远程 Windows 主机缺少安全更新 4565349。
因此，该应用程序受到多个漏洞的影响：

  - Windows 媒体基础未正确处理内存中对象时，存在内存损坏漏洞。
    成功利用此漏洞的攻击者可安装程序、查看、更改或删除数据，或者创建拥有完全用户权限的新帐户。攻击者可以通过多种方式利用此漏洞，例如诱使用户打开特别构建的文档，或诱使用户访问恶意网页。此安全更新通过更正 Windows 媒体基础处理内存中对象的方式来修复此漏洞。（CVE-2020-1379、CVE-2020-1477、CVE-2020-1478、CVE-2020-1492、CVE-2020-1525、CVE-2020-1554）

  - Windows Media 音频编解码器未正确处理对象时，存在远程代码执行漏洞。成功利用此漏洞的攻击者可控制受影响的系统。攻击者可以通过多种方式利用此漏洞，例如诱使用户打开特别构建的文档，或诱使用户访问恶意网页。此安全更新通过更正 Windows Media 音频编解码器处理对象的方式来修复此漏洞。(CVE-2020-1339)

  - 互联用户体验和遥测服务未正确处理文件操作时，存在权限提升漏洞。成功利用该漏洞的攻击者可在权限提升后的环境中运行进程。攻击者可通过在受害者系统上运行特别构建的应用程序来利用该漏洞。此安全更新通过更正互联用户体验和遥测服务处理文件操作的方式来修复此漏洞。(CVE-2020-1511)

  - srmsvc.dll 处理内存对象的方式存在权限提升漏洞。成功利用此漏洞的攻击者可使用已提升权限执行代码。
    (CVE-2020-1475)

  - Microsoft Edge 未正确访问内存对象时，存在远程代码执行漏洞。
    此漏洞可使攻击者在当前用户环境中执行任意代码，从而导致内存损坏。成功利用此漏洞的攻击者可获得与当前用户相同的用户权限。(CVE-2020-1569)

  - Windows CDP 用户组件未正确处理内存时，存在权限提升漏洞。
    （CVE-2020-1549、CVE-2020-1550）

  - DirectWrite 未正确披露内存内容时，存在信息泄露漏洞。成功利用此漏洞的攻击者可获取信息以进一步危害用户系统。攻击者可以通过多种方式利用该漏洞，比如诱使用户打开特制文档或访问不可信的网页。
    此安全更新通过更正 DirectWrite 处理内存对象的方式修复漏洞。
    (CVE-2020-1577)

  - Windows Radio Manager API 未正确处理内存时，存在权限提升漏洞。
    (CVE-2020-1528)

  - RPC 服务器若启用路由和远程访问，存在信息泄露漏洞。成功利用此漏洞的攻击者可获取信息而进一步危害用户系统 (CVE-2020-1383)

  - 脚本引擎在 Microsoft Edge（基于 HTML）中处理内存对象的方式存在远程代码执行漏洞。此漏洞可使攻击者在当前用户环境中执行任意代码，从而导致内存损坏。成功利用此漏洞的攻击者可获得与当前用户相同的用户权限。(CVE-2020-1555)

  - Windows 工作文件夹服务未正确处理内存时，存在权限提升漏洞。
    （CVE-2020-1470、CVE-2020-1484、CVE-2020-1516）

  - Windows 工作文件夹服务未正确处理文件操作时，存在权限提升漏洞。成功利用该漏洞的攻击者可在权限提升后的环境中运行进程。攻击者可通过在受害者系统上运行特别构建的应用程序来利用该漏洞。此更新通过更正 Windows 工作文件夹服务处理文件操作的方式来修复此漏洞。(CVE-2020-1552)

  - Windows 自定义协议引擎未正确处理内存时，存在权限提升漏洞。(CVE-2020-1527)

  - 当 Storage Service 不当处理文件操作时，存在权限提升漏洞。成功利用此漏洞的攻击者可在受害者系统上获得提升的权限。
    (CVE-2020-1490)

  - Windows 图形设备接口 (GDI) 处理内存中对象的方式存在权限提升漏洞。成功利用此漏洞的攻击者可在内核模式下运行任意代码。然后，攻击者可安装程序，
    查看、更改或删除数据，或者创建拥有完整全用户权限的新帐户。（CVE-2020-1480、CVE-2020-1529）

  - Windows Speech Runtime 未正确处理内存时，存在权限提升漏洞。
    （CVE-2020-1521、CVE-2020-1522）

  - Windows CSC 服务未正确处理内存时，存在权限提升漏洞。
    （CVE-2020-1489、CVE-2020-1513）

  - Windows 帐户控制未正确处理内存时，存在权限提升漏洞。
    (CVE-2020-1531)

  - Windows 未正确处理硬链接时，存在权限提升漏洞。成功利用此漏洞的攻击者可覆写导致状态提升的目标文件。
    (CVE-2020-1467)

  - 当攻击者使用 RDP 连接至目标系统并发送特别构建的请求时，远程桌面网关（RD 网关）中存在拒绝服务漏洞。成功利用此漏洞的攻击者会使目标系统上的 RD 网关服务停止响应。
    (CVE-2020-1466)

  - Windows Runtime 未正确处理内存中对象时，存在权限提升漏洞。成功利用该漏洞的攻击者能在权限提升的环境中运行任意代码。攻击者可通过在受害者系统上运行特别构建的应用程序来利用该漏洞。此更新通过更正 Windows Runtime 处理内存对象的方式来修复漏洞。
    (CVE-2020-1553)

  - Windows Font Driver Host 未正确处理内存时，存在远程代码执行漏洞。成功利用此漏洞的攻击者可获得受害者系统的执行权。此安全更新通过更正 Windows Font Driver Host 处理内存的方式来修复此漏洞。(CVE-2020-1520)

  - Windows UPnP 设备主机未正确处理内存时，存在权限提升漏洞。
    （CVE-2020-1519、CVE-2020-1538）

  - Internet Explorer 中，脚本引擎处理内存中对象的方式存在远程代码执行漏洞。此漏洞可使攻击者在当前用户环境中执行任意代码，从而导致内存损坏。成功利用此漏洞的攻击者可获得与当前用户相同的用户权限。
    （CVE-2020-1380、CVE-2020-1570）

  - Windows 电话服务器未正确处理内存时，存在权限提升漏洞。
    (CVE-2020-1515)

  - 当通过身份验证的攻击者发送特别构建的验证请求时，本地安全认证子系统服务 (LSASS) 中存在权限提升漏洞。成功利用此漏洞的远程攻击者会造成目标系统上的 LSASS 服务出现权限提升情况。此安全更新通过更改 LSASS 处理特别构建的验证请求的方式来修复此漏洞。(CVE-2020-1509)

  - 媒体基础未正确处理内存中对象时，存在信息泄露漏洞。
    成功利用此漏洞的攻击者可获取信息，从而进一步危害用户系统。(CVE-2020-1487)

  - Windows AppX Deployment Extensions 未正确执行权限管理时，存在权限提升漏洞，可导致访问系统文件。(CVE-2020-1488)

  - Windows 文件服务器资源管理服务未正确处理内存时，存在权限提升漏洞。（CVE-2020-1517、CVE-2020-1518）

  - dnsrslvr.dll 处理内存对象的方式存在权限提升漏洞。成功利用此漏洞的攻击者可使用已提升权限执行代码。
    (CVE-2020-1584)

  - Windows 网络连接 Broker 未正确处理内存时，存在权限提升漏洞。(CVE-2020-1526)

  - Windows Speech Shell 组件未正确处理内存时，存在权限提升漏洞。(CVE-2020-1524)

  - IIS 上运行的 ASP.NET 或 .NET Web 应用程序错误地允许访问缓存的文件时，存在权限提升漏洞。成功利用此漏洞的攻击者可获得受限文件的访问权限。(CVE-2020-1476)

  - 当 Windows 远程访问未正确处理文件操作时，存在权限提升漏洞。成功利用此漏洞的攻击者可获得提升的权限。
    (CVE-2020-1537)

  -“公共用户头像” 文件夹未正确处理连接时，存在权限提升漏洞。(CVE-2020-1565)

  - 当 Windows 备份服务处理文件操作不当时，存在权限提升漏洞。(CVE-2020-1534)

  - Microsoft Edge PDF 阅读器未正确处理内存中对象时，存在远程代码执行漏洞。此漏洞可使攻击者在当前用户环境中执行任意代码，从而导致内存损坏。成功利用此漏洞的攻击者可获得与当前用户相同的用户权限。如果当前用户使用管理用户权限进行登录，攻击者可控制受影响系统。然后，攻击者可安装程序，查看、更改或删除数据，或者创建拥有完全用户权限的新帐户。(CVE-2020-1568)

  - 攻击者使用 Netlogon 远程协议 (MS-NRPC) 与域控制器建立有漏洞的 Netlogon 安全频道连接时，存在权限提升漏洞。成功利用该漏洞的攻击者可在网络设备上运行特别构建的应用程序。(CVE-2020-1472)

  - Windows 内核 API 未正确处理内存中的注册对象时，存在权限提升漏洞。成功利用此漏洞的攻击者可在目标系统上获得提升的权限。经身份验证的本地攻击者可通过运行特制的应用程序以利用此漏洞。此安全更新通过协助确保 Windows 内核 API 正确处理内存对象来修复漏洞。
    （CVE-2020-1377、CVE-2020-1378）

