Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA12290
HistorySep 14, 2021 - 12:00 a.m.

KLA12290 Multiple vulnerabilities in Microsoft Windows

2021-09-1400:00:00
Kaspersky Lab
threats.kaspersky.com
21

8.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.512 Medium

EPSS

Percentile

97.5%

JSON

Detect date:

09/14/2021

Severity:

Critical

Description:

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, cause denial of service, bypass security restrictions, execute arbitrary code, spoof user interface.

Exploitation:

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Affected products:

Windows Server 2012 R2 (Server Core installation)
Windows 10 Version 21H1 for x64-based Systems
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows 10 Version 1909 for 32-bit Systems
Windows Server 2022
Windows Server 2022 (Server Core installation)
Windows 7 for 32-bit Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server, version 2004 (Server Core installation)
Windows Server 2016 (Server Core installation)
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
Windows 10 Version 1809 for ARM64-based Systems
Windows 10 Version 20H2 for ARM64-based Systems
Windows 10 Version 1809 for x64-based Systems
Windows 10 Version 2004 for ARM64-based Systems
Windows 10 Version 2004 for x64-based Systems
Windows Server 2016
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Windows 10 Version 1909 for x64-based Systems
HEVC Video Extensions
Windows Server 2012 (Server Core installation)
Windows 10 Version 2004 for 32-bit Systems
Windows 10 Version 1607 for 32-bit Systems
Windows 10 Version 1909 for ARM64-based Systems
Windows 8.1 for x64-based systems
Windows 10 for x64-based Systems
Windows RT 8.1
Windows Server 2012 R2
Windows Server 2012
Windows 10 Version 1809 for 32-bit Systems
Windows 10 Version 21H1 for 32-bit Systems
Windows Server 2019
Windows 10 Version 1607 for x64-based Systems
Windows 8.1 for 32-bit systems
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Windows Server 2019 (Server Core installation)
Windows 10 Version 20H2 for x64-based Systems
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 for x64-based Systems Service Pack 2
Windows 10 Version 21H1 for ARM64-based Systems
Windows Server, version 20H2 (Server Core Installation)
Windows 10 for 32-bit Systems
Windows 10 Version 20H2 for 32-bit Systems

Solution:

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories:

CVE-2021-36973
CVE-2021-38635
CVE-2021-36962
CVE-2021-38628
CVE-2021-36961
CVE-2021-38638
CVE-2021-36964
CVE-2021-38632
CVE-2021-38644
CVE-2021-36967
CVE-2021-36959
CVE-2021-36960
CVE-2021-38636
CVE-2021-38634
CVE-2021-36972
CVE-2021-36969
CVE-2021-26435
CVE-2021-36955
CVE-2021-38630
CVE-2021-38671
CVE-2021-40447
CVE-2021-36974
CVE-2021-38629
CVE-2021-38639
CVE-2021-36966
CVE-2021-38667
CVE-2021-36965
CVE-2021-36963
CVE-2021-38624
CVE-2021-38661
CVE-2021-36954
CVE-2021-38633
CVE-2021-36975
CVE-2021-38637

Impacts:

ACE

Related products:

Microsoft Windows

KB list:

5005613
5005568
5005575
5005627
5005565
5005623
5005573
5005569
5005566
5005607
5006699
5006672
5006674
5006670
5006667

Microsoft official advisories:

