Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA12202
HistoryJun 08, 2021 - 12:00 a.m.

KLA12202 Multiple vulnerabilities in Microsoft Windows

2021-06-0800:00:00
Kaspersky Lab
threats.kaspersky.com
114

9.4 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

9.6 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.974 High

EPSS

Percentile

99.9%

JSON

Detect date:

06/08/2021

Severity:

Critical

Description:

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, bypass security restrictions, cause denial of service.

Exploitation:

Public exploits exist for this vulnerability.

Affected products:

Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Windows 10 for x64-based Systems
Windows 10 Version 1809 for x64-based Systems
Windows 8.1 for 32-bit systems
Windows 10 Version 1809 for ARM64-based Systems
Windows 10 Version 20H2 for ARM64-based Systems
Windows 10 Version 1909 for ARM64-based Systems
Windows 10 Version 20H2 for 32-bit Systems
Windows Server, version 2004 (Server Core installation)
Windows 10 Version 1607 for x64-based Systems
Windows 10 Version 1909 for 32-bit Systems
VP9 Video Extensions
Windows 10 Version 2004 for x64-based Systems
Windows Server 2019 (Server Core installation)
Windows Server 2012 R2 (Server Core installation)
Windows Server 2008 for x64-based Systems Service Pack 2
Windows 10 Version 21H1 for 32-bit Systems
Windows 10 Version 1909 for x64-based Systems
Windows 10 Version 21H1 for ARM64-based Systems
Windows Server 2012
Windows 10 Version 21H1 for x64-based Systems
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
Windows Server 2012 (Server Core installation)
Windows RT 8.1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Windows 10 for 32-bit Systems
Windows 7 for 32-bit Systems Service Pack 1
Windows Server 2019
Windows 10 Version 1607 for 32-bit Systems
Windows Server 2016
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows 10 Version 1809 for 32-bit Systems
Windows 10 Version 20H2 for x64-based Systems
Windows 10 Version 2004 for ARM64-based Systems
Windows 10 Version 2004 for 32-bit Systems
Windows Server 2012 R2
Windows Server 2016 (Server Core installation)
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows Server, version 20H2 (Server Core Installation)
Windows 8.1 for x64-based systems

Solution:

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories:

CVE-2021-31975
CVE-2021-31967
CVE-2021-31973
CVE-2021-31972
CVE-2021-33742
CVE-2021-31976
CVE-2021-31199
CVE-2021-31201
CVE-2021-31970
CVE-2021-33739
CVE-2021-31971
CVE-2021-31951
CVE-2021-26414
CVE-2021-31952
CVE-2021-31974
CVE-2021-31955
CVE-2021-31962
CVE-2021-31956
CVE-2021-31954
CVE-2021-1675
CVE-2021-31953
CVE-2021-31960
CVE-2021-31968
CVE-2021-31958
CVE-2021-31959
CVE-2021-31969
CVE-2021-31977

Impacts:

ACE

Related products:

Microsoft Windows

CVE-IDS:

CVE-2021-319567.8Critical
CVE-2021-319737.8Critical
CVE-2021-337427.5Critical
CVE-2021-319547.8Critical
CVE-2021-312015.2High
CVE-2021-311995.2High
CVE-2021-16757.8Critical
CVE-2021-319537.8Critical
CVE-2021-319687.5Critical
CVE-2021-319587.5Critical
CVE-2021-319716.8High
CVE-2021-264144.8Warning
CVE-2021-319596.4High
CVE-2021-319629.4Critical
CVE-2021-319757.5Critical
CVE-2021-319677.8Critical
CVE-2021-319725.5High
CVE-2021-319767.5Critical
CVE-2021-319705.5High
CVE-2021-337398.4Critical
CVE-2021-319517.8Critical
CVE-2021-319527.8Critical
CVE-2021-319747.5Critical
CVE-2021-319555.5High
CVE-2021-319605.5High
CVE-2021-319697.8Critical
CVE-2021-319778.6Critical

Microsoft official advisories:

KB list:

5003636
5003681
5003637
5003671
5003646
5003638
5003635
5003687
5014699
5014738
5014746
5014701
5023698
5023702
5023696
5023697
5023705
5023787

