KLA12250 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products (Extended Security Update). Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface, cause denial of service.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in Windows Graphics Component Font Parsing can be exploited remotely to execute arbitrary code.
2. A remote code execution vulnerability in Windows TCP/IP can be exploited remotely to execute arbitrary code.
3. An elevation of privilege vulnerability in Windows Bluetooth Driver can be exploited remotely to gain privileges.
4. An elevation of privilege vulnerability in Windows Event Tracing can be exploited remotely to gain privileges.
5. A remote code execution vulnerability in Windows Print Spooler can be exploited remotely to execute arbitrary code.
6. An elevation of privilege vulnerability in Windows Print Spooler can be exploited remotely to gain privileges.
7. A remote code execution vulnerability in Windows Media MPEG-4 Video Decoder can be exploited remotely to execute arbitrary code.
8. A spoofing vulnerability in Windows LSA can be exploited remotely to spoof user interface.
9. An elevation of privilege vulnerability in Windows User Profile Service can be exploited remotely to gain privileges.
10. A remote code execution vulnerability in Remote Desktop Client can be exploited remotely to execute arbitrary code.
11. An elevation of privilege vulnerability in Windows Digital TV Tuner device registration application can be exploited remotely to gain privileges.
12. A memory corruption vulnerability in Scripting Engine can be exploited remotely to cause denial of service.

Original advisories

CVE-2021-34533

CVE-2021-26424

CVE-2021-34537

CVE-2021-26425

CVE-2021-36936

CVE-2021-34483

CVE-2021-36937

CVE-2021-36942

CVE-2021-36947

CVE-2021-34484

CVE-2021-34535

CVE-2021-36927

CVE-2021-34480

Exploitation

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

Microsoft-Windows

Microsoft-Windows-Server

Microsoft-Windows-Server-2012

Microsoft-Windows-8

Microsoft-Windows-7

Microsoft-Windows-Server-2008

Windows-RT

Microsoft-Windows-10

CVE list

CVE-2021-34533 unknown

CVE-2021-26424 unknown

CVE-2021-34537 unknown

CVE-2021-26425 unknown

CVE-2021-36936 unknown

CVE-2021-34483 unknown

CVE-2021-36937 unknown

CVE-2021-36942 unknown

CVE-2021-36947 unknown

CVE-2021-34484 unknown

CVE-2021-34535 unknown

CVE-2021-36927 unknown

CVE-2021-34480 unknown

KB list

5005090

5005089

5005036

5005095

5005088

5011525

5011534

5011552

5011529

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

• PE

Privilege escalation. Exploitation of vulnerabilities with this impact can lead to performing by abuser actions, which are normally disallowed for current role.

• SUI

Spoof user interface. Exploitation of vulnerabilities with this impact can lead to changes in user interface to beguile user into inaccurate behavior.

Affected Products

• Windows 10 Version 1607 for 32-bit SystemsWindows 10 Version 20H2 for x64-based SystemsWindows Server 2008 R2 for x64-based Systems Service Pack 1Windows Server 2008 for 32-bit Systems Service Pack 2Windows 8.1 for 32-bit systemsWindows Server 2016 (Server Core installation)Windows 10 Version 1909 for ARM64-based SystemsWindows Server 2019 (Server Core installation)Windows 10 Version 1809 for 32-bit SystemsWindows 10 for x64-based SystemsWindows Server 2012 (Server Core installation)Windows 7 for 32-bit Systems Service Pack 1Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)Windows 10 Version 2004 for ARM64-based SystemsWindows 10 Version 1909 for 32-bit SystemsWindows Server 2019Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)Windows 10 Version 1607 for x64-based SystemsWindows Server 2008 for x64-based Systems Service Pack 2Windows 10 Version 1809 for x64-based SystemsWindows 10 for 32-bit SystemsWindows 10 Version 20H2 for 32-bit SystemsWindows Server, version 20H2 (Server Core Installation)Windows Server 2012 R2Windows 10 Version 2004 for x64-based SystemsWindows 10 Version 21H1 for 32-bit SystemsWindows Server 2016Windows RT 8.1Windows 10 Version 21H1 for ARM64-based SystemsWindows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)Windows 10 Version 20H2 for ARM64-based SystemsWindows Server 2012Windows 8.1 for x64-based systemsRemote Desktop client for Windows DesktopWindows 7 for x64-based Systems Service Pack 1Windows 10 Version 1909 for x64-based SystemsWindows 10 Version 2004 for 32-bit SystemsWindows 10 Version 1809 for ARM64-based SystemsWindows 10 Version 21H1 for x64-based SystemsWindows Server 2012 R2 (Server Core installation)Windows Server, version 2004 (Server Core installation)