| Description: | Summary:
This host is missing a critical security
update according to Microsoft KB4480973
Vulnerability Insight:
Multiple flaws exist due to:
- Windows kernel improperly handles objects in memory.
- An error in Microsoft XmlDocument class that could allow an attacker to escape
from the AppContainer sandbox in the browser.
- Chakra scripting engine improperly handles objects in memory in Microsoft Edge.
- MSHTML engine improperly validates input.
- Windows Hyper-V on a host server fails to properly validate input from an
authenticated user on a guest operating system.
- Windows improperly handles authentication requests.
- Windows Subsystem for Linux improperly handles objects in memory.
- Windows Data Sharing Service improperly handles file operations.
- Windows Jet Database Engine improperly handles objects in memory.
- Windows Runtime improperly handles objects in memory.
- An elevation of privilege exists in Windows COM Desktop Broker.
Vulnerability Impact:
Successful exploitation will allow an attacker
to obtain information to further compromise the user's system, gain elevated
privileges and execute arbitrary code on a victim system.
Affected Software/OS:
Microsoft Windows 10 Version 1703 x32/x64 Systems.
Solution:
The vendor has released updates. Please see the references for more information.
CVSS Score:
9.3
CVSS Vector:
AV:N/AC:M/Au:N/C:C/I:C/A:C
|
