| Description: | Summary:
This host is missing a critical security
update according to Microsoft KB4467708.
Vulnerability Insight:
Multiple flaws exist:
- in the way that Microsoft Edge handles cross-origin requests.
- in Windows when the Win32k component fails to properly handle objects in
memory.
- when an open source customization for Microsoft Active Directory Federation
Services (AD FS) does not properly sanitize a specially crafted web request to
an affected AD FS server.
- in the way that the Chakra scripting engine handles objects in memory in
Microsoft Edge.
- A security feature bypass exists when Windows incorrectly validates kernel
driver signatures.
- when DirectX improperly handles objects in memory.
- when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).
- when VBScript improperly discloses the contents of its memory, which could
provide an attacker with information to further compromise the user's computer
or data.
- when Microsoft Edge improperly handles specific HTML content.
- in Microsoft JScript that could allow an attacker to bypass Device Guard.
- in PowerShell that could allow an attacker to execute unlogged code.
- when PowerShell improperly handles specially crafted files.
- in the way that Windows Deployment Services TFTP Server handles objects in
memory.
- in the way that the Microsoft RemoteFX Virtual GPU miniport driver handles
objects in memory.
- An elevation of privilege exists in Windows COM Aggregate Marshaler.
- when Windows Audio Service fails to properly handle objects in memory.
- when Microsoft Edge does not properly enforce cross-domain policies, which
could allow an attacker to access information from one domain and inject it
into another domain.
- in the way that the VBScript engine handles objects in memory.
- in Windows 10 version 1809 when installed from physical media (USB, DVD, etc.
- when Kernel Remote Procedure Call Provider driver improperly
initializes objects in memory.
Vulnerability Impact:
Successful exploitation will allow an attacker
to run arbitrary code, bypass security restrictions and load improperly signed
drivers into the kernel, gain the same user rights as the current user, obtain
information to further compromise the user's system, improperly discloses file
information, trick a user into believing that the user was on a legitimate website
and escalate privileges.
Affected Software/OS:
- Microsoft Windows 10 Version 1809 for 32-bit Systems
- Microsoft Windows 10 Version 1809 for x64-based Systems
Solution:
The vendor has released updates. Please see the references for more information.
CVSS Score:
10.0
CVSS Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