  - Windows 打印后台处理程序服务错误地允许任意写入文件系统时，存在权限提升漏洞。成功利用此漏洞的攻击者可使用已提升系统权限运行任意代码。然后，攻击者可安装程序，查看、更改或删除数据，或者创建拥有完全用户权限的新帐户。(CVE-2020-1337)

  - Windows WaasMedic Service 未正确处理内存时，存在信息泄露漏洞。
    (CVE-2020-1548)

  - Windows 图像采集 (WIA) 服务未正确披露内存内容时，存在信息泄露漏洞。成功利用此漏洞的攻击者可获取信息以进一步危害用户系统。
    （CVE-2020-1474、CVE-2020-1485）

  - Windows 内核未能确处理内存中对象时，存在权限提升漏洞。成功利用此漏洞的攻击者可在内核模式下运行任意代码。
    然后，攻击者可安装程序，查看、更改或删除数据，或者创建拥有完全用户权限的新帐户。（CVE-2020-1417、CVE-2020-1486、CVE-2020-1566）

  - Windows Jet 数据库引擎未正确处理内存中对象时，存在远程代码执行漏洞。成功利用此漏洞的攻击者可在受害者系统上执行任意代码。攻击者可诱使受害者开启特制文件，进而利用此漏洞。此更新通过更正 Windows Jet 数据库引擎处理内存中对象的方式来修复此漏洞。（CVE-2020-1473、CVE-2020-1557、CVE-2020-1558、CVE-2020-1564）

  - Microsoft .NET Framework 处理输入时存在远程代码执行漏洞。成功利用此漏洞的攻击者可控制受影响的系统。(CVE-2020-1046)

  - Windows WalletService 处理内存中对象的方式存在权限提升漏洞。成功利用此漏洞的攻击者可使用已提升权限执行代码。（CVE-2020-1533、CVE-2020-1556）

  - Windows 内核中存在信息泄露漏洞，使攻击者可以检索信息，以便绕过内核地址空间布局随机化 (ASLR)。成功利用该漏洞的攻击者可检索内核对象的内存地址。(CVE-2020-1578)

  - DirectX 未正确处理内存中对象时，存在权限提升漏洞。成功利用此漏洞的攻击者可在内核模式下运行任意代码。然后，攻击者可安装程序，查看、更改或删除数据，或者创建拥有完全用户权限的新帐户。
    (CVE-2020-1479)

  - WinSock 的 Windows 辅助功能驱动程序未正确处理内存时，存在权限提升漏洞。(CVE-2020-1587)

  - Windows 功能发现 SSDP 提供程序未正确处理内存时，存在权限提升漏洞。(CVE-2020-1579)

  - Microsoft 图形组件处理内存中对象的方式存在远程代码执行漏洞。成功利用该漏洞的攻击者可在目标系统上执行任意代码。（CVE-2020-1561、CVE-2020-1562）

  - Windows State Repository Service 未正确处理内存对象时，存在信息泄露漏洞。成功利用此漏洞的攻击者可获取信息，从而进一步危害用户系统。攻击者可通过在受害者系统上运行特别构建的应用程序来利用该漏洞。此更新通过更正 Windows State Repository Service 处理内存对象的方式来修复漏洞。(CVE-2020-1512)

  - Windows 远程访问未正确处理内存时，存在权限提升漏洞。
    (CVE-2020-1530)

  - MSHTML 引擎不当验证输入的方式存在远程代码执行漏洞。攻击者可在当前用户环境中执行任意代码。(CVE-2020-1567)

  - Windows 未正确验证文件签名时，存在欺骗漏洞。成功利用此漏洞的攻击者可绕过安全功能以及加载错误签名的文件。在攻击场景中，攻击者可绕过试图阻止加载错误签名文件的安全功能。此安全更新通过更正 Windows 验证文件签名的方式来修复漏洞。
    (CVE-2020-1464)

远程 Windows 主机缺少安全更新 4538461。
因此，该应用程序受到多个漏洞的影响：

  - Windows 设备安装管理器未正确处理文件操作时，存在权限提升漏洞。成功利用该漏洞的攻击者能在权限提升的环境中运行进程。攻击者可通过在受害者系统上运行特别构建的应用程序来利用该漏洞。此更新通过更正 Windows 设备安装管理器处理文件操作的方式来修复此漏洞。(CVE-2020-0819)

  - Windows 工作文件夹服务未正确处理文件操作时，存在权限提升漏洞。成功利用该漏洞的攻击者可在权限提升后的环境中运行进程。攻击者可通过在受害者系统上运行特别构建的应用程序来利用该漏洞。此更新通过更正 Windows Work Folder Service 处理文件操作的方式来修复此漏洞。（CVE-2020-0777、CVE-2020-0797、CVE-2020-0800、CVE-2020-0864、CVE-2020-0865、CVE-2020-0866、CVE-2020-0897）

  - Internet Explorer 未正确访问内存中对象时，存在远程代码执行漏洞。
    此漏洞可使攻击者在当前用户环境下执行任意代码，从而导致内存损坏。成功利用此漏洞的攻击者可获得与当前用户相同的用户权限。(CVE-2020-0824)

  - Windows Installer 中存在权限提升漏洞，这是 Windows Installer 处理某些文件系统操作的方式所致。（CVE-2020-0814、CVE-2020-0842、CVE-2020-0843）

  - Windows 模块安装程序服务未正确公开文件信息时，存在信息漏洞。
    成功利用此漏洞可使攻击者读取文件系统上的任意文件。
    (CVE-2020-0859)

  - Windows 移动设备管理 (MDM) 诊断未正确处理连接时，存在权限提升漏洞。成功利用此漏洞的攻击者可绕过访问限制并删除文件。(CVE-2020-0854)

  - Windows 图形组件未正确处理内存中的对象时，存在权限提升漏洞。成功利用该漏洞的攻击者可在权限提升后的环境中运行进程。(CVE-2020-0791)

  - Windows Network Connections Service 无法正确处理内存中对象时，存在信息泄露漏洞。成功利用此漏洞的攻击者可能会泄露提升进程的内存内容。(CVE-2020-0871)

  -“公共用户头像” 文件夹未正确处理连接时，存在权限提升漏洞。(CVE-2020-0858)

  - Microsoft IIS 服务器未正确处理格式错误的请求标头时，存在篡改漏洞。成功利用此漏洞的攻击者可能会导致易受攻击的服务器错误处理 HTTP 标头并篡改返回至客户端的响应。(CVE-2020-0645)

  - Provisioning Runtime 验证某些文件操作的方式中存在权限提升漏洞。成功利用此漏洞的攻击者可在受害者系统上获得提升的权限。(CVE-2020-0808)

  - Win32k 组件未正确处理内存中对象时，Windows 中存在权限提升漏洞。成功利用此漏洞的攻击者可在内核模式下运行任意代码。然后，攻击者可安装程序，
    查看、更改或删除数据，或者创建拥有完全用户权限的新帐户。（CVE-2020-0788、CVE-2020-0877、CVE-2020-0887）

  - Windows Network Connections Service 处理内存中对象的方式存在权限提升漏洞。成功利用此漏洞的攻击者可使用已提升权限执行代码。（CVE-2020-0778、CVE-2020-0802、CVE-2020-0803、CVE-2020-0804、CVE-2020-0845）

  - Windows Installer 未能正确清理可造成不安全库加载行为的输入时，其中存在权限提升漏洞。通过本地身份验证的攻击者使用提升的系统权限可运行任意代码。然后，攻击者可安装程序，查看、更改或删除数据，或者创建拥有完全用户权限的新帐户。此安全更新通过更正输入清理错误来避免意外提升，从而修复此漏洞。(CVE-2020-0798)

  - Windows 内核未能正确处理某些符号链接的分析时，Microsoft Windows 中存在权限提升漏洞。成功利用此漏洞的攻击者可访问具有特权的注册密钥，从而提升权限。然后，攻击者可安装程序，查看、更改或删除数据，或者创建拥有完全用户权限的新帐户。
    (CVE-2020-0799)

  - 互联用户体验和遥测服务未正确处理文件操作时，存在权限提升漏洞。成功利用该漏洞的攻击者可在权限提升后的环境中运行进程。攻击者可通过在受害者系统上运行特别构建的应用程序来利用该漏洞。此安全更新通过更正互联用户体验和遥测服务处理文件操作的方式来修复此漏洞。(CVE-2020-0844)

  - 诊断中心标准收集器或 Visual Studio 标准收集器允许在任意位置创建文件时，存在权限提升漏洞。(CVE-2020-0810)

  - Microsoft Windows 中存在远程代码执行漏洞，可在处理 .LNK 文件时允许远程代码执行。成功利用此漏洞的攻击者可获得与本地用户相同的用户权限。(CVE-2020-0684)

  - Windows 未正确处理硬链接时，存在权限提升漏洞。成功利用此漏洞的攻击者可覆写导致状态提升的目标文件。
    （CVE-2020-0840、CVE-2020-0841、CVE-2020-0849、CVE-2020-0896）

  - Windows CSC 服务未正确处理内存时，存在权限提升漏洞。
    （CVE-2020-0769、CVE-2020-0771）

  - Windows Search 索引器处理内存中对象的方式存在权限提升漏洞。成功利用此漏洞的攻击者可使用已提升权限执行代码。(CVE-2020-0857)

