Kaspersky LabKLA62827KLA62827 Multiple vulnerabilities in Microsoft Windows
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
9.2 High
AI Score
Confidence
High
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
71.1%
Detect date:
01/09/2024
Severity:
Critical
Description:
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, bypass security restrictions, execute arbitrary code, cause denial of service, spoof user interface.
Exploitation:
Public exploits exist for this vulnerability.
Affected products:
Windows 10 Version 1809 for x64-based Systems
Windows 10 Version 1809 for 32-bit Systems
Windows Server 2016 (Server Core installation)
Windows 11 Version 23H2 for x64-based Systems
Windows Server 2019 (Server Core installation)
Windows Server 2016
Windows 10 Version 1607 for x64-based Systems
Windows 10 for 32-bit Systems
Windows 10 Version 21H2 for 32-bit Systems
Windows Server 2022, 23H2 Edition (Server Core installation)
Windows 11 version 21H2 for x64-based Systems
Windows 11 Version 23H2 for ARM64-based Systems
Windows 10 Version 22H2 for ARM64-based Systems
Windows Server 2022
Windows 11 version 21H2 for ARM64-based Systems
Windows Server 2019
Windows 10 Version 21H2 for ARM64-based Systems
Windows 11 Version 22H2 for ARM64-based Systems
Windows 10 for x64-based Systems
Windows Server 2022 (Server Core installation)
Windows 10 Version 21H2 for x64-based Systems
Microsoft Printer Metadata Troubleshooter Tool
Windows 10 Version 1809 for ARM64-based Systems
Windows 10 Version 1607 for 32-bit Systems
Windows 10 Version 22H2 for 32-bit Systems
Windows 11 Version 22H2 for x64-based Systems
Windows 10 Version 22H2 for x64-based Systems
Solution:
Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)
Original advisories:
CVE-2024-20686
CVE-2024-21313
CVE-2024-21305
CVE-2024-20652
CVE-2024-20660
CVE-2024-21310
CVE-2024-20662
CVE-2024-21325
CVE-2024-20699
CVE-2024-20694
CVE-2024-20666
CVE-2024-21314
CVE-2024-21309
CVE-2024-20697
CVE-2024-20658
CVE-2024-20655
CVE-2024-21316
CVE-2024-20690
CVE-2024-20700
CVE-2024-20682
CVE-2024-21320
CVE-2024-20680
CVE-2024-20674
CVE-2024-20696
CVE-2024-20657
CVE-2024-20687
CVE-2022-35737
CVE-2024-20698
CVE-2024-20664
CVE-2024-20661
CVE-2024-20691
CVE-2024-21306
CVE-2024-20683
CVE-2024-20654
CVE-2024-21307
CVE-2024-20681
CVE-2024-20653
CVE-2024-20663
CVE-2024-21311
CVE-2024-20692
Impacts:
ACE
Related products:
CVE-IDS:
CVE-2022-357377.5Critical
CVE-2024-213206.5High
CVE-2024-206806.5High
CVE-2024-206748.8Critical
CVE-2024-206925.7High
CVE-2024-213135.3High
CVE-2024-206528.1Critical
CVE-2024-206577.0High
CVE-2024-206606.5High
CVE-2024-206646.5High
CVE-2024-206624.9Warning
CVE-2024-206617.5Critical
CVE-2024-206914.7Warning
CVE-2024-206837.8Critical
CVE-2024-206548.0Critical
CVE-2024-213077.5Critical
CVE-2024-213146.5High
CVE-2024-206537.8Critical
CVE-2024-206636.5High
CVE-2024-206587.8Critical
CVE-2024-206556.6High
CVE-2024-213115.5High
CVE-2024-206827.8Critical
CVE-2024-206867.8Critical
CVE-2024-213054.4Warning
CVE-2024-213107.8Critical
CVE-2024-213257.8Critical
CVE-2024-206995.5High
CVE-2024-206945.5High
CVE-2024-206666.6High
CVE-2024-213097.8Critical
CVE-2024-206977.3High
CVE-2024-213166.1High
CVE-2024-206906.5High
CVE-2024-207007.5Critical
CVE-2024-206967.3High
CVE-2024-206877.5Critical
CVE-2024-206987.8Critical
CVE-2024-213065.7High
CVE-2024-206817.8Critical
KB list:
5034119
5034134
5034121
5034122
5034123
5034127
5034130
5034129
Microsoft official advisories:
References
support.microsoft.com/kb/5034119
support.microsoft.com/kb/5034121
support.microsoft.com/kb/5034122
support.microsoft.com/kb/5034123
support.microsoft.com/kb/5034127
support.microsoft.com/kb/5034129
support.microsoft.com/kb/5034130
support.microsoft.com/kb/5034134
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-35737
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20652
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20653
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20654
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20655
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20657
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20658
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20660
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20661
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20662
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20663
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20664
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20666
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20674
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20680
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20681
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20682
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20683
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20686
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20687
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20690
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20691
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20692
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20694
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20696
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20697
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20698
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20699
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20700
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21305
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21306
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21307
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21309
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21310
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21311
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21313
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21314
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21316
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21320
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21325
msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35737
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20652
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20653
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20654
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20655
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20657
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20658
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20660
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20661
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20662
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20663
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20664
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20666
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20674
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20680
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20681
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20682
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20683
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20686
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20687
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20690
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20691
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20692
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20694
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20696
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20697
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20698
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20699
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20700
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21305
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21306
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21307
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21309
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21310
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21311
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21313
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21314
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21316
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21320
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21325
portal.msrc.microsoft.com/en-us/security-guidance
statistics.securelist.com/vulnerability-scan/month
threats.kaspersky.com/en/class/Exploit/
threats.kaspersky.com/en/product/Microsoft-Windows-10/
threats.kaspersky.com/en/product/Microsoft-Windows-11/
threats.kaspersky.com/en/product/Microsoft-Windows-Server-2016/
threats.kaspersky.com/en/product/Microsoft-Windows-Server-2019/
threats.kaspersky.com/en/product/Microsoft-Windows-Server/
threats.kaspersky.com/en/product/Microsoft-Windows/
Related
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
9.2 High
AI Score
Confidence
High
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
71.1%