| Description: | Summary:
This host is missing a critical security
update according to Microsoft KB4565483
Vulnerability Insight:
Multiple flaws exist due to:
- Windows Domain Name System servers fail to properly handle requests (SIGRed, CVE-2020-1350).
- Windows System Events Broker fails to properly handle file operations.
- Windows WalletService fails to properly handle objects in memory.
- Windows Mobile Device Management (MDM) Diagnostics fails to
properly handle objects in memory.
- Windows Jet Database Engine fails to properly handle objects in memory.
- Windows Network Connections Service fails to properly handle
objects in memory.
- SharedStream Library fails to handle objects in memory.
Please see the references for more information about the vulnerabilities.
Vulnerability Impact:
Successful exploitation will allow an attacker
to execute arbitrary code, elevate privileges, disclose sensitive information
and denial of service attacks.
Affected Software/OS:
- Microsoft Windows 10 Version 1903 for 32-bit Systems
- Microsoft Windows 10 Version 1909 for 32-bit Systems
- Microsoft Windows 10 Version 1903 for x64-based Systems
- Microsoft Windows 10 Version 1909 for x64-based Systems
Solution:
The vendor has released updates. Please see
the references for more information.
CVSS Score:
10.0
CVSS Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