  - Windows 错误报告 (WER) 处理并执行文件时，WER 中存在权限提升漏洞。一旦攻击者成功利用此漏洞，便可实现权限提升。
    成功利用此漏洞的攻击者可获得对敏感信息和系统功能的更大访问权。(CVE-2020-0806)

  - Windows GDI 组件不当披露其内存内容时，存在信息泄露漏洞。成功利用此漏洞的攻击者可获取信息以进一步危害用户系统。攻击者可以通过多种方式利用此漏洞，例如诱使用户打开特别构建的文档，或诱使用户访问不受信任的网页。
    此安全更新通过更正 Windows GDI 组件处理内存中对象的方式来修复漏洞。（CVE-2020-0774、CVE-2020-0880、CVE-2020-0882）

  Windows 图形设备接口 (GDI) 处理内存中对象的方式存在远程代码执行漏洞。成功利用此漏洞的攻击者可控制受影响的系统。然后，攻击者可安装程序，查看、更改或删除数据，或者创建拥有完全用户权限的新帐户。（CVE-2020-0881、CVE-2020-0883）

  - Windows GDI 组件不当披露其内存内容时，存在信息泄露漏洞。成功利用此漏洞的攻击者可获取信息以进一步危害用户系统。攻击者可以通过多种方式利用此漏洞，例如诱使用户打开特别构建的文档或诱使用户访问不受信任的网页。
    此更新通过更正 Windows GDI 组件处理内存中对象的方式来修复漏洞。
    (CVE-2020-0885)

  - 媒体基础未正确处理内存中对象时，存在信息泄露漏洞。
    成功利用此漏洞的攻击者可获取信息，从而进一步危害用户系统。已经在受害者系统上获得执行的攻击者，可通过运行特制的应用程序来利用此漏洞。此更新通过更正 Media Foundation 处理内存中对象的方式来修复此漏洞。(CVE-2020-0820)

  - Windows Update Orchestrator Service 未正确处理文件操作时，存在权限提升漏洞。成功利用该漏洞的攻击者能在权限提升的环境中运行进程。攻击者可通过在受害者系统上运行特别构建的应用程序来利用该漏洞。此更新通过更正 Windows Update Orchestrator Service 处理文件操作的方式来修复此漏洞。（CVE-2020-0867、CVE-2020-0868）

  - Windows Network List Service 处理内存中对象的方式存在权限提升漏洞。成功利用此漏洞的攻击者可使用已提升权限执行代码。(CVE-2020-0780)

  - Windows Defender 安全中心处理内存中的某些对象时，存在权限提升漏洞。(CVE-2020-0763)

  - Windows 未正确处理 Advanced Local Procedure Call (ALPC) 调用时，存在权限提升漏洞。成功利用此漏洞的攻击者可在本地系统的安全环境中运行任意代码。然后，攻击者可安装程序，查看、更改或删除数据，或者创建拥有完全用户权限的新帐户。
    (CVE-2020-0834)

  - Windows User Profile Service (ProfSvc) 未正确处理符号链接时，存在权限提升漏洞。成功利用该漏洞的攻击者可在权限提升后的环境中删除文件和文件夹。(CVE-2020-0785)

  Windows 通用即插即用 (UPnP) 服务未正确处理内存中对象时，存在权限提升漏洞。成功利用此漏洞的攻击者可使用已提升系统权限运行任意代码。然后，攻击者可安装程序，查看、更改或删除数据，或者创建拥有完全用户权限的新帐户。（CVE-2020-0781、CVE-2020-0783）

  - Windows 图形设备接口 (GDI) 处理内存中对象的方式存在信息泄露漏洞，攻击者可利用此漏洞从目标系统中检索信息。就其本身而言，攻击者无法利用信息泄露漏洞执行任意代码，但如果攻击者将其与另一漏洞结合使用，则可运行任意代码。(CVE-2020-0879)

  - Windows 网络驱动程序接口规范 (NDIS) 未正确处理内存时，存在信息泄露漏洞。(CVE-2020-0861)

  - DirectX 未正确处理内存中对象时，存在权限提升漏洞。成功利用此漏洞的攻击者可在内核模式下运行任意代码。然后，攻击者可安装程序，查看、更改或删除数据，或者创建拥有完全用户权限的新帐户。
    (CVE-2020-0690)

  - Windows AppX 部署服务器未正确处理文件操作时，存在权限提升漏洞。(CVE-2020-0776)

  - Internet Explorer 中，脚本引擎处理内存中对象的方式存在远程代码执行漏洞。此漏洞可使攻击者在当前用户环境下执行任意代码，从而导致内存损坏。成功利用此漏洞的攻击者可获得与当前用户相同的用户权限。
    （CVE-2020-0832、CVE-2020-0833）

  - 在 Microsoft 浏览器中，脚本引擎处理内存中对象的方式存在远程代码执行漏洞。此漏洞可使攻击者在当前用户环境下执行任意代码，从而导致内存损坏。成功利用此漏洞的攻击者可获得与当前用户相同的用户权限。
    （CVE-2020-0768、CVE-2020-0830）

  - MSI 程序包处理符号链接时，Windows Installer 中存在权限提升漏洞。成功利用此漏洞的攻击者可绕过访问限制，从而添加或移除文件。(CVE-2020-0779)

  - Windows 后台智能传输服务 (BITS) 未正确处理符号链接时，存在权限提升漏洞。成功利用此漏洞的攻击者可覆写导致状态提升的目标文件。
    (CVE-2020-0787)

  - VBScript 引擎处理内存中对象的方式存在远程代码执行漏洞。此漏洞可使攻击者在当前用户环境下执行任意代码，从而导致内存损坏。成功利用此漏洞的攻击者可获得与当前用户相同的用户权限。(CVE-2020-0847)

  - 诊断中心标准收集器服务未正确处理文件操作时，存在权限提升漏洞。成功利用此漏洞的攻击者可获得提升的权限。对易受攻击的系统拥有非特许访问权的攻击者可利用此漏洞。此安全性更新通过确保诊断中心标准收集器服务正确处理文件操作来修复此漏洞。(CVE-2020-0793)

  - Windows 错误报告未正确处理文件操作时，存在信息泄露漏洞。(CVE-2020-0775)

  - Windows 媒体基础未正确处理内存中对象时，存在内存损坏漏洞。
    成功利用此漏洞的攻击者可安装程序、查看、更改或删除数据，或者创建拥有完全用户权限的新帐户。攻击者可以通过多种方式利用此漏洞，例如诱使用户打开特别构建的文档，或诱使用户访问恶意网页。此安全更新通过更正 Windows 媒体基础处理内存中对象的方式来修复此漏洞。（CVE-2020-0801、CVE-2020-0807、CVE-2020-0809、CVE-2020-0869）

  Windows 映像组件无法正确处理内存中对象时，存在信息泄露漏洞。成功利用此漏洞的攻击者可获取信息以进一步危害用户系统。
    攻击者可以通过多种方式利用此漏洞：(CVE-2020-0853)

  - Windows 语言包安装程序未正确处理文件操作时，存在权限提升漏洞。成功利用该漏洞的攻击者能在权限提升的环境中运行进程。攻击者可通过在受害者系统上运行特别构建的应用程序来利用该漏洞。此更新通过更正 Windows 语言包安装程序处理文件操作的方式来修复此漏洞。(CVE-2020-0822)

  - Windows ActiveX 安装程序服务未正确处理内存时，存在权限提升漏洞。（CVE-2020-0770、CVE-2020-0773、CVE-2020-0860）

  - Windows 错误报告未正确处理内存时，存在权限提升漏洞。
    (CVE-2020-0772)

The remote Windows host is missing security update 4565349.
It is, therefore, affected by multiple vulnerabilities :

  - A memory corruption vulnerability exists when Windows     Media Foundation improperly handles objects in memory.
    An attacker who successfully exploited the vulnerability     could install programs; view, change, or delete data; or     create new accounts with full user rights. There are     multiple ways an attacker could exploit the     vulnerability, such as by convincing a user to open a     specially crafted document, or by convincing a user to     visit a malicious webpage. The security update addresses     the vulnerability by correcting how Windows Media     Foundation handles objects in memory. (CVE-2020-1379,     CVE-2020-1477, CVE-2020-1478, CVE-2020-1492,     CVE-2020-1525, CVE-2020-1554)

  - A remote code execution vulnerability exists when     Windows Media Audio Codec improperly handles objects. An     attacker who successfully exploited the vulnerability     could take control of an affected system. There are     multiple ways an attacker could exploit the     vulnerability, such as by convincing a user to open a     specially crafted document, or by convincing a user to     visit a malicious webpage. The security update addresses     the vulnerability by correcting how Windows Media Audio     Codec handles objects. (CVE-2020-1339)

  - An elevation of privilege vulnerability exists when     Connected User Experiences and Telemetry Service     improperly handles file operations. An attacker who     successfully exploited this vulnerability could run     processes in an elevated context. An attacker could     exploit this vulnerability by running a specially     crafted application on the victim system. The security     update addresses the vulnerability by correcting how the     Connected User Experiences and Telemetry Service handles     file operations. (CVE-2020-1511)

