ID de Prueba:	1.3.6.1.4.1.25623.1.0.815745
Categoría:	Windows : Microsoft Bulletins
Título:	Microsoft Windows Multiple Vulnerabilities (KB4534306)
Resumen:	This host is missing a critical security; update according to Microsoft KB4534306
Descripción:	Summary: This host is missing a critical security update according to Microsoft KB4534306 Vulnerability Insight: Multiple flaws exist due to: - Windows Search Indexer improperly handles objects in memory. - Microsoft Windows Graphics Component improperly handles objects in memory. - Microsoft Cryptographic Services improperly handles files. - Microsoft Windows implements predictable memory section names. - Windows Media Service allows file creation in arbitrary locations. - Internet Explorer improperly accesses objects in memory. - Windows Graphics Device Interface Plus (GDI+) improperly handles objects in memory. - Windows Common Log File System (CLFS) driver improperly handles objects in memory. Please see the references for more information about the vulnerabilities. Vulnerability Impact: Successful exploitation will allow an attacker to execute arbitrary code, elevate privileges, disclose sensitive information, conduct denial of service and spoofing attacks. Affected Software/OS: - Microsoft Windows 10 for 32-bit Systems - Microsoft Windows 10 for x64-based Systems Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2020-0601 http://packetstormsecurity.com/files/155960/CurveBall-Microsoft-Windows-CryptoAPI-Spoofing-Proof-Of-Concept.html http://packetstormsecurity.com/files/155961/CurveBall-Microsoft-Windows-CryptoAPI-Spoofing-Proof-Of-Concept.html https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0601 Common Vulnerability Exposure (CVE) ID: CVE-2020-0607 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0607 Common Vulnerability Exposure (CVE) ID: CVE-2020-0615 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0615 https://www.zerodayinitiative.com/advisories/ZDI-20-123/ Common Vulnerability Exposure (CVE) ID: CVE-2020-0617 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0617 Common Vulnerability Exposure (CVE) ID: CVE-2020-0623 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0623 Common Vulnerability Exposure (CVE) ID: CVE-2020-0608 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0608 Common Vulnerability Exposure (CVE) ID: CVE-2020-0611 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0611 Common Vulnerability Exposure (CVE) ID: CVE-2020-0614 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0614 Common Vulnerability Exposure (CVE) ID: CVE-2020-0613 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0613 Common Vulnerability Exposure (CVE) ID: CVE-2020-0620 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0620 Common Vulnerability Exposure (CVE) ID: CVE-2020-0622 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0622 Common Vulnerability Exposure (CVE) ID: CVE-2020-0625 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0625 Common Vulnerability Exposure (CVE) ID: CVE-2020-0626 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0626 Common Vulnerability Exposure (CVE) ID: CVE-2020-0627 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0627 Common Vulnerability Exposure (CVE) ID: CVE-2020-0628 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0628 Common Vulnerability Exposure (CVE) ID: CVE-2020-0629 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0629 Common Vulnerability Exposure (CVE) ID: CVE-2020-0630 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0630 Common Vulnerability Exposure (CVE) ID: CVE-2020-0631 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0631 Common Vulnerability Exposure (CVE) ID: CVE-2020-0632 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0632 Common Vulnerability Exposure (CVE) ID: CVE-2020-0634 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0634 https://www.zerodayinitiative.com/advisories/ZDI-20-125/ Common Vulnerability Exposure (CVE) ID: CVE-2020-0635 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0635 https://www.zerodayinitiative.com/advisories/ZDI-20-143/ Common Vulnerability Exposure (CVE) ID: CVE-2020-0639 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0639 Common Vulnerability Exposure (CVE) ID: CVE-2020-0644 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0644 Common Vulnerability Exposure (CVE) ID: CVE-2020-0641 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0641 Common Vulnerability Exposure (CVE) ID: CVE-2020-0642 http://packetstormsecurity.com/files/158729/Microsoft-Windows-Win32k-Privilege-Escalation.html https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0642 Common Vulnerability Exposure (CVE) ID: CVE-2020-0643 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0643 Common Vulnerability Exposure (CVE) ID: CVE-2020-0606 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0606 Common Vulnerability Exposure (CVE) ID: CVE-2020-0605 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0605 Common Vulnerability Exposure (CVE) ID: CVE-2020-0646 http://packetstormsecurity.com/files/156930/SharePoint-Workflows-XOML-Injection.html https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0646 Common Vulnerability Exposure (CVE) ID: CVE-2020-0640 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0640
Copyright	Copyright (C) 2020 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.