5023764
5023756
5023765
5023755
5023754
5023759
5023769

References

Related

nessus 11
mskb 17
openvas 7
kaspersky 1
krebs 1
rapid7blog 3
threatpost 2
malwarebytes 3
thn 4
qualysblog 1
mscve 20
avleonov 1
githubexploit 48
prion 20
cve 20
checkpoint_advisories 6
zdi 1
attackerkb 7
cisa_kev 5
msrc 1
mmpc 1
mssecure 1
securelist 3
ics 3
seebug 1
googleprojectzero 1
hivepro 1
cert 2
metasploit 1
cisa 2
talosblog 1
kitploit 1
pentestpartners 1
packetstorm 1
nessus
nessus
KB5003681: Windows 8.1 and Windows Server 2012 R2 Security Update (June 2021)
2021-06-08 00:00:00
KB5003697: Windows Server 2012 Security Update (June 2021)
2021-06-08 00:00:00
KB5003638: Windows 10 version 1607 / Windows Server 2016 Security Update (June 2021)
2021-06-08 00:00:00
mskb
mskb
June 8, 2021—KB5003697 (Monthly Rollup)
2021-06-08 07:00:00
June 8, 2021—KB5003671 (Monthly Rollup)
2021-06-08 07:00:00
June 8, 2021—KB5003687 (OS Build 10240.18967) - EXPIRED
2021-06-08 07:00:00
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB5003687)
2021-06-10 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5003671)
2021-06-09 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5003667)
2021-06-09 00:00:00
kaspersky
kaspersky
KLA12202 Multiple vulnerabilities in Microsoft Windows
2021-06-08 00:00:00
krebs
krebs
Microsoft Patches Six Zero-Day Security Holes
2021-06-08 20:53:28
rapid7blog
rapid7blog
Patch Tuesday - June 2021
2021-06-08 10:00:00
Russia-Ukraine Cybersecurity Updates
2022-03-04 14:30:00
Pushing Open-Source Security Forward: Insights From Black Hat 2022
2022-08-19 14:25:08
threatpost
threatpost
Microsoft Patch Tuesday Fixes 6 In-The-Wild Exploits
2021-06-08 21:45:12
Microsoft Releases Emergency Patch for PrintNightmare Bugs
2021-07-07 10:55:02
malwarebytes
malwarebytes
Microsoft fixes seven zero-days, including two PuzzleMaker targets, Google fixes serious Android flaw
2021-06-09 14:50:52
Chrome targeted by Magnitude exploit kit
2021-10-21 12:47:42
PrintNightmare 0-day can be used to take over Windows domain controllers
2021-07-01 14:08:26
thn
thn
Update Your Windows Computers to Patch 6 New In-the-Wild Zero-Day Bugs
2021-06-09 06:07:00
Microsoft Uncovers Austrian Company Exploiting Windows and Adobe Zero-Day Exploits
2022-07-28 11:18:00
Microsoft Issues Emergency Patch for Critical Windows PrintNightmare Vulnerability
2021-07-07 03:11:00
qualysblog
qualysblog
Microsoft & Adobe Patch Tuesday (June 2021) – Microsoft 50 Vulnerabilities with 5 Critical, Adobe 21 Critical Vulnerabilities
2021-06-08 21:19:29
mscve
mscve
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
2021-06-08 07:00:00
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
2021-06-08 07:00:00
Kerberos AppContainer Security Feature Bypass Vulnerability
2021-06-08 07:00:00
avleonov
avleonov
Vulristics: Microsoft Patch Tuesdays Q2 2021
2021-07-10 00:14:59
githubexploit
githubexploit
Exploit for Improper Privilege Management in Microsoft
2024-02-04 03:24:04
Exploit for Integer Underflow (Wrap or Wraparound) in Microsoft
2022-01-11 16:03:38
Exploit for Integer Underflow (Wrap or Wraparound) in Microsoft
2022-09-02 10:35:11
prion
prion
Privilege escalation
2021-06-08 23:15:00
Security feature bypass
2021-06-08 23:15:00
Design/Logic Flaw
2021-06-08 23:15:00
cve
cve
CVE-2021-31953
