KLA12259 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface, cause denial of service, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in Windows Graphics Component Font Parsing can be exploited remotely to execute arbitrary code.
2. A remote code execution vulnerability in Windows TCP/IP can be exploited remotely to execute arbitrary code.
3. An elevation of privilege vulnerability in Windows Bluetooth Driver can be exploited remotely to gain privileges.
4. An elevation of privilege vulnerability in Windows Event Tracing can be exploited remotely to gain privileges.
5. A remote code execution vulnerability in Windows Print Spooler can be exploited remotely to execute arbitrary code.
6. An elevation of privilege vulnerability in Windows Print Spooler can be exploited remotely to gain privileges.
7. A remote code execution vulnerability in Windows Media MPEG-4 Video Decoder can be exploited remotely to execute arbitrary code.
8. A spoofing vulnerability in Windows LSA can be exploited remotely to spoof user interface.
9. An elevation of privilege vulnerability in Windows User Profile Service can be exploited remotely to gain privileges.
10. A remote code execution vulnerability in Remote Desktop Client can be exploited remotely to execute arbitrary code.
11. An elevation of privilege vulnerability in Windows Digital TV Tuner device registration application can be exploited remotely to gain privileges.
12. A memory corruption vulnerability in Scripting Engine can be exploited remotely to cause denial of service.
13. An elevation of privilege vulnerability in Windows Update Medic Service can be exploited remotely to gain privileges.
14. An information disclosure vulnerability in Windows Services for NFS ONCRPC XDR Driver can be exploited remotely to obtain sensitive information.
15. An elevation of privilege vulnerability in Windows 10 Update Assistant can be exploited remotely to gain privileges.
16. A remote code execution vulnerability in Windows Services for NFS ONCRPC XDR Driver can be exploited remotely to execute arbitrary code.
17. A remote code execution vulnerability in Windows Graphics Component can be exploited remotely to execute arbitrary code.
18. A remote code execution vulnerability in Windows MSHTML Platform can be exploited remotely to execute arbitrary code.
19. An elevation of privilege vulnerability in Windows Recovery Environment Agent can be exploited remotely to gain privileges.
20. An elevation of privilege vulnerability in Windows User Account Profile Picture can be exploited remotely to gain privileges.
21. An elevation of privilege vulnerability in Storage Spaces Controller can be exploited remotely to gain privileges.
22. An information disclosure vulnerability in Windows Cryptographic Primitives Library can be exploited remotely to obtain sensitive information.

Original advisories

CVE-2021-36948

CVE-2021-26424

CVE-2021-26433

CVE-2021-36945

CVE-2021-26432

CVE-2021-36926

CVE-2021-36942

CVE-2021-36947

CVE-2021-34487

CVE-2021-34530

CVE-2021-34480

CVE-2021-34534

CVE-2021-36927

CVE-2021-34486

CVE-2021-36932

CVE-2021-34533

CVE-2021-34537

CVE-2021-36937

CVE-2021-36936

CVE-2021-26425

CVE-2021-34483

CVE-2021-26431

CVE-2021-26426

CVE-2021-34536

CVE-2021-34484

CVE-2021-34535

CVE-2021-36933

CVE-2021-36938

Exploitation

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

Microsoft-Windows

Microsoft-Windows-Server

Microsoft-Windows-Server-2012

Microsoft-Windows-8

Microsoft-Windows-7

Microsoft-Windows-Server-2008

Windows-RT

Microsoft-Windows-10

CVE list

CVE-2021-34533 critical

CVE-2021-26424 critical

CVE-2021-34537 critical

CVE-2021-26425 critical

CVE-2021-36936 critical

CVE-2021-34483 critical

CVE-2021-36937 critical

CVE-2021-36942 critical

CVE-2021-36947 critical

CVE-2021-34484 critical

CVE-2021-34535 critical

CVE-2021-36927 critical

CVE-2021-34480 high

CVE-2021-36948 critical

CVE-2021-26433 critical

CVE-2021-36945 high

CVE-2021-26432 critical

CVE-2021-36926 critical

CVE-2021-34487 high

CVE-2021-34530 critical

CVE-2021-34534 high

CVE-2021-34486 critical

CVE-2021-36932 critical

CVE-2021-26431 critical

CVE-2021-26426 high

CVE-2021-34536 critical

CVE-2021-36933 critical

CVE-2021-36938 high

KB list

4023814

5005036

5005031

5005033

5005030

5005106

5005040

5005099

5005043

5005076

5005094

5011535

5011564

5011560

5011527

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

• OSI

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

• PE

Privilege escalation. Exploitation of vulnerabilities with this impact can lead to performing by abuser actions, which are normally disallowed for current role.

• SUI

Spoof user interface. Exploitation of vulnerabilities with this impact can lead to changes in user interface to beguile user into inaccurate behavior.

Affected Products

• Windows 10 Version 1607 for 32-bit SystemsWindows 10 Version 20H2 for x64-based SystemsWindows 10 Version 1909 for ARM64-based SystemsWindows Server 2008 R2 for x64-based Systems Service Pack 1Windows Server 2008 for 32-bit Systems Service Pack 2Windows 8.1 for 32-bit systemsWindows Server 2019 (Server Core installation)Windows 10 Version 1809 for 32-bit SystemsWindows Server 2016 (Server Core installation)Windows 10 for x64-based SystemsWindows Server 2012 (Server Core installation)Windows 7 for 32-bit Systems Service Pack 1Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)Windows 10 Version 2004 for ARM64-based SystemsWindows 10 Version 1909 for 32-bit SystemsWindows Server 2019Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)Windows 10 Version 1607 for x64-based SystemsWindows Server 2008 for x64-based Systems Service Pack 2Windows 10 Version 1809 for x64-based SystemsWindows 10 for 32-bit SystemsWindows 10 Version 20H2 for 32-bit SystemsWindows Server, version 20H2 (Server Core Installation)Windows 10 Version 2004 for x64-based SystemsWindows Server 2012 R2Windows 10 Version 21H1 for 32-bit SystemsWindows Server 2016Windows RT 8.1Windows 10 Version 21H1 for ARM64-based SystemsWindows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)Windows 10 Version 20H2 for ARM64-based SystemsWindows Server 2012Windows 8.1 for x64-based systemsRemote Desktop client for Windows DesktopWindows 7 for x64-based Systems Service Pack 1Windows 10 Version 1909 for x64-based SystemsWindows 10 Version 2004 for 32-bit SystemsWindows 10 Version 1809 for ARM64-based SystemsWindows 10 Version 21H1 for x64-based SystemsWindows Server 2012 R2 (Server Core installation)Windows Server, version 2004 (Server Core installation)