  - An elevation of privilege vulnerability exists in the     way that the srmsvc.dll handles objects in memory. An     attacker who successfully exploited the vulnerability     could execute code with elevated permissions.
    (CVE-2020-1475)

  - A remote code execution vulnerability exists when     Microsoft Edge improperly accesses objects in memory.
    The vulnerability could corrupt memory in such a way     that enables an attacker to execute arbitrary code in     the context of the current user. An attacker who     successfully exploited the vulnerability could gain the     same user rights as the current user.  (CVE-2020-1569)

  - An elevation of privilege vulnerability exists when the     Windows CDP User Components improperly handle memory.
    (CVE-2020-1549, CVE-2020-1550)

  - An information disclosure vulnerability exists when     DirectWrite improperly discloses the contents of its     memory. An attacker who successfully exploited the     vulnerability could obtain information to further     compromise the users system. There are multiple ways an     attacker could exploit the vulnerability, such as by     convincing a user to open a specially crafted document,     or by convincing a user to visit an untrusted webpage.
    The security update addresses the vulnerability by     correcting how DirectWrite handles objects in memory.
    (CVE-2020-1577)

  - An elevation of privilege vulnerability exists when the     Windows Radio Manager API improperly handles memory.
    (CVE-2020-1528)

  - An information disclosure vulnerability exists in RPC if     the server has Routing and Remote Access enabled. An     attacker who successfully exploited this vulnerability     could obtain information to further compromise the users     system  (CVE-2020-1383)

  - A remote code execution vulnerability exists in the way     that the scripting engine handles objects in memory in     Microsoft Edge (HTML-based). The vulnerability could     corrupt memory in such a way that an attacker could     execute arbitrary code in the context of the current     user. An attacker who successfully exploited the     vulnerability could gain the same user rights as the     current user.  (CVE-2020-1555)

  - An elevation of privilege vulnerability exists when the     Windows Work Folders Service improperly handles memory.
    (CVE-2020-1470, CVE-2020-1484, CVE-2020-1516)

  - An elevation of privilege vulnerability exists when the     Windows Work Folder Service improperly handles file     operations. An attacker who successfully exploited this     vulnerability could run processes in an elevated     context. An attacker could exploit this vulnerability by     running a specially crafted application on the victim     system. The update addresses the vulnerability by     correcting the way the Windows Work Folder Service     handles file operations. (CVE-2020-1552)

  - An elevation of privilege vulnerability exists when the     Windows Custom Protocol Engine improperly handles     memory.  (CVE-2020-1527)

  - An elevation of privilege vulnerability exists when the     Storage Service improperly handles file operations. An     attacker who successfully exploited this vulnerability     could gain elevated privileges on the victim system.
    (CVE-2020-1490)

  - An elevation of privilege vulnerability exists in the     way that the Windows Graphics Device Interface (GDI)     handles objects in memory. An attacker who successfully     exploited this vulnerability could run arbitrary code in     kernel mode. An attacker could then install programs;
    view, change, or delete data; or create new accounts     with full user rights.  (CVE-2020-1480, CVE-2020-1529)

  - An elevation of privilege vulnerability exists when the     Windows Speech Runtime improperly handles memory.
    (CVE-2020-1521, CVE-2020-1522)

  - An elevation of privilege vulnerability exists when the     Windows CSC Service improperly handles memory.
    (CVE-2020-1489, CVE-2020-1513)

  - An elevation of privilege vulnerability exists when the     Windows Accounts Control improperly handles memory.
    (CVE-2020-1531)

  - An elevation of privilege vulnerability exists when     Windows improperly handles hard links. An attacker who     successfully exploited this vulnerability could     overwrite a targeted file leading to an elevated status.
    (CVE-2020-1467)

  - A denial of service vulnerability exists in Windows     Remote Desktop Gateway (RD Gateway) when an attacker     connects to the target system using RDP and sends     specially crafted requests. An attacker who successfully     exploited this vulnerability could cause the RD Gateway     service on the target system to stop responding.
    (CVE-2020-1466)

  - An elevation of privilege vulnerability exists when the     Windows Runtime improperly handles objects in memory. An     attacker who successfully exploited this vulnerability     could run arbitrary code in an elevated context. An     attacker could exploit this vulnerability by running a     specially crafted application on the victim system. The     update addresses the vulnerability by correcting the way     the Windows Runtime handles objects in memory.
    (CVE-2020-1553)

  - A remote code execution vulnerability exists when the     Windows Font Driver Host improperly handles memory. An     attacker who successfully exploited the vulnerability     would gain execution on a victim system. The security     update addresses the vulnerability by correcting how the     Windows Font Driver Host handles memory. (CVE-2020-1520)

  - An elevation of privilege vulnerability exists when the     Windows UPnP Device Host improperly handles memory.
    (CVE-2020-1519, CVE-2020-1538)

  - A remote code execution vulnerability exists in the way     that the scripting engine handles objects in memory in     Internet Explorer. The vulnerability could corrupt     memory in such a way that an attacker could execute     arbitrary code in the context of the current user. An     attacker who successfully exploited the vulnerability     could gain the same user rights as the current user.
    (CVE-2020-1380, CVE-2020-1570)

  - An elevation of privilege vulnerability exists when the     Windows Telephony Server improperly handles memory.
    (CVE-2020-1515)

  - An elevation of privilege vulnerability exists in the     Local Security Authority Subsystem Service (LSASS) when     an authenticated attacker sends a specially crafted     authentication request. A remote attacker who     successfully exploited this vulnerability could cause an     elevation of privilege on the target system's LSASS     service. The security update addresses the vulnerability     by changing the way that LSASS handles specially crafted     authentication requests. (CVE-2020-1509)

  - An information disclosure vulnerability exists when     Media Foundation improperly handles objects in memory.
    An attacker who successfully exploited this     vulnerability could obtain information to further     compromise the users system.  (CVE-2020-1487)

  - An elevation of privilege vulnerability exists when the     Windows AppX Deployment Extensions improperly performs     privilege management, resulting in access to system     files.  (CVE-2020-1488)

  - An elevation of privilege vulnerability exists when the     Windows File Server Resource Management Service     improperly handles memory.  (CVE-2020-1517,     CVE-2020-1518)

  - An elevation of privilege vulnerability exists in the     way that the dnsrslvr.dll handles objects in memory. An     attacker who successfully exploited the vulnerability     could execute code with elevated permissions.
    (CVE-2020-1584)

  - An elevation of privilege vulnerability exists when the     Windows Network Connection Broker improperly handles     memory.  (CVE-2020-1526)

  - An elevation of privilege vulnerability exists when the     Windows Speech Shell Components improperly handle     memory.  (CVE-2020-1524)

  - An elevation of privilege vulnerability exists when     ASP.NET or .NET web applications running on IIS     improperly allow access to cached files. An attacker who     successfully exploited this vulnerability could gain     access to restricted files.  (CVE-2020-1476)

  - An elevation of privilege vulnerability exists when the     Windows Remote Access improperly handles file     operations. An attacker who successfully exploited this     vulnerability could gain elevated privileges.
    (CVE-2020-1537)

  - An elevation of privilege vulnerability exists when the     &quot;Public Account Pictures&quot; folder improperly     handles junctions.  (CVE-2020-1565)

  - An elevation of privilege vulnerability exists when the     Windows Backup Service improperly handles file     operations.  (CVE-2020-1534)

  - A remote code execution vulnerability exists when     Microsoft Edge PDF Reader improperly handles objects in     memory. The vulnerability could corrupt memory in such a     way that enables an attacker to execute arbitrary code     in the context of the current user. An attacker who     successfully exploited the vulnerability could gain the     same user rights as the current user. If the current     user is logged on with administrative user rights, an     attacker could take control of an affected system. An     attacker could then install programs; view, change, or     delete data; or create new accounts with full user     rights.  (CVE-2020-1568)

  - An elevation of privilege vulnerability exists when an     attacker establishes a vulnerable Netlogon secure     channel connection to a domain controller, using the     Netlogon Remote Protocol (MS-NRPC). An attacker who     successfully exploited the vulnerability could run a     specially crafted application on a device on the     network.  (CVE-2020-1472)

  - An elevation of privilege vulnerability exists when the     Windows Kernel API improperly handles registry objects     in memory. An attacker who successfully exploited the     vulnerability could gain elevated privileges on a     targeted system. A locally authenticated attacker could     exploit this vulnerability by running a specially     crafted application. The security update addresses the     vulnerability by helping to ensure that the Windows     Kernel API properly handles objects in memory.
    (CVE-2020-1377, CVE-2020-1378)

  - An elevation of privilege vulnerability exists when the     Windows Print Spooler service improperly allows     arbitrary writing to the file system. An attacker who     successfully exploited this vulnerability could run     arbitrary code with elevated system privileges. An     attacker could then install programs; view, change, or     delete data; or create new accounts with full user     rights.  (CVE-2020-1337)

  - An information disclosure vulnerability exists when the     Windows WaasMedic Service improperly handles memory.
    (CVE-2020-1548)

  - An information disclosure vulnerability exists when the     Windows Image Acquisition (WIA) Service improperly     discloses contents of its memory. An attacker who     successfully exploited the vulnerability could obtain     information to further compromise the users system.
    (CVE-2020-1474, CVE-2020-1485)

