| Description: | Summary:
This host is missing a critical security
update according to Microsoft KB4525232
Vulnerability Insight:
Multiple flaws exist due to:
- Microsoft Hyper-V Network Switch on a host server fails to properly
validate input from a privileged user on a guest operating system.
- Windows Installer improperly handles certain filesystem operations.
- Windows Universal Plug and Play (UPnP) service improperly allows COM
object creation.
- Windows Jet Database Engine improperly handles objects in memory.
- Windows Graphics Component improperly handles objects in memory.
- Scripting engine improperly handles objects in memory in Internet Explorer.
- Windows Netlogon improperly handles a secure communications channel.
- Windows Win32k component fails to properly handle objects in memory.
Please see the references for more information about the vulnerabilities.
Vulnerability Impact:
Successful exploitation will allow an attacker
to crash the host server, execute code with elevated permissions, bypass security
restrictions, and disclose sensitive information to further compromise the user's
system.
Affected Software/OS:
- Microsoft Windows 10 for 32-bit Systems
- Microsoft Windows 10 for x64-based Systems
Solution:
The vendor has released updates. Please see
the references for more information.
CVSS Score:
9.3
CVSS Vector:
AV:N/AC:M/Au:N/C:C/I:C/A:C
|