References

Related

openvas 7
nessus 12
mskb 16
kaspersky 1
krebs 1
malwarebytes 2
rapid7blog 2
thn 2
threatpost 1
qualysblog 1
avleonov 1
securelist 6
attackerkb 7
mscve 26
prion 27
cve 27
githubexploit 36
checkpoint_advisories 9
zdi 2
cisa_kev 7
mssecure 1
msrc 1
mmpc 1
ics 1
seebug 1
googleprojectzero 1
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB5003637)
2021-06-10 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5003687)
2021-06-10 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5003635)
2021-06-10 00:00:00
nessus
nessus
KB5003637: Windows 10 version 2004 / Windows 10 version 20H2 / Windows 10 version 21H1 Security Update (June 2021)
2021-06-08 00:00:00
KB5003638: Windows 10 version 1607 / Windows Server 2016 Security Update (June 2021)
2021-06-08 00:00:00
KB5003681: Windows 8.1 and Windows Server 2012 R2 Security Update (June 2021)
2021-06-08 00:00:00
mskb
mskb
June 8, 2021—KB5003687 (OS Build 10240.18967) - EXPIRED
2021-06-08 07:00:00
June 8, 2021—KB5003635 (OS Build 18363.1621)
2021-06-08 07:00:00
June 8, 2021—KB5003646 (OS Build 17763.1999)
2021-06-08 07:00:00
kaspersky
kaspersky
KLA12198 Multiple vulnerabilities in Microsoft Products (ESU)
2021-06-08 00:00:00
krebs
krebs
Microsoft Patches Six Zero-Day Security Holes
2021-06-08 20:53:28
malwarebytes
malwarebytes
Microsoft fixes seven zero-days, including two PuzzleMaker targets, Google fixes serious Android flaw
2021-06-09 14:50:52
Chrome targeted by Magnitude exploit kit
2021-10-21 12:47:42
rapid7blog
rapid7blog
Patch Tuesday - June 2021
2021-06-08 10:00:00
Russia-Ukraine Cybersecurity Updates
2022-03-04 14:30:00
thn
thn
Update Your Windows Computers to Patch 6 New In-the-Wild Zero-Day Bugs
2021-06-09 06:07:00
Microsoft Uncovers Austrian Company Exploiting Windows and Adobe Zero-Day Exploits
2022-07-28 11:18:00
threatpost
threatpost
Microsoft Patch Tuesday Fixes 6 In-The-Wild Exploits
2021-06-08 21:45:12
qualysblog
qualysblog
Microsoft & Adobe Patch Tuesday (June 2021) – Microsoft 50 Vulnerabilities with 5 Critical, Adobe 21 Critical Vulnerabilities
2021-06-08 21:19:29
avleonov
avleonov
Vulristics: Microsoft Patch Tuesdays Q2 2021
2021-07-10 00:14:59
securelist
securelist
TOP 10 unattributed APT mysteries
2022-10-07 10:00:47
PuzzleMaker attacks with Chrome zero-day exploit chain
2021-06-08 17:32:30
IT threat evolution in Q2 2021. PC statistics
2021-08-12 10:00:12
attackerkb
attackerkb
CVE-2021-21224
2021-04-26 00:00:00
CVE-2021-31955
2021-06-08 00:00:00
CVE-2021-33739
2021-06-08 00:00:00
mscve
mscve
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
2021-06-08 07:00:00
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
2021-06-08 07:00:00
VP9 Video Extensions Remote Code Execution Vulnerability
2021-06-08 07:00:00
prion
prion
Remote code execution
2021-06-08 23:15:00
Information disclosure
2021-06-08 23:15:00
Privilege escalation
2021-06-08 23:15:00
cve
cve
CVE-2021-31967
2021-06-08 23:15:00
CVE-2021-31960
2021-06-08 23:15:00
CVE-2021-31951
2021-06-08 23:15:00
githubexploit
githubexploit
Exploit for Vulnerability in Microsoft
2021-09-24 03:33:02
Exploit for Improper Privilege Management in Microsoft
2024-02-04 03:24:04
Exploit for Vulnerability in Microsoft
2021-09-24 03:33:02
checkpoint_advisories
checkpoint_advisories
Microsoft DWM Core Library Elevation of Privilege (CVE-2021-33739)
2021-06-09 00:00:00
Microsoft Scripting Engine Memory Corruption (CVE-2021-31959)
2021-06-09 00:00:00
Microsoft Windows Kernel-Mode Driver Elevation of Privilege (CVE-2021-31952)
2021-06-08 00:00:00
zdi
zdi
Microsoft Windows CLDFLT Integer Underflow Privilege Escalation Vulnerability
2021-07-15 00:00:00
Microsoft Windows CLFS Heap-based Buffer Overflow Privilege Escalation Vulnerability
2021-06-10 00:00:00
cisa_kev
cisa_kev
Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability
2021-11-03 00:00:00
Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability
2021-11-03 00:00:00
Microsoft Windows Kernel Information Disclosure Vulnerability
2021-11-03 00:00:00
mssecure
mssecure
Untangling KNOTWEED: European private-sector offensive actor using 0-day exploits
2022-07-27 14:00:00
msrc
msrc
[IT管理者向け] DCOM の脆弱性 (CVE-2021-26414) に対応するためのガイダンス
2021-06-09 07:00:00
mmpc
mmpc
Untangling KNOTWEED: European private-sector offensive actor using 0-day exploits
2022-07-27 14:00:00
ics
ics
Rockwell Automation FactoryTalk Service Platform
2024-01-30 12:00:00
seebug
seebug
Windows Print Spooler权限提升漏洞（CVE-2021-1675）
2021-06-17 00:00:00
googleprojectzero
googleprojectzero
Fuzzing Closed-Source JavaScript Engines with Coverage Feedback
2021-09-14 00:00:00

9.4 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

9.6 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.974 High

EPSS

Percentile

99.9%

JSON
Related for KLA12202
openvas7nessus12mskb16kaspersky1krebs1malwarebytes2rapid7blog2thn2threatpost1qualysblog1avleonov1securelist6attackerkb7mscve26prion27cve27githubexploit36checkpoint_advisories9zdi2cisa_kev7mssecure1msrc1mmpc1ics1seebug1googleprojectzero1