  - An elevation of privilege vulnerability exists when the     Windows kernel fails to properly handle objects in     memory. An attacker who successfully exploited this     vulnerability could run arbitrary code in kernel mode.
    An attacker could then install programs; view, change,     or delete data; or create new accounts with full user     rights.  (CVE-2020-1417, CVE-2020-1486, CVE-2020-1566)

  - A remote code execution vulnerability exists when the     Windows Jet Database Engine improperly handles objects     in memory. An attacker who successfully exploited this     vulnerability could execute arbitrary code on a victim     system. An attacker could exploit this vulnerability by     enticing a victim to open a specially crafted file. The     update addresses the vulnerability by correcting the way     the Windows Jet Database Engine handles objects in     memory. (CVE-2020-1473, CVE-2020-1557, CVE-2020-1558,     CVE-2020-1564)

  - A remote code execution vulnerability exists when     Microsoft .NET Framework processes input. An attacker     who successfully exploited this vulnerability could take     control of an affected system.  (CVE-2020-1046)

  - An elevation of privilege vulnerability exists in the     way that the Windows WalletService handles objects in     memory. An attacker who successfully exploited the     vulnerability could execute code with elevated     permissions.  (CVE-2020-1533, CVE-2020-1556)

  - An information disclosure vulnerability exists in the     Windows kernel that could allow an attacker to retrieve     information that could lead to a Kernel Address Space     Layout Randomization (ASLR) bypass. An attacker who     successfully exploited the vulnerability could retrieve     the memory address of a kernel object.  (CVE-2020-1578)

  - An elevation of privilege vulnerability exists when     DirectX improperly handles objects in memory. An     attacker who successfully exploited this vulnerability     could run arbitrary code in kernel mode. An attacker     could then install programs; view, change, or delete     data; or create new accounts with full user rights.
    (CVE-2020-1479)

  - An elevation of privilege vulnerability exists when the     Windows Ancillary Function Driver for WinSock improperly     handles memory.  (CVE-2020-1587)

  - An elevation of privilege vulnerability exists when the     Windows Function Discovery SSDP Provider improperly     handles memory.  (CVE-2020-1579)

  - A remote code execution vulnerability exists in the way     that Microsoft Graphics Components handle objects in     memory. An attacker who successfully exploited the     vulnerability could execute arbitrary code on a target     system.  (CVE-2020-1561, CVE-2020-1562)

  - An information disclosure vulnerability exists when the     Windows State Repository Service improperly handles     objects in memory. An attacker who successfully     exploited this vulnerability could obtain information to     further compromise the users system. An attacker could     exploit this vulnerability by running a specially     crafted application on the victim system. The update     addresses the vulnerability by correcting the way the     Windows State Repository Service handles objects in     memory. (CVE-2020-1512)

  - An elevation of privilege vulnerability exists when     Windows Remote Access improperly handles memory.
    (CVE-2020-1530)

  - A remote code execution vulnerability exists in the way     that the MSHTML engine improperly validates input. An     attacker could execute arbitrary code in the context of     the current user.  (CVE-2020-1567)

  - A spoofing vulnerability exists when Windows incorrectly     validates file signatures. An attacker who successfully     exploited this vulnerability could bypass security     features and load improperly signed files. In an attack     scenario, an attacker could bypass security features     intended to prevent improperly signed files from being     loaded. The update addresses the vulnerability by     correcting how Windows validates file signatures.
    (CVE-2020-1464)

The remote Windows host is missing security update 4538461.
It is, therefore, affected by multiple vulnerabilities :

  - An elevation of privilege vulnerability exists when the     Windows Device Setup Manager improperly handles file     operations. An attacker who successfully exploited this     vulnerability could run processes in an elevated     context. An attacker could exploit this vulnerability by     running a specially crafted application on the victim     system. The update addresses the vulnerability by     correcting the way the Windows Device Setup Manager     handles file operations. (CVE-2020-0819)

  - An elevation of privilege vulnerability exists when the     Windows Work Folder Service improperly handles file     operations. An attacker who successfully exploited this     vulnerability could run processes in an elevated     context. An attacker could exploit this vulnerability by     running a specially crafted application on the victim     system. The update addresses the vulnerability by     correcting the way the Windows Work Folder Service     handles file operations. (CVE-2020-0777, CVE-2020-0797,     CVE-2020-0800, CVE-2020-0864, CVE-2020-0865,     CVE-2020-0866, CVE-2020-0897)

  - A remote code execution vulnerability exists when     Internet Explorer improperly accesses objects in memory.
    The vulnerability could corrupt memory in such a way     that an attacker could execute arbitrary code in the     context of the current user. An attacker who     successfully exploited the vulnerability could gain the     same user rights as the current user.  (CVE-2020-0824)

  - An elevation of privilege vulnerability exists in     Windows Installer because of the way Windows Installer     handles certain filesystem operations.  (CVE-2020-0814,     CVE-2020-0842, CVE-2020-0843)

  - An information vulnerability exists when Windows Modules     Installer Service improperly discloses file information.
    Successful exploitation of the vulnerability could allow     the attacker to read any file on the file system.
    (CVE-2020-0859)

  - An elevation of privilege vulnerability exists when     Windows Mobile Device Management (MDM) Diagnostics     improperly handles junctions. An attacker who     successfully exploited this vulnerability could bypass     access restrictions to delete files.  (CVE-2020-0854)

  - An elevation of privilege vulnerability exists when the     Windows Graphics Component improperly handles objects in     memory. An attacker who successfully exploited this     vulnerability could run processes in an elevated     context.  (CVE-2020-0791)

  - An information disclosure vulnerability exists when     Windows Network Connections Service fails to properly     handle objects in memory. An attacker who successfully     exploited the vulnerability could potentially disclose     memory contents of an elevated process.  (CVE-2020-0871)

  - An elevation of privilege vulnerability exists when the     &quot;Public Account Pictures&quot; folder improperly     handles junctions.  (CVE-2020-0858)

  - A tampering vulnerability exists when Microsoft IIS     Server improperly handles malformed request headers. An     attacker who successfully exploited the vulnerability     could cause a vulnerable server to improperly process     HTTP headers and tamper with the responses returned to     clients.  (CVE-2020-0645)

  - An elevation of privilege vulnerability exists in the     way the Provisioning Runtime validates certain file     operations. An attacker who successfully exploited the     vulnerability could gain elevated privileges on a victim     system.  (CVE-2020-0808)

  - An elevation of privilege vulnerability exists in     Windows when the Win32k component fails to properly     handle objects in memory. An attacker who successfully     exploited this vulnerability could run arbitrary code in     kernel mode. An attacker could then install programs;
    view, change, or delete data; or create new accounts     with full user rights.  (CVE-2020-0788, CVE-2020-0877,     CVE-2020-0887)

  - An elevation of privilege vulnerability exists in the     way that the Windows Network Connections Service handles     objects in memory. An attacker who successfully     exploited the vulnerability could execute code with     elevated permissions.  (CVE-2020-0778, CVE-2020-0802,     CVE-2020-0803, CVE-2020-0804, CVE-2020-0845)

  - An elevation of privilege vulnerability exists in the     Windows Installer when the Windows Installer fails to     properly sanitize input leading to an insecure library     loading behavior. A locally authenticated attacker could     run arbitrary code with elevated system privileges. An     attacker could then install programs; view, change, or     delete data; or create new accounts with full user     rights. The security update addresses the vulnerability     by correcting the input sanitization error to preclude     unintended elevation. (CVE-2020-0798)

  - An elevation of privilege vulnerability exists in     Microsoft Windows when the Windows kernel fails to     properly handle parsing of certain symbolic links. An     attacker who successfully exploited this vulnerability     could potentially access privileged registry keys and     thereby elevate permissions. An attacker could then     install programs; view, change, or delete data; or     create new accounts with full user rights.
    (CVE-2020-0799)

  - An elevation of privilege vulnerability exists when     Connected User Experiences and Telemetry Service     improperly handles file operations. An attacker who     successfully exploited this vulnerability could run     processes in an elevated context. An attacker could     exploit this vulnerability by running a specially     crafted application on the victim system. The security     update addresses the vulnerability by correcting how the     Connected User Experiences and Telemetry Service handles     file operations. (CVE-2020-0844)

  - An elevation of privilege vulnerability exists when the     Diagnostics Hub Standard Collector or the Visual Studio     Standard Collector allows file creation in arbitrary     locations.  (CVE-2020-0810)

  - A remote code execution vulnerability exists in     Microsoft Windows that could allow remote code execution     if a .LNK file is processed. An attacker who     successfully exploited this vulnerability could gain the     same user rights as the local user.  (CVE-2020-0684)

  - An elevation of privilege vulnerability exists when     Windows improperly handles hard links. An attacker who     successfully exploited this vulnerability could     overwrite a targeted file leading to an elevated status.
    (CVE-2020-0840, CVE-2020-0841, CVE-2020-0849,     CVE-2020-0896)

  - An elevation of privilege vulnerability exists when the     Windows CSC Service improperly handles memory.
    (CVE-2020-0769, CVE-2020-0771)

  - An elevation of privilege vulnerability exists in the     way that the Windows Search Indexer handles objects in     memory. An attacker who successfully exploited the     vulnerability could execute code with elevated     permissions.  (CVE-2020-0857)

  - An elevation of privilege vulnerability exists in     Windows Error Reporting (WER) when WER handles and     executes files. The vulnerability could allow elevation     of privilege if an attacker can successfully exploit it.
    An attacker who successfully exploited the vulnerability     could gain greater access to sensitive information and     system functionality.  (CVE-2020-0806)