References

Related

openvas 7
mskb 19
nessus 11
kaspersky 1
threatpost 1
attackerkb 2
thn 1
qualysblog 3
rapid7blog 1
securelist 1
krebs 1
prion 34
cve 34
mscve 34
cnvd 1
checkpoint_advisories 5
zdi 3
cisa_kev 1
githubexploit 1
avleonov 1
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB5005568)
2021-09-15 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5005566)
2021-09-15 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5005565)
2021-09-15 00:00:00
mskb
mskb
September 14, 2021—KB5005568 (OS Build 17763.2183)
2021-09-14 07:00:00
September 14, 2021—KB5005565 (OS Builds 19041.1237, 19042.1237, and 19043.1237)
2021-09-14 07:00:00
September 14, 2021—KB5005566 (OS Build 18363.1801)
2021-09-14 07:00:00
nessus
nessus
KB5005565: Windows 10 Version 2004 / Windows 10 Version 20H2 / Windows 10 Version 21H1 Security Update (September 2021)
2021-09-14 00:00:00
KB5005568: Windows 10 Version 1809 and Windows Server 2019 September 2021 Security Update
2021-09-14 00:00:00
KB5005566: Windows 10 version 1909 / Windows Server 1909 Security Update (September 2021)
2021-09-14 00:00:00
kaspersky
kaspersky
KLA12289 Multiple vulnerabilities in Microsoft Products (ESU)
2021-09-14 00:00:00
threatpost
threatpost
Microsoft Patches Actively Exploited Windows Zero-Day
2021-09-14 20:29:14
attackerkb
attackerkb
CVE-2021-38633
2021-09-15 00:00:00
CVE-2021-36955
2021-09-15 00:00:00
thn
thn
Microsoft Releases Patch for Actively Exploited Windows Zero-Day Vulnerability
2021-09-15 05:00:00
qualysblog
qualysblog
Microsoft and Adobe Patch Tuesday (September 2021) – Microsoft 60 Vulnerabilities with 3 Critical, Adobe 61 Vulnerabilities
2021-09-14 18:56:17
Qualys Response to CISA Alert: Binding Operational Directive 22-01
2021-11-09 06:15:01
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00
rapid7blog
rapid7blog
Patch Tuesday - September 2021
2021-09-15 03:44:31
securelist
securelist
Windows CLFS and five exploits used by ransomware operators (Exploit #4 – CVE-2023-23376)
2023-12-21 10:00:59
krebs
krebs
Microsoft Patch Tuesday, September 2021 Edition
2021-09-14 21:00:42
prion
prion
Remote code execution
2021-09-15 12:15:00
Remote code execution
2021-09-15 12:15:00
Security feature bypass
2021-09-15 12:15:00
cve
cve
CVE-2021-38644
2021-09-15 12:15:00
CVE-2021-38661
2021-09-15 12:15:00
CVE-2021-38624
2021-09-15 12:15:00
mscve
mscve
Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability
2021-09-14 07:00:00
HEVC Video Extensions Remote Code Execution Vulnerability
2021-09-14 07:00:00
Windows Subsystem for Linux Elevation of Privilege Vulnerability
2021-09-14 07:00:00
cnvd
cnvd
Microsoft HEVC Video Extensions Remote Code Execution Vulnerability (CNVD-2022-59690)
2021-09-15 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Win32k Elevation of Privilege (CVE-2021-36975)
2021-09-14 00:00:00
Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2021-36963)
2021-09-14 00:00:00
Microsoft Win32k Elevation of Privilege (CVE-2021-38639)
2021-09-14 00:00:00
zdi
zdi
Microsoft Windows Installer Service Directory Junction Denial-of-Service Vulnerability
2021-09-16 00:00:00
Microsoft Windows Installer Service Directory Junction Information Disclosure Vulnerability
2021-09-16 00:00:00
Microsoft Windows Update Agent Directory Junction Privilege Escalation Vulnerability
2021-09-16 00:00:00
cisa_kev
cisa_kev
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability
2021-11-03 00:00:00
githubexploit
githubexploit
Exploit for Improper Privilege Management in Microsoft
2021-09-17 02:09:37
avleonov
avleonov
Security News: Microsoft Patch Tuesday September 2021, OMIGOD, MSHTML RCE, Confluence RCE, Ghostscript RCE, FORCEDENTRY Pegasus
2021-09-18 23:22:00

8.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.512 Medium

EPSS

Percentile

97.5%

JSON
Related for KLA12290
openvas7mskb19nessus11kaspersky1threatpost1attackerkb2thn1qualysblog3rapid7blog1securelist1krebs1prion34cve34mscve34cnvd1checkpoint_advisories5zdi3cisa_kev1githubexploit1avleonov1