2021-06-08 23:15:00
CVE-2021-31971
2021-06-08 23:15:00
CVE-2021-31954
2021-06-08 23:15:00
checkpoint_advisories
checkpoint_advisories
Microsoft Scripting Engine Memory Corruption (CVE-2021-31959)
2021-06-09 00:00:00
Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2021-31954)
2021-06-08 00:00:00
Microsoft Windows rsaenh.dll Elevation of Privilege (CVE-2021-31199)
2021-06-08 00:00:00
zdi
zdi
Microsoft Windows CLFS Heap-based Buffer Overflow Privilege Escalation Vulnerability
2021-06-10 00:00:00
attackerkb
attackerkb
CVE-2021-31956
2021-06-08 00:00:00
CVE-2021-33742
2021-06-08 00:00:00
CVE-2021-31201
2021-06-08 00:00:00
cisa_kev
cisa_kev
Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability
2021-11-03 00:00:00
Microsoft Windows NTFS Privilege Escalation Vulnerability
2021-11-03 00:00:00
Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability
2021-11-03 00:00:00
msrc
msrc
[IT管理者向け] DCOM の脆弱性 (CVE-2021-26414) に対応するためのガイダンス
2021-06-09 07:00:00
mmpc
mmpc
Untangling KNOTWEED: European private-sector offensive actor using 0-day exploits
2022-07-27 14:00:00
mssecure
mssecure
Untangling KNOTWEED: European private-sector offensive actor using 0-day exploits
2022-07-27 14:00:00
securelist
securelist
IT threat evolution in Q2 2021. PC statistics
2021-08-12 10:00:12
TOP 10 unattributed APT mysteries
2022-10-07 10:00:47
Kaspersky Managed Detection and Response: interesting cases
2021-12-15 10:00:42
ics
ics
Rockwell Automation FactoryTalk Service Platform
2024-01-30 12:00:00
#StopRansomware: Vice Society
2022-09-08 12:00:00
#StopRansomware: Vice Society
2022-09-08 12:00:00
seebug
seebug
Windows Print Spooler权限提升漏洞（CVE-2021-1675）
2021-06-17 00:00:00
googleprojectzero
googleprojectzero
Fuzzing Closed-Source JavaScript Engines with Coverage Feedback
2021-09-14 00:00:00
hivepro
hivepro
Emergency patches have been released by Microsoft for PrintNightmare
2021-07-08 13:50:55
cert
cert
Microsoft Windows Print Spooler Point and Print allows installation of arbitrary queue-specific files
2021-07-18 00:00:00
Microsoft Windows Print Spooler allows for RCE via AddPrinterDriverEx()
2021-06-30 00:00:00
metasploit
metasploit
Print Spooler Remote DLL Injection
2022-05-16 18:56:46
cisa
cisa
Microsoft Releases Out-of-Band Security Updates for PrintNightmare
2021-07-06 00:00:00
PrintNightmare, Critical Windows Print Spooler Vulnerability
2021-06-30 00:00:00
talosblog
talosblog
PrintNightmare: Here’s what you need to know and Talos’ coverage
2021-07-08 13:25:03
kitploit
kitploit
SpoolSploit - A Collection Of Windows Print Spooler Exploits Containerized With Other Utilities For Practical Exploitation
2021-10-07 11:30:00
pentestpartners
pentestpartners
Black Basta ransomware
2023-06-28 05:11:34
packetstorm
packetstorm
Print Spooler Remote DLL Injection
2022-05-25 00:00:00

9.4 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

9.6 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.968 High

EPSS

Percentile

99.7%

JSON
Related for KLA12198
nessus11mskb17openvas7kaspersky1krebs1rapid7blog3threatpost2malwarebytes3thn4qualysblog1mscve20avleonov1githubexploit48prion20cve20checkpoint_advisories6zdi1attackerkb7cisa_kev5msrc1mmpc1mssecure1securelist3ics3seebug1googleprojectzero1hivepro1cert2metasploit1cisa2talosblog1kitploit1pentestpartners1packetstorm1