Test ID:	1.3.6.1.4.1.25623.1.0.815401
Category:	Windows : Microsoft Bulletins
Title:	Microsoft Windows Multiple Vulnerabilities (KB4507435)
Summary:	This host is missing a critical security; update according to Microsoft KB4507435
Description:	Summary: This host is missing a critical security update according to Microsoft KB4507435 Vulnerability Insight: Multiple flaws exist due to: - SymCrypt improperly handles a specially crafted digital signature. - Scripting engine improperly handles objects in memory in Microsoft browsers. - Windows RDP client improperly discloses the contents of its memory. - Windows Graphics Device Interface (GDI) improperly handles objects in the memory. - An elevation of privilege exists in Windows Audio Service. - Kernel Information Disclosure Vulnerability (SWAPGS Attack). Please see the references for more information about the vulnerabilities. Vulnerability Impact: Successful exploitation will allow an attacker to execute arbitrary code in kernel mode, elevate privileges by escaping a sandbox, gain access to sensitive information, conduct denial of service and could take control of the affected system. Affected Software/OS: - Microsoft Windows 10 Version 1803 for 32-bit Systems - Microsoft Windows 10 Version 1803 for x64-based Systems Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2019-0785 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0785 Common Vulnerability Exposure (CVE) ID: CVE-2019-0811 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0811 Common Vulnerability Exposure (CVE) ID: CVE-2019-0865 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0865 Common Vulnerability Exposure (CVE) ID: CVE-2019-0880 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0880 Common Vulnerability Exposure (CVE) ID: CVE-2019-0887 BugTraq ID: 108964 http://www.securityfocus.com/bid/108964 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0887 https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/ https://research.checkpoint.com/reverse-rdp-the-hyper-v-connection/ Common Vulnerability Exposure (CVE) ID: CVE-2019-1102 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1102 Common Vulnerability Exposure (CVE) ID: CVE-2019-0966 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0966 Common Vulnerability Exposure (CVE) ID: CVE-2019-0975 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0975 Common Vulnerability Exposure (CVE) ID: CVE-2019-0999 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0999 Common Vulnerability Exposure (CVE) ID: CVE-2019-1001 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1001 Common Vulnerability Exposure (CVE) ID: CVE-2019-1004 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1004 Common Vulnerability Exposure (CVE) ID: CVE-2019-1103 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1103 Common Vulnerability Exposure (CVE) ID: CVE-2019-1104 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1104 Common Vulnerability Exposure (CVE) ID: CVE-2019-1106 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1106 Common Vulnerability Exposure (CVE) ID: CVE-2019-1107 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1107 Common Vulnerability Exposure (CVE) ID: CVE-2019-1006 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1006 Common Vulnerability Exposure (CVE) ID: CVE-2019-1108 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1108 Common Vulnerability Exposure (CVE) ID: CVE-2019-1037 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1037 Common Vulnerability Exposure (CVE) ID: CVE-2019-1056 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1056 Common Vulnerability Exposure (CVE) ID: CVE-2019-1113 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1113 Common Vulnerability Exposure (CVE) ID: CVE-2019-1059 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1059 Common Vulnerability Exposure (CVE) ID: CVE-2019-1062 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1062 Common Vulnerability Exposure (CVE) ID: CVE-2019-1063 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1063 Common Vulnerability Exposure (CVE) ID: CVE-2019-1067 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1067 Common Vulnerability Exposure (CVE) ID: CVE-2019-1117 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1117 Common Vulnerability Exposure (CVE) ID: CVE-2019-1118 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1118 Common Vulnerability Exposure (CVE) ID: CVE-2019-1119 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1119 Common Vulnerability Exposure (CVE) ID: CVE-2019-1120 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1120 Common Vulnerability Exposure (CVE) ID: CVE-2019-1121 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1121 Common Vulnerability Exposure (CVE) ID: CVE-2019-1122 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1122 Common Vulnerability Exposure (CVE) ID: CVE-2019-1123 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1123 Common Vulnerability Exposure (CVE) ID: CVE-2019-1124 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1124 Common Vulnerability Exposure (CVE) ID: CVE-2019-1071 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1071 Common Vulnerability Exposure (CVE) ID: CVE-2019-1073 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1073 Common Vulnerability Exposure (CVE) ID: CVE-2019-1126 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1126 Common Vulnerability Exposure (CVE) ID: CVE-2019-1127 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1127 Common Vulnerability Exposure (CVE) ID: CVE-2019-1128 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1128 Common Vulnerability Exposure (CVE) ID: CVE-2019-1129 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1129 Common Vulnerability Exposure (CVE) ID: CVE-2019-1130 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1130 Common Vulnerability Exposure (CVE) ID: CVE-2019-1074 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1074 Common Vulnerability Exposure (CVE) ID: CVE-2019-1083 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1083 Common Vulnerability Exposure (CVE) ID: CVE-2019-1085 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1085 Common Vulnerability Exposure (CVE) ID: CVE-2019-1086 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1086 Common Vulnerability Exposure (CVE) ID: CVE-2019-1087 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1087 Common Vulnerability Exposure (CVE) ID: CVE-2019-1088 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1088 Common Vulnerability Exposure (CVE) ID: CVE-2019-1089 http://packetstormsecurity.com/files/153683/Microsoft-Windows-RPCSS-Activation-Kernel-Security-Callback-Privilege-Escalation.html https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1089 Common Vulnerability Exposure (CVE) ID: CVE-2019-1090 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1090 Common Vulnerability Exposure (CVE) ID: CVE-2019-1091 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1091 Common Vulnerability Exposure (CVE) ID: CVE-2019-1092 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1092 Common Vulnerability Exposure (CVE) ID: CVE-2019-1095 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1095 Common Vulnerability Exposure (CVE) ID: CVE-2019-1096 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1096 Common Vulnerability Exposure (CVE) ID: CVE-2019-1097 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1097 Common Vulnerability Exposure (CVE) ID: CVE-2019-1093 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1093 Common Vulnerability Exposure (CVE) ID: CVE-2019-1094 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1094 Common Vulnerability Exposure (CVE) ID: CVE-2019-0683 Common Vulnerability Exposure (CVE) ID: CVE-2019-1125 RHBA-2019:2824 https://access.redhat.com/errata/RHBA-2019:2824 RHBA-2019:3248 https://access.redhat.com/errata/RHBA-2019:3248 RHSA-2019:2600 https://access.redhat.com/errata/RHSA-2019:2600 RHSA-2019:2609 https://access.redhat.com/errata/RHSA-2019:2609 RHSA-2019:2695 https://access.redhat.com/errata/RHSA-2019:2695 RHSA-2019:2696 https://access.redhat.com/errata/RHSA-2019:2696 RHSA-2019:2730 https://access.redhat.com/errata/RHSA-2019:2730 RHSA-2019:2899 https://access.redhat.com/errata/RHSA-2019:2899 RHSA-2019:2900 https://access.redhat.com/errata/RHSA-2019:2900 RHSA-2019:2975 https://access.redhat.com/errata/RHSA-2019:2975 RHSA-2019:3011 https://access.redhat.com/errata/RHSA-2019:3011 RHSA-2019:3220 https://access.redhat.com/errata/RHSA-2019:3220 http://packetstormsecurity.com/files/156337/SWAPGS-Attack-Proof-Of-Concept.html http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200408-01-swapgs-en https://kc.mcafee.com/corporate/index?page=content&id=SB10297 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1125 https://www.synology.com/security/advisory/Synology_SA_19_32
Copyright	Copyright (C) 2019 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.