CVE ID | Published | Description | Score | Severity |
---|---|---|---|---|
Windows Local Session Manager (LSM) Denial of Service Vulnerability | 6.5 |
MEDIUM |
||
Windows Local Security Authority (LSA) Denial of Service Vulnerability | 6.5 |
MEDIUM |
||
Windows Kernel Memory Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | 7.3 |
HIGH |
||
Windows Kerberos Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Print Spooler Elevation of Privilege Vulnerability | 7.3 |
HIGH |
||
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
Win32k Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Digital Media Receiver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability | 5.9 |
MEDIUM |
||
Windows Digital Media Receiver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Windows OLE Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
Windows Driver Revocation List Security Feature Bypass Vulnerability | 5.5 |
MEDIUM |
||
Secure Boot Security Feature Bypass Vulnerability | 6.7 |
MEDIUM |
||
Microsoft Word Security Feature Bypass Vulnerability | 7.5 |
HIGH |
||
Windows MSHTML Platform Security Feature Bypass Vulnerability | 6.5 |
MEDIUM |
||
Microsoft SharePoint Server Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
Windows Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Bluetooth Driver Elevation of Privilege Vulnerability | 7.4 |
HIGH |
||
Windows Bluetooth Driver Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Backup Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows iSCSI Target Service Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Bluetooth Driver Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
Remote Desktop Client Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
Remote Procedure Call Runtime Denial of Service Vulnerability | 7.5 |
HIGH |
||
Windows NFS Portmapper Information Disclosure Vulnerability | 7.5 |
HIGH |
||
Windows Pragmatic General Multicast (PGM) Denial of Service Vulnerability | 7.5 |
HIGH |
||
Windows NTLM Security Support Provider Information Disclosure Vulnerability | 5.9 |
MEDIUM |
||
Server for NFS Denial of Service Vulnerability | 7.5 |
HIGH |
||
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
Microsoft Message Queuing Denial of Service Vulnerability | 7.5 |
HIGH |
||
Windows Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Group Policy Security Feature Bypass Vulnerability | 4.4 |
MEDIUM |
||
Windows Kernel Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Common Log File System Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Win32k Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Clip Service Elevation of Privilege Vulnerability | 7 |
HIGH |
||
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
Windows Boot Manager Security Feature Bypass Vulnerability | 6.8 |
MEDIUM |
||
Windows Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Kernel Memory Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Lock Screen Security Feature Bypass Vulnerability | 6.8 |
MEDIUM |
||
Windows Boot Manager Security Feature Bypass Vulnerability | 6.8 |
MEDIUM |
||
Remote Desktop Protocol Client Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Common Log File System Driver Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability | 7.5 |
HIGH |
||
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability | 7.5 |
HIGH |
||
Windows Kernel Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Windows Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Lock Screen Security Feature Bypass Vulnerability | 6.8 |
MEDIUM |
||
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability | 7.5 |
HIGH |
||
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability | 7 |
HIGH |
||
Windows Spoofing Vulnerability | 5.5 |
MEDIUM |
||
Windows Bluetooth Driver Remote Code Execution Vulnerability | 7.5 |
HIGH |
||
Windows Enroll Engine Security Feature Bypass Vulnerability | 5.3 |
MEDIUM |
||
Windows NTLM Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability | 7.1 |
HIGH |
||
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Graphics Component Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
Windows Kernel Denial of Service Vulnerability | 5.5 |
MEDIUM |
||
Windows Remote Procedure Call Service (RPCSS) Elevation of Privilege Vulnerability | 8.8 |
HIGH |
||
Windows Kernel Elevation of Privilege Vulnerability | 7.1 |
HIGH |
||
Windows Error Reporting Service Elevation of Privilege Vulnerability | 7 |
HIGH |
||
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | 7 |
HIGH |
||
Windows Network Address Translation (NAT) Denial of Service Vulnerability | 7.5 |
HIGH |
||
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability | 7 |
HIGH |
||
Windows Secure Channel Denial of Service Vulnerability | 7.5 |
HIGH |
||
Microsoft Message Queuing Denial of Service Vulnerability | 7.5 |
HIGH |
||
Remote Procedure Call Runtime Information Disclosure Vulnerability | 5.3 |
MEDIUM |
||
Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows SmartScreen Security Feature Bypass Vulnerability | 4.4 |
MEDIUM |
||
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Bluetooth Service Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability | 4.3 |
MEDIUM |
||
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
Windows Graphics Component Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
Microsoft PostScript and PCL6 Class Printer Driver Elevation of Privilege Vulnerability | 8.8 |
HIGH |
||
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
Windows Secure Channel Denial of Service Vulnerability | 5.5 |
MEDIUM |
||
Windows Graphics Component Elevation of Privilege Vulnerability | 7 |
HIGH |
||
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | 7.5 |
HIGH |
||
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability | 7.5 |
HIGH |
||
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
Windows Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Partition Management Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Cryptographic Services Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability | 7.1 |
HIGH |
||
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Accounts Picture Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows HTTP.sys Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability | 7.1 |
HIGH |
||
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
Windows Media Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Windows Media Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Remote Procedure Call Runtime Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability | 7.5 |
HIGH |
||
