9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
8.8 High
AI Score
Confidence
High
0.973 High
EPSS
Percentile
99.9%
Multiple vulnerabilities were found in Microsoft Products (Extended Support Update). Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information.
Below is a complete list of vulnerabilities:
Public exploits exist for this vulnerability.
Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.
CVE-2019-0549 warning
CVE-2019-0583 critical
CVE-2019-0543 warning
CVE-2019-0580 critical
CVE-2019-0569 warning
CVE-2019-0577 critical
CVE-2019-0554 warning
CVE-2019-0581 critical
CVE-2019-0582 critical
CVE-2019-0579 critical
CVE-2019-0536 warning
CVE-2019-0578 critical
CVE-2019-0584 critical
CVE-2019-0538 critical
CVE-2019-0576 critical
CVE-2019-0575 critical
CVE-2019-0541 critical
Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)
Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.
Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.
Privilege escalation. Exploitation of vulnerabilities with this impact can lead to performing by abuser actions, which are normally disallowed for current role.
support.microsoft.com/kb/4480957
support.microsoft.com/kb/4480960
support.microsoft.com/kb/4480965
support.microsoft.com/kb/4480968
support.microsoft.com/kb/4480970
portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-0536
portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-0538
portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-0541
portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-0543
portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-0549
portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-0554
portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-0569
portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-0575
portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-0576
portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-0577
portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-0578
portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-0579
portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-0580
portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-0581
portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-0582
portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-0583
portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-0584
statistics.securelist.com/
threats.kaspersky.com/en/class/Exploit/
threats.kaspersky.com/en/product/Microsoft-Excel/
threats.kaspersky.com/en/product/Microsoft-Internet-Explorer/
threats.kaspersky.com/en/product/Microsoft-Office/
threats.kaspersky.com/en/product/Microsoft-Windows-10/
threats.kaspersky.com/en/product/Microsoft-Windows-7/
threats.kaspersky.com/en/product/Microsoft-Windows-8/
threats.kaspersky.com/en/product/Microsoft-Windows-Server-2008/
threats.kaspersky.com/en/product/Microsoft-Windows-Server-2012/
threats.kaspersky.com/en/product/Microsoft-Windows-Server/
threats.kaspersky.com/en/product/Microsoft-Windows/
threats.kaspersky.com/en/product/Microsoft-Word/
threats.kaspersky.com/en/product/Windows-RT/
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
8.8 High
AI Score
Confidence
High
0.973 High
EPSS
Percentile
99.9%