ID de Prueba:	1.3.6.1.4.1.25623.1.0.815743
Categoría:	Windows : Microsoft Bulletins
Título:	Microsoft Windows Multiple Vulnerabilities (KB4528760)
Resumen:	This host is missing a critical security; update according to Microsoft KB4528760
Descripción:	Summary: This host is missing a critical security update according to Microsoft KB4528760 Vulnerability Insight: Multiple flaws exist due to: - Windows Common Log File System (CLFS) driver fails to properly handle objects in memory. - Windows Search Indexer handles objects in memory. - Win32k component fails to properly handle objects in memory. - Microsoft Windows implements predictable memory section names. - Windows Media Service allows file creation in arbitrary locations. - Internet Explorer improperly accesses objects in memory. - Windows Graphics Device Interface Plus (GDI+) improperly handles objects in memory. Please see the references for more information about the vulnerabilities. Vulnerability Impact: Successful exploitation will allow an attacker to execute arbitrary code, elevate privileges, disclose sensitive information, conduct denial of service and spoofing attacks. Affected Software/OS: - Microsoft Windows 10 Version 1903 for 32-bit Systems - Microsoft Windows 10 Version 1903 for x64-based Systems - Microsoft Windows 10 Version 1909 for 32-bit Systems - Microsoft Windows 10 Version 1909 for x64-based Systems Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 7.6 CVSS Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2020-0601 http://packetstormsecurity.com/files/155960/CurveBall-Microsoft-Windows-CryptoAPI-Spoofing-Proof-Of-Concept.html http://packetstormsecurity.com/files/155961/CurveBall-Microsoft-Windows-CryptoAPI-Spoofing-Proof-Of-Concept.html https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0601 Common Vulnerability Exposure (CVE) ID: CVE-2020-0607 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0607 Common Vulnerability Exposure (CVE) ID: CVE-2020-0615 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0615 https://www.zerodayinitiative.com/advisories/ZDI-20-123/ Common Vulnerability Exposure (CVE) ID: CVE-2020-0623 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0623 Common Vulnerability Exposure (CVE) ID: CVE-2020-0608 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0608 Common Vulnerability Exposure (CVE) ID: CVE-2020-0611 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0611 Common Vulnerability Exposure (CVE) ID: CVE-2020-0614 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0614 Common Vulnerability Exposure (CVE) ID: CVE-2020-0613 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0613 Common Vulnerability Exposure (CVE) ID: CVE-2020-0616 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0616 https://www.zerodayinitiative.com/advisories/ZDI-20-124/ Common Vulnerability Exposure (CVE) ID: CVE-2020-0620 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0620 Common Vulnerability Exposure (CVE) ID: CVE-2020-0624 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0624 Common Vulnerability Exposure (CVE) ID: CVE-2020-0625 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0625 Common Vulnerability Exposure (CVE) ID: CVE-2020-0626 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0626 Common Vulnerability Exposure (CVE) ID: CVE-2020-0627 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0627 Common Vulnerability Exposure (CVE) ID: CVE-2020-0628 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0628 Common Vulnerability Exposure (CVE) ID: CVE-2020-0629 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0629 Common Vulnerability Exposure (CVE) ID: CVE-2020-0630 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0630 Common Vulnerability Exposure (CVE) ID: CVE-2020-0631 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0631 Common Vulnerability Exposure (CVE) ID: CVE-2020-0632 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0632 Common Vulnerability Exposure (CVE) ID: CVE-2020-0633 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0633 Common Vulnerability Exposure (CVE) ID: CVE-2020-0634 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0634 https://www.zerodayinitiative.com/advisories/ZDI-20-125/ Common Vulnerability Exposure (CVE) ID: CVE-2020-0635 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0635 https://www.zerodayinitiative.com/advisories/ZDI-20-143/ Common Vulnerability Exposure (CVE) ID: CVE-2020-0636 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0636 Common Vulnerability Exposure (CVE) ID: CVE-2020-0638 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0638 Common Vulnerability Exposure (CVE) ID: CVE-2020-0639 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0639 Common Vulnerability Exposure (CVE) ID: CVE-2020-0644 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0644 Common Vulnerability Exposure (CVE) ID: CVE-2020-0641 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0641 Common Vulnerability Exposure (CVE) ID: CVE-2020-0642 http://packetstormsecurity.com/files/158729/Microsoft-Windows-Win32k-Privilege-Escalation.html https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0642 Common Vulnerability Exposure (CVE) ID: CVE-2020-0643 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0643 Common Vulnerability Exposure (CVE) ID: CVE-2020-0640 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0640
Copyright	Copyright (C) 2020 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.