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows BrokerInfrastructure Service Elevation of Privilege Vulnerability | 7 |
HIGH |
||
Windows Bluetooth Driver Elevation of Privilege Vulnerability | 8.8 |
HIGH |
||
Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability | 7 |
HIGH |
||
Windows Graphics Component Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
.NET and Visual Studio Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Windows Common Log File System Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
.NET Framework Denial of Service Vulnerability | 5 |
MEDIUM |
||
Windows iSCSI Service Denial of Service Vulnerability | 7.5 |
HIGH |
||
Microsoft Protected Extensible Authentication Protocol (PEAP) Denial of Service Vulnerability | 7.5 |
HIGH |
||
Windows iSCSI Discovery Service Denial of Service Vulnerability | 7.5 |
HIGH |
||
Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability | 5.3 |
MEDIUM |
||
Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability | 6.2 |
MEDIUM |
||
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Fax Service Remote Code Execution Vulnerability | 6.8 |
MEDIUM |
||
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability | 5.7 |
MEDIUM |
||
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability | 7.5 |
HIGH |
||
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
NT OS Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Graphics Component Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Distributed File System (DFS) Remote Code Execution Vulnerability | 7.4 |
HIGH |
||
Windows Secure Channel Denial of Service Vulnerability | 7.5 |
HIGH |
||
Windows Secure Channel Denial of Service Vulnerability | 7.5 |
HIGH |
||
Windows Kerberos Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Active Directory Domain Services API Denial of Service Vulnerability | 7.5 |
HIGH |
||
Windows Secure Channel Denial of Service Vulnerability | 7.5 |
HIGH |
||
Windows Common Log File System Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows iSCSI Service Denial of Service Vulnerability | 7.5 |
HIGH |
||
Windows MSHTML Platform Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Windows Graphics Component Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows iSCSI Discovery Service Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
Windows Media Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Microsoft ODBC Driver Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Microsoft ODBC Driver Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability | 8.8 |
HIGH |
||
Windows Bluetooth Driver Elevation of Privilege Vulnerability | 7 |
HIGH |
||
Windows SmartScreen Security Feature Bypass Vulnerability | 5.4 |
MEDIUM |
||
Windows Mark of the Web Security Feature Bypass Vulnerability | 5.4 |
MEDIUM |
||
Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Mark of the Web Security Feature Bypass Vulnerability | 5.4 |
MEDIUM |
||
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Scripting Languages Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows COM+ Event System Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Common Log File System Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. The attacker can then install programs, view, change, or delete data, or create new accounts in the context allowed by the user’s rights. Please see the MSRC Blog Entry for important information about steps you can take to protect your system from this vulnerability. | 7.8 |
HIGH |
||
Windows Graphics Component Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
Windows LSA Spoofing Vulnerability | 8.1 |
HIGH |
||
Active Directory Domain Services Elevation of Privilege Vulnerability | 8.8 |
HIGH |
||
Windows User Profile Service Elevation of Privilege Vulnerability | 7 |
HIGH |
||
Windows Common Log File System Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Runtime Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Windows User Profile Service Elevation of Privilege Vulnerability | 7 |
HIGH |
||
Win32k Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Installer Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Win32k Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Win32k Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks that attempt to exploit this vulnerability by using specially-crafted Microsoft Office documents. An attacker could craft a malicious ActiveX control to be used by a Microsoft Office document that hosts the browser rendering engine. The attacker would then have to convince the user to open the malicious document. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. Microsoft Defender Antivirus and Microsoft Defender for Endpoint both provide detection and protections for the known vulnerability. Customers should keep antimalware products up to date. Customers who utilize automatic updates do not need to take additional action. Enterprise customers who manage updates should select the detection build 1.349.22.0 or newer and deploy it across their environments. Microsoft Defender for Endpoint alerts will be displayed as: “Suspicious Cpl File Execution”. Upon completion of this investigation, Microsoft will take the appropriate action to help protect our customers. This may include providing a security update through our monthly release process or providing an out-of-cycle security update, depending on customer needs. Please see the Mitigations and Workaround sections for important information about steps you can take to protect your system from this vulnerability. UPDATE September 14, 2021: Microsoft has released security updates to address this vulnerability. Please see the Security Updates table for the applicable update for your system. We recommend that you install these updates immediately. Please see the FAQ for important information about which updates are applicable to your system. |
8.8 |
HIGH |
||
Windows Common Log File System Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Update Medic Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Event Tracing Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows User Profile Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Security Accounts Manager (SAM) database. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. An attacker must have the ability to execute code on a victim system to exploit this vulnerability. After installing this security update, you must manually delete all shadow copies of system files, including the SAM database, to fully mitigate this vulnerabilty. Simply installing this security update will not fully mitigate this vulnerability. See KB5005357- Delete Volume Shadow Copies. |
7.8 |
HIGH |