  - An information disclosure vulnerability exists when the     Windows GDI component improperly discloses the contents     of its memory. An attacker who successfully exploited     the vulnerability could obtain information to further     compromise the users system. There are multiple ways an     attacker could exploit the vulnerability, such as by     convincing a user to open a specially crafted document,     or by convincing a user to visit an untrusted webpage.
    The security update addresses the vulnerability by     correcting how the Windows GDI component handles objects     in memory. (CVE-2020-0774, CVE-2020-0880, CVE-2020-0882)

  - A remote code execution vulnerability exists in the way     that the Windows Graphics Device Interface (GDI) handles     objects in the memory. An attacker who successfully     exploited this vulnerability could take control of the     affected system. An attacker could then install     programs; view, change, or delete data; or create new     accounts with full user rights.  (CVE-2020-0881,     CVE-2020-0883)

  - An information disclosure vulnerability exists when the     Windows GDI component improperly discloses the contents     of its memory. An attacker who successfully exploited     the vulnerability could obtain information to further     compromise a users system. There are multiple ways an     attacker could exploit the vulnerability, such as by     convincing a user to open a specially crafted document     or by convincing a user to visit an untrusted webpage.
    The update addresses the vulnerability by correcting how     the Windows GDI component handles objects in memory.
    (CVE-2020-0885)

  - An information disclosure vulnerability exists when     Media Foundation improperly handles objects in memory.
    An attacker who successfully exploited this     vulnerability could obtain information to further     compromise the users system. An attacker who had already     gained execution on the victim system could exploit this     vulnerability by running a specially crafted     application. The update addresses the vulnerability by     correcting how Media Foundation handles objects in     memory. (CVE-2020-0820)

  - An elevation of privilege vulnerability exists when the     Windows Update Orchestrator Service improperly handles     file operations. An attacker who successfully exploited     this vulnerability could run processes in an elevated     context. An attacker could exploit this vulnerability by     running a specially crafted application on the victim     system. The update addresses the vulnerability by     correcting the way the Windows Update Orchestrator     Service handles file operations. (CVE-2020-0867,     CVE-2020-0868)

  - An elevation of privilege vulnerability exists in the     way that the Windows Network List Service handles     objects in memory. An attacker who successfully     exploited the vulnerability could execute code with     elevated permissions.  (CVE-2020-0780)

  - An elevation of privilege vulnerability exists when     Windows Defender Security Center handles certain objects     in memory.  (CVE-2020-0763)

  - An elevation of privilege vulnerability exists when     Windows improperly handles calls to Advanced Local     Procedure Call (ALPC). An attacker who successfully     exploited this vulnerability could run arbitrary code in     the security context of the local system. An attacker     could then install programs; view, change, or delete     data; or create new accounts with full user rights.
    (CVE-2020-0834)

  - An elevation of privilege vulnerability exists when the     Windows User Profile Service (ProfSvc) improperly     handles symlinks. An attacker who successfully exploited     this vulnerability could delete files and folders in an     elevated context.  (CVE-2020-0785)

  - An elevation of privilege vulnerability exists when the     Windows Universal Plug and Play (UPnP) service     improperly handles objects in memory. An attacker who     successfully exploited this vulnerability could run     arbitrary code with elevated system privileges. An     attacker could then install programs; view, change, or     delete data; or create new accounts with full user     rights.  (CVE-2020-0781, CVE-2020-0783)

  - An information disclosure vulnerability exists in the     way that the Windows Graphics Device Interface (GDI)     handles objects in memory, allowing an attacker to     retrieve information from a targeted system. By itself,     the information disclosure does not allow arbitrary code     execution; however, it could allow arbitrary code to be     run if the attacker uses it in combination with another     vulnerability.  (CVE-2020-0879)

  - An information disclosure vulnerability exists when the     Windows Network Driver Interface Specification (NDIS)     improperly handles memory.  (CVE-2020-0861)

  - An elevation of privilege vulnerability exists when     DirectX improperly handles objects in memory. An     attacker who successfully exploited this vulnerability     could run arbitrary code in kernel mode. An attacker     could then install programs; view, change, or delete     data; or create new accounts with full user rights.
    (CVE-2020-0690)

  - An elevation of privilege vulnerability exists when the     Windows AppX Deployment Server improperly handles file     operations.  (CVE-2020-0776)

  - A remote code execution vulnerability exists in the way     that the scripting engine handles objects in memory in     Internet Explorer. The vulnerability could corrupt     memory in such a way that an attacker could execute     arbitrary code in the context of the current user. An     attacker who successfully exploited the vulnerability     could gain the same user rights as the current user.
    (CVE-2020-0832, CVE-2020-0833)

  - A remote code execution vulnerability exists in the way     the scripting engine handles objects in memory in     Microsoft browsers. The vulnerability could corrupt     memory in such a way that an attacker could execute     arbitrary code in the context of the current user. An     attacker who successfully exploited the vulnerability     could gain the same user rights as the current user.
    (CVE-2020-0768, CVE-2020-0830)

  - An elevation of privilege vulnerability exists in the     Windows Installer when MSI packages process symbolic     links. An attacker who successfully exploited this     vulnerability could bypass access restrictions to add or     remove files.  (CVE-2020-0779)

  - An elevation of privilege vulnerability exists when the     Windows Background Intelligent Transfer Service (BITS)     improperly handles symbolic links. An attacker who     successfully exploited this vulnerability could     overwrite a targeted file leading to an elevated status.
    (CVE-2020-0787)

  - A remote code execution vulnerability exists in the way     that the VBScript engine handles objects in memory. The     vulnerability could corrupt memory in such a way that an     attacker could execute arbitrary code in the context of     the current user. An attacker who successfully exploited     the vulnerability could gain the same user rights as the     current user.  (CVE-2020-0847)

  - An elevation of privilege vulnerability exists when the     Diagnostics Hub Standard Collector Service improperly     handles file operations. An attacker who successfully     exploited this vulnerability could gain elevated     privileges. An attacker with unprivileged access to a     vulnerable system could exploit this vulnerability. The     security update addresses the vulnerability by ensuring     the Diagnostics Hub Standard Collector Service properly     handles file operations. (CVE-2020-0793)

  - An information disclosure vulnerability exists when     Windows Error Reporting improperly handles file     operations.  (CVE-2020-0775)

  - A memory corruption vulnerability exists when Windows     Media Foundation improperly handles objects in memory.
    An attacker who successfully exploited the vulnerability     could install programs; view, change, or delete data; or     create new accounts with full user rights. There are     multiple ways an attacker could exploit the     vulnerability, such as by convincing a user to open a     specially crafted document, or by convincing a user to     visit a malicious webpage. The security update addresses     the vulnerability by correcting how Windows Media     Foundation handles objects in memory. (CVE-2020-0801,     CVE-2020-0807, CVE-2020-0809, CVE-2020-0869)

  - An information disclosure vulnerability exists in     Windows when the Windows Imaging Component fails to     properly handle objects in memory. An attacker who     succesfully exploited this vulnerability could obtain     information to further compromise the user's system.
    There are multiple ways an attacker could exploit this     vulnerability:  (CVE-2020-0853)

  - An elevation of privilege vulnerability exists when the     Windows Language Pack Installer improperly handles file     operations. An attacker who successfully exploited this     vulnerability could run processes in an elevated     context. An attacker could exploit this vulnerability by     running a specially crafted application on the victim     system. The update addresses the vulnerability by     correcting the way the Windows Language Pack Installer     handles file operations. (CVE-2020-0822)

  - An elevation of privilege vulnerability exists when the     Windows ActiveX Installer Service improperly handles     memory.  (CVE-2020-0770, CVE-2020-0773, CVE-2020-0860)

  - An elevation of privilege vulnerability exists when     Windows Error Reporting improperly handles memory.
    (CVE-2020-0772)

 - A remote code execution vulnerability exists in the way     that the Chakra scripting engine handles objects in     memory in Microsoft Edge (HTML-based). The vulnerability     could corrupt memory in such a way that an attacker could     execute arbitrary code in the context of the current user.     An attacker who successfully exploited the vulnerability     could gain the same user rights as the current user. If     the current user is logged on with administrative user     rights, an attacker who successfully exploited the     vulnerability could take control of an affected system.     An attacker could then install programs; view, change,     or delete data; or create new accounts with full user     rights. (CVE-2020-0811, CVE-2020-0812)

  - An information disclosure vulnerability exists when     Chakra improperly discloses the contents of its memory,     which could provide an attacker with information to     further compromise the user’s computer or data.     (CVE-2020-0813)

  - A remote code execution vulnerability exists when     Microsoft Edge improperly accesses objects in memory.     The vulnerability could corrupt memory in such a way     that enables an attacker to execute arbitrary code in     the context of the current user. An attacker who     successfully exploited the vulnerability could gain     the same user rights as the current user. If the current     user is logged on with administrative user rights, an     attacker could take control of an affected system. An     attacker could then install programs; view, change, or     delete data; or create new accounts with full user rights.
    (CVE-2020-0816)

