KLA12289 Multiple vulnerabilities in Microsoft Products (ESU)

🗓️ 14 Sep 2021 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 46 Views

Multiple vulnerabilities in Microsoft Products (ESU). Malicious users can obtain sensitive information, gain privileges, cause denial of service, spoof user interface, and execute arbitrary code

Reporter	Title	Published	Views	Family All 306
ICS	North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs	25 Jul 202412:00	–	ics
ATTACKERKB	CVE-2021-38633	15 Sep 202100:00	–	attackerkb
ATTACKERKB	CVE-2021-36955	15 Sep 202100:00	–	attackerkb
Information Security Automation	Security News: Microsoft Patch Tuesday September 2021, OMIGOD, MSHTML RCE, Confluence RCE, Ghostscript RCE, FORCEDENTRY Pegasus	18 Sep 202123:22	–	avleonov
BDU FSTEC	The vulnerability of the file system driver of the Windows operating system allows a hacker to escalate their privileges.	13 Dec 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Redirected Drive Buffering Subsystem in the operating system of Microsoft Windows allows a hacker to disclose protected information.	11 Mar 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Windows operating system’s kernel, which allows a hacker to increase their privileges	11 Mar 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Redirected Drive Buffering Subsystem in the operating system of Microsoft Windows allows a hacker to disclose protected information.	16 Mar 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Windows Installer component of the Microsoft Windows operating system, which allows a perpetrator to disclose protected information	16 Mar 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementation of the Windows Authenticode signature technology of the Microsoft Windows operating system allows attackers to perform spoofing attacks.	16 Mar 202200:00	–	bdu_fstec

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-38635
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-36962
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-38628
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-36961
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-38671
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-26435
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-38630
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-36969
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-36955
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-38638

31 Mar 2025 00:00Current

9.4High risk

Vulners AI Score9.4

CVSS 27.5

CVSS 3.18.8 - 9.8

EPSS0.04548

SSVC