| Beschreibung: | Summary:
This host is missing a critical security
update according to Microsoft KB4034660
Vulnerability Insight:
Multiple flaws exist due to:
- The way JavaScript engines render when handling objects in memory in
Microsoft browsers.
- When Windows Search handles objects in memory.
- When Internet Explorer fails to validate User Mode Code Integrity (UMCI)
policies.
- Microsoft Edge that could allow an attacker to escape from the AppContainer
sandbox in the browser.
- When Windows Hyper-V on a host server fails to properly validate input from an
authenticated user on a guest operating system.
- The way that Microsoft browser JavaScript engines render content when
handling objects in memory.
- When Microsoft Edge improperly handles objects in memory.
- When the win32k component improperly provides kernel information.
- When Microsoft Windows PDF Library improperly handles objects in memory.
- When the Microsoft JET Database Engine that could allow remote code execution on
an affected system.
- When the Win32k component fails to properly handle objects in memory.
Vulnerability Impact:
Successful exploitation will allow an attacker to
run arbitrary code in kernel mode, gain access to sensitive information and system
functionality, gain the same user rights as the current user and obtain information
to further compromise the user's system.
Affected Software/OS:
Microsoft Windows 10 Version 1511 x32/x64.
Solution:
The vendor has released updates. Please see the references for more information.
CVSS Score:
9.3
CVSS Vector:
AV:N/AC:M/Au:N/C:C/I:C/A:C
|