  - A remote code execution vulnerability exists in the way     that the ChakraCore scripting engine handles objects in     memory. The vulnerability could corrupt memory in such a     way that an attacker could execute arbitrary code in the     context of the current user. An attacker who successfully     exploited the vulnerability could gain the same user     rights as the current user. If the current user is logged     on with administrative user rights, an attacker who     successfully exploited the vulnerability could take     control of an affected system. An attacker could then     install programs; view, change, or delete data; or create     new accounts with full user rights. (CVE-2020-08323,     CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828,     CVE-2020-0829,CVE-2020-0831, CVE-2020-0848)

The remote Windows host is missing security update 4540670.
It is, therefore, affected by multiple vulnerabilities :

  - An elevation of privilege vulnerability exists when the     Windows Device Setup Manager improperly handles file     operations. An attacker who successfully exploited this     vulnerability could run processes in an elevated     context. An attacker could exploit this vulnerability by     running a specially crafted application on the victim     system. The update addresses the vulnerability by     correcting the way the Windows Device Setup Manager     handles file operations. (CVE-2020-0819)

  - An elevation of privilege vulnerability exists when the     Windows Work Folder Service improperly handles file     operations. An attacker who successfully exploited this     vulnerability could run processes in an elevated     context. An attacker could exploit this vulnerability by     running a specially crafted application on the victim     system. The update addresses the vulnerability by     correcting the way the Windows Work Folder Service     handles file operations. (CVE-2020-0777, CVE-2020-0797,     CVE-2020-0800, CVE-2020-0864, CVE-2020-0865,     CVE-2020-0866, CVE-2020-0897)

  - A remote code execution vulnerability exists when     Internet Explorer improperly accesses objects in memory.
    The vulnerability could corrupt memory in such a way     that an attacker could execute arbitrary code in the     context of the current user. An attacker who     successfully exploited the vulnerability could gain the     same user rights as the current user.  (CVE-2020-0824)

  - An elevation of privilege vulnerability exists in     Windows Installer because of the way Windows Installer     handles certain filesystem operations.  (CVE-2020-0814,     CVE-2020-0842, CVE-2020-0843)

  - An information vulnerability exists when Windows Modules     Installer Service improperly discloses file information.
    Successful exploitation of the vulnerability could allow     the attacker to read any file on the file system.
    (CVE-2020-0859)

  - An elevation of privilege vulnerability exists when the     Windows Background Intelligent Transfer Service (BITS)     improperly handles symbolic links. An attacker who     successfully exploited this vulnerability could     overwrite a targeted file leading to an elevated status.
    (CVE-2020-0787)

  - An information disclosure vulnerability exists when     Windows Network Connections Service fails to properly     handle objects in memory. An attacker who successfully     exploited the vulnerability could potentially disclose     memory contents of an elevated process.  (CVE-2020-0871)

  - An elevation of privilege vulnerability exists when the     &quot;Public Account Pictures&quot; folder improperly     handles junctions.  (CVE-2020-0858)

  - A tampering vulnerability exists when Microsoft IIS     Server improperly handles malformed request headers. An     attacker who successfully exploited the vulnerability     could cause a vulnerable server to improperly process     HTTP headers and tamper with the responses returned to     clients.  (CVE-2020-0645)

  - An elevation of privilege vulnerability exists in     Windows when the Win32k component fails to properly     handle objects in memory. An attacker who successfully     exploited this vulnerability could run arbitrary code in     kernel mode. An attacker could then install programs;
    view, change, or delete data; or create new accounts     with full user rights.  (CVE-2020-0788, CVE-2020-0877,     CVE-2020-0887)

  - An elevation of privilege vulnerability exists in the     way that the Windows Network Connections Service handles     objects in memory. An attacker who successfully     exploited the vulnerability could execute code with     elevated permissions.  (CVE-2020-0778, CVE-2020-0802,     CVE-2020-0803, CVE-2020-0804, CVE-2020-0845)

  - An elevation of privilege vulnerability exists in the     Windows Installer when the Windows Installer fails to     properly sanitize input leading to an insecure library     loading behavior. A locally authenticated attacker could     run arbitrary code with elevated system privileges. An     attacker could then install programs; view, change, or     delete data; or create new accounts with full user     rights. The security update addresses the vulnerability     by correcting the input sanitization error to preclude     unintended elevation. (CVE-2020-0798)

  - An elevation of privilege vulnerability exists in     Microsoft Windows when the Windows kernel fails to     properly handle parsing of certain symbolic links. An     attacker who successfully exploited this vulnerability     could potentially access privileged registry keys and     thereby elevate permissions. An attacker could then     install programs; view, change, or delete data; or     create new accounts with full user rights.
    (CVE-2020-0799)

  - An elevation of privilege vulnerability exists when     Connected User Experiences and Telemetry Service     improperly handles file operations. An attacker who     successfully exploited this vulnerability could run     processes in an elevated context. An attacker could     exploit this vulnerability by running a specially     crafted application on the victim system. The security     update addresses the vulnerability by correcting how the     Connected User Experiences and Telemetry Service handles     file operations. (CVE-2020-0844)

  - An elevation of privilege vulnerability exists when the     Diagnostics Hub Standard Collector or the Visual Studio     Standard Collector allows file creation in arbitrary     locations.  (CVE-2020-0810)

  - A memory corruption vulnerability exists when Windows     Media Foundation improperly handles objects in memory.
    An attacker who successfully exploited the vulnerability     could install programs; view, change, or delete data; or     create new accounts with full user rights. There are     multiple ways an attacker could exploit the     vulnerability, such as by convincing a user to open a     specially crafted document, or by convincing a user to     visit a malicious webpage. The security update addresses     the vulnerability by correcting how Windows Media     Foundation handles objects in memory. (CVE-2020-0801,     CVE-2020-0809, CVE-2020-0869)

  - A remote code execution vulnerability exists in     Microsoft Windows that could allow remote code execution     if a .LNK file is processed. An attacker who     successfully exploited this vulnerability could gain the     same user rights as the local user.  (CVE-2020-0684)

  - An elevation of privilege vulnerability exists when     Windows improperly handles hard links. An attacker who     successfully exploited this vulnerability could     overwrite a targeted file leading to an elevated status.
    (CVE-2020-0840, CVE-2020-0841, CVE-2020-0849,     CVE-2020-0896)

  - An elevation of privilege vulnerability exists when the     Windows User Profile Service (ProfSvc) improperly     handles symlinks. An attacker who successfully exploited     this vulnerability could delete files and folders in an     elevated context.  (CVE-2020-0785)

  - An information disclosure vulnerability exists in the     way that the Windows Graphics Device Interface (GDI)     handles objects in memory, allowing an attacker to     retrieve information from a targeted system. By itself,     the information disclosure does not allow arbitrary code     execution; however, it could allow arbitrary code to be     run if the attacker uses it in combination with another     vulnerability.  (CVE-2020-0874, CVE-2020-0879)

  - An elevation of privilege vulnerability exists in the     way that the Windows Search Indexer handles objects in     memory. An attacker who successfully exploited the     vulnerability could execute code with elevated     permissions.  (CVE-2020-0857)

  - An elevation of privilege vulnerability exists in     Windows Error Reporting (WER) when WER handles and     executes files. The vulnerability could allow elevation     of privilege if an attacker can successfully exploit it.
    An attacker who successfully exploited the vulnerability     could gain greater access to sensitive information and     system functionality.  (CVE-2020-0806)

  - An information disclosure vulnerability exists when the     Windows GDI component improperly discloses the contents     of its memory. An attacker who successfully exploited     the vulnerability could obtain information to further     compromise the users system. There are multiple ways an     attacker could exploit the vulnerability, such as by     convincing a user to open a specially crafted document,     or by convincing a user to visit an untrusted webpage.
    The security update addresses the vulnerability by     correcting how the Windows GDI component handles objects     in memory. (CVE-2020-0774, CVE-2020-0880, CVE-2020-0882)

  - A remote code execution vulnerability exists in the way     that the Windows Graphics Device Interface (GDI) handles     objects in the memory. An attacker who successfully     exploited this vulnerability could take control of the     affected system. An attacker could then install     programs; view, change, or delete data; or create new     accounts with full user rights.  (CVE-2020-0881,     CVE-2020-0883)

  - An information disclosure vulnerability exists when the     Windows GDI component improperly discloses the contents     of its memory. An attacker who successfully exploited     the vulnerability could obtain information to further     compromise a users system. There are multiple ways an     attacker could exploit the vulnerability, such as by     convincing a user to open a specially crafted document     or by convincing a user to visit an untrusted webpage.
    The update addresses the vulnerability by correcting how     the Windows GDI component handles objects in memory.
    (CVE-2020-0885)

  - An information disclosure vulnerability exists when     Media Foundation improperly handles objects in memory.
    An attacker who successfully exploited this     vulnerability could obtain information to further     compromise the users system. An attacker who had already     gained execution on the victim system could exploit this     vulnerability by running a specially crafted     application. The update addresses the vulnerability by     correcting how Media Foundation handles objects in     memory. (CVE-2020-0820)

  - An elevation of privilege vulnerability exists when the     Windows Language Pack Installer improperly handles file     operations. An attacker who successfully exploited this     vulnerability could run processes in an elevated     context. An attacker could exploit this vulnerability by     running a specially crafted application on the victim     system. The update addresses the vulnerability by     correcting the way the Windows Language Pack Installer     handles file operations. (CVE-2020-0822)

