Kaspersky LabKLA65126KLA65126 Multiple vulnerabilities in Microsoft Windows
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
9 High
AI Score
Confidence
High
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
38.1%
Detect date:
03/12/2024
Severity:
Critical
Description:
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, bypass security restrictions, spoof user interface.
Exploitation:
Public exploits exist for this vulnerability.
Affected products:
Windows 10 Version 1607 for x64-based Systems
Windows Server 2016 (Server Core installation)
Windows 10 Version 22H2 for x64-based Systems
Windows 10 for 32-bit Systems
Windows Server 2019 (Server Core installation)
Windows 10 Version 1809 for ARM64-based Systems
Windows 10 Version 1809 for x64-based Systems
Windows 10 Version 21H2 for ARM64-based Systems
Windows 11 Version 23H2 for ARM64-based Systems
Windows Server 2022 (Server Core installation)
Windows 10 Version 1809 for 32-bit Systems
Windows Server 2019
Windows 10 Version 22H2 for ARM64-based Systems
Windows 11 version 21H2 for x64-based Systems
Windows 10 Version 21H2 for 32-bit Systems
Windows 11 version 21H2 for ARM64-based Systems
Windows 10 Version 21H2 for x64-based Systems
Windows Server 2022, 23H2 Edition (Server Core installation)
Windows 10 Version 1607 for 32-bit Systems
Windows Server 2016
Windows Server 2022
Windows 10 for x64-based Systems
Windows 11 Version 22H2 for x64-based Systems
Windows 11 Version 23H2 for x64-based Systems
Windows 11 Version 22H2 for ARM64-based Systems
Windows 10 Version 22H2 for 32-bit Systems
Solution:
Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)
Original advisories:
CVE-2024-21438
CVE-2024-21441
CVE-2024-26162
CVE-2024-21446
CVE-2024-21443
CVE-2024-21440
CVE-2024-26182
CVE-2024-21433
CVE-2024-21444
CVE-2024-26173
CVE-2024-26170
CVE-2024-21432
CVE-2024-26160
CVE-2024-21437
CVE-2024-21408
CVE-2024-21407
CVE-2024-21430
CVE-2024-26169
CVE-2024-26181
CVE-2023-28746
CVE-2024-26178
CVE-2024-21445
CVE-2024-21439
CVE-2024-26197
CVE-2024-21434
CVE-2024-21450
CVE-2024-26161
CVE-2024-26159
CVE-2024-21442
CVE-2024-26177
CVE-2024-26176
CVE-2024-26174
CVE-2024-21431
CVE-2024-21427
CVE-2024-21429
CVE-2024-21451
CVE-2024-26185
CVE-2024-21436
CVE-2024-26190
CVE-2024-21435
CVE-2024-26166
Impacts:
ACE
Related products:
CVE-IDS:
CVE-2024-214397.0High
CVE-2024-261976.5High
CVE-2024-214418.8Critical
CVE-2024-214505.0Warning
CVE-2024-261618.8Critical
CVE-2024-261628.8Critical
CVE-2024-214467.8Critical
CVE-2024-261668.8Critical
CVE-2024-261598.8Critical
CVE-2024-214405.0Warning
CVE-2024-261775.5High
CVE-2024-214337.0High
CVE-2024-214448.8Critical
CVE-2024-261765.0Warning
CVE-2024-261737.8Critical
CVE-2024-214327.0High
CVE-2024-214305.0Warning
CVE-2024-261745.5High
CVE-2024-214377.8Critical
CVE-2024-214078.1Critical
CVE-2024-214277.5Critical
CVE-2024-214296.8High
CVE-2024-214518.8Critical
CVE-2024-261697.8Critical
CVE-2024-214367.8Critical
CVE-2024-261815.5High
CVE-2023-287465.0Warning
CVE-2024-261787.8Critical
CVE-2024-214387.5Critical
CVE-2024-214437.3High
CVE-2024-261827.8Critical
CVE-2024-261707.8Critical
CVE-2024-261605.0Warning
CVE-2024-214085.5High
CVE-2024-214457.0High
CVE-2024-214347.8Critical
CVE-2024-214427.8Critical
CVE-2024-214317.8Critical
CVE-2024-261856.5High
CVE-2024-261907.5Critical
CVE-2024-214358.8Critical
KB list:
5035855
5035856
5035853
5035854
5035849
5035857
5035959
5035858
5035845
Microsoft official advisories:
References
support.microsoft.com/kb/5035845
support.microsoft.com/kb/5035849
support.microsoft.com/kb/5035853
support.microsoft.com/kb/5035854
support.microsoft.com/kb/5035855
support.microsoft.com/kb/5035856
support.microsoft.com/kb/5035857
support.microsoft.com/kb/5035858
support.microsoft.com/kb/5035959
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28746
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21407
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21408
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21427
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21429
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21430
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21431
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21432
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21433
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21434
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21435
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21436
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21437
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21438
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21439
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21440
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21441
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21442
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21443
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21444
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21445
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21446
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21450
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21451
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26159
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26160
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26161
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26162
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26166
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26169
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26170
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26173
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26174
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26176
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26177
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26178
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26181
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26182
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26185
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26190
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26197
msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28746
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21407
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21408
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21427
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21429
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21430
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21431
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21432
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21433
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21434
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21435
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21436
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21437
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21438
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21439
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21440
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21441
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21442
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21443
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21444
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21445
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21446
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21450
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21451
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26159
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26160
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26161
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26162
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26166
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26169
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26170
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26173
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26174
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26176
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26177
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26178
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26181
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26182
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26185
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26190
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26197
portal.msrc.microsoft.com/en-us/security-guidance
statistics.securelist.com/vulnerability-scan/month
threats.kaspersky.com/en/class/Exploit/
threats.kaspersky.com/en/product/Microsoft-Windows-10/
threats.kaspersky.com/en/product/Microsoft-Windows-11/
threats.kaspersky.com/en/product/Microsoft-Windows-Server-2016/
threats.kaspersky.com/en/product/Microsoft-Windows-Server-2019/
Related
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
9 High
AI Score
Confidence
High
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
38.1%