  - An elevation of privilege vulnerability exists in the     way that the Windows Network List Service handles     objects in memory. An attacker who successfully     exploited the vulnerability could execute code with     elevated permissions.  (CVE-2020-0780)

  - An elevation of privilege vulnerability exists when     Windows improperly handles calls to Advanced Local     Procedure Call (ALPC). An attacker who successfully     exploited this vulnerability could run arbitrary code in     the security context of the local system. An attacker     could then install programs; view, change, or delete     data; or create new accounts with full user rights.
    (CVE-2020-0834)

  - An elevation of privilege vulnerability exists when the     Windows Universal Plug and Play (UPnP) service     improperly handles objects in memory. An attacker who     successfully exploited this vulnerability could run     arbitrary code with elevated system privileges. An     attacker could then install programs; view, change, or     delete data; or create new accounts with full user     rights.  (CVE-2020-0781, CVE-2020-0783)

  - An elevation of privilege vulnerability exists when the     Windows Graphics Component improperly handles objects in     memory. An attacker who successfully exploited this     vulnerability could run processes in an elevated     context.  (CVE-2020-0791, CVE-2020-0898)

  - An information disclosure vulnerability exists when the     Windows Network Driver Interface Specification (NDIS)     improperly handles memory.  (CVE-2020-0861)

  - An elevation of privilege vulnerability exists when     DirectX improperly handles objects in memory. An     attacker who successfully exploited this vulnerability     could run arbitrary code in kernel mode. An attacker     could then install programs; view, change, or delete     data; or create new accounts with full user rights.
    (CVE-2020-0690)

  - A denial of service vulnerability exists when the     Windows Tile Object Service improperly handles hard     links. An attacker who successfully exploited the     vulnerability could cause a target system to stop     responding.  (CVE-2020-0786)

  - A remote code execution vulnerability exists in the way     that the scripting engine handles objects in memory in     Internet Explorer. The vulnerability could corrupt     memory in such a way that an attacker could execute     arbitrary code in the context of the current user. An     attacker who successfully exploited the vulnerability     could gain the same user rights as the current user.
    (CVE-2020-0832, CVE-2020-0833)

  - A remote code execution vulnerability exists in the way     the scripting engine handles objects in memory in     Microsoft browsers. The vulnerability could corrupt     memory in such a way that an attacker could execute     arbitrary code in the context of the current user. An     attacker who successfully exploited the vulnerability     could gain the same user rights as the current user.
    (CVE-2020-0768, CVE-2020-0830)

  - An elevation of privilege vulnerability exists in the     Windows Installer when MSI packages process symbolic     links. An attacker who successfully exploited this     vulnerability could bypass access restrictions to add or     remove files.  (CVE-2020-0779)

  - An elevation of privilege vulnerability exists when the     Windows AppX Deployment Server improperly handles file     operations.  (CVE-2020-0776)

  - A remote code execution vulnerability exists in the way     that the VBScript engine handles objects in memory. The     vulnerability could corrupt memory in such a way that an     attacker could execute arbitrary code in the context of     the current user. An attacker who successfully exploited     the vulnerability could gain the same user rights as the     current user.  (CVE-2020-0847)

  - An elevation of privilege vulnerability exists when the     Diagnostics Hub Standard Collector Service improperly     handles file operations. An attacker who successfully     exploited this vulnerability could gain elevated     privileges. An attacker with unprivileged access to a     vulnerable system could exploit this vulnerability. The     security update addresses the vulnerability by ensuring     the Diagnostics Hub Standard Collector Service properly     handles file operations. (CVE-2020-0793)

  - An information disclosure vulnerability exists when     Windows Error Reporting improperly handles file     operations.  (CVE-2020-0775)

  - An elevation of privilege vulnerability exists when the     Windows CSC Service improperly handles memory.
    (CVE-2020-0769, CVE-2020-0771)

  - An information disclosure vulnerability exists in     Windows when the Windows Imaging Component fails to     properly handle objects in memory. An attacker who     succesfully exploited this vulnerability could obtain     information to further compromise the user's system.
    There are multiple ways an attacker could exploit this     vulnerability:  (CVE-2020-0853)

  - An elevation of privilege vulnerability exists when the     Windows Update Orchestrator Service improperly handles     file operations. An attacker who successfully exploited     this vulnerability could run processes in an elevated     context. An attacker could exploit this vulnerability by     running a specially crafted application on the victim     system. The update addresses the vulnerability by     correcting the way the Windows Update Orchestrator     Service handles file operations. (CVE-2020-0867,     CVE-2020-0868)

  - An elevation of privilege vulnerability exists when the     Windows ActiveX Installer Service improperly handles     memory.  (CVE-2020-0770, CVE-2020-0773, CVE-2020-0860)

  - An elevation of privilege vulnerability exists when     Windows Error Reporting improperly handles memory.
    (CVE-2020-0772)

  - A remote code execution vulnerability exists when     Microsoft Edge improperly accesses objects in memory.     The vulnerability could corrupt memory in such a way     that enables an attacker to execute arbitrary code in     the context of the current user. An attacker who     successfully exploited the vulnerability could gain     the same user rights as the current user. If the current     user is logged on with administrative user rights, an     attacker could take control of an affected system. An     attacker could then install programs; view, change, or     delete data; or create new accounts with full user rights.
    (CVE-2020-0816)

  - A remote code execution vulnerability exists in the way     that the ChakraCore scripting engine handles objects in     memory. The vulnerability could corrupt memory in such a     way that an attacker could execute arbitrary code in the     context of the current user. An attacker who successfully     exploited the vulnerability could gain the same user     rights as the current user. If the current user is logged     on with administrative user rights, an attacker who     successfully exploited the vulnerability could take     control of an affected system. An attacker could then     install programs; view, change, or delete data; or create     new accounts with full user rights. (CVE-2020-08323,     CVE-2020-0826, CVE-2020-0827, CVE-2020-0828, CVE-2020-0829,     CVE-2020-0831, CVE-2020-0848)

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4546-1 advisory.

    Security issues fixed:

    libtcnative-1-0:

    - CVE-2026-86243: buffer overread during the TLS handshake permits a malicious user to trigger a DoS via a     JVM crash       (bsc#1282623).
    - CVE-2026-86246: insecure ALLOW_CLIENT_RENEGOTIATION, NO_EXTENDED_MASTER_SECRET, IGNORE_UNEXPECTED_EOF     and       ALLOW_NO_DHE_KEX options enabled by default (bsc#1282622).
    - CVE-2026-86247: race condition allows client certificate verification requirements to be down-graded for     some       configurations (bsc#1282621).

    tomcat,tomcat10:

    - CVE-2026-73581: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore       (bsc#1282631).
    - CVE-2026-75973: improper authentication when Jakarta authentication is configured with     `SimpleAuthConfigProvider`       (bsc#1282630).
    - CVE-2026-76183: security constraints for any WebSocket endpoint can be bypassed (bsc#1282629).
    - CVE-2026-77756: inconsistent interpretation of HTTP requests allows an attacker to cause one request     from another user       to fail when Tomcat is located behind a reverse proxy (bsc#1282628).
    - CVE-2026-77762: stale HPACK emitter injects trailers fields into another HTTP/2 request (bsc#1282599).
    - CVE-2026-77791: uncontrolled resource consumption when sending WebSocket close message enabled a DoS     attack       (bsc#1282627).
    - CVE-2026-78383: allocation of resources without limits or throttling allows an unauthenticated AJP     request to pin an       AJP processing thread leading to denial of service (bsc#1282626).
    - CVE-2026-78437: incomplete cleanup allows a malformed request to potentially cause requests from another     user to fail       (bsc#1282625).
    - CVE-2026-79677: missing release of resource after effective lifetime and comparison using wrong factors     allows for       denial of service due to lost time outs for asynchronous WebSocket writes (bsc#1282624).
    - CVE-2026-86248: CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail     is disabled       (bsc#1282620).
    - CVE-2026-86350: HTTP/2 requests can cause request header mix-ups and HTTP request smuggling     (bsc#1282787).
    - CVE-2026-87022: WebSocket message smuggling when per-message-deflate is used (bsc#1282581).

    Changes for libtcnative-1-0:

    - Update to 1.3.9
     * Security fixes      + Client certificate requirements can be down-graded      (bsc#1282621, CVE-2026-86247)      A race condition allowed client certificate verification      requirements to be down-graded for some configurations.
     + Insecure OpenSSL options enabled (bsc#1282622, CVE-2026-86246)      Apache Tomcat Native enabled insecure options by default      including ALLOW_CLIENT_RENEGOTIATION,      NO_EXTENDED_MASTER_SECRET, IGNORE_UNEXPECTED_EOF and      ALLOW_NO_DHE_KEX.
     + DoS via TLS handshake (bsc#1282623, CVE-2026-86243)      A buffer over-read vulnerability in Apache Tomcat Native      during the TLS handshaking permits a malicious user to trigger      a DoS via a JVM crash.
     * Changes      + Code: Remove call to ERR_remove_thread_state() from Windows      specific code to allow building with OpenSSL 4.0.x.
     ERR_remove_thread_state() is a no-op in OpenSSL 1.1+ and got      removed in OpenSSL 4      + Fix: Fix a potential crash when negotiating ALPN      + If ALPN negotiation fails and failure is configured to use      the last server protocol in the list, use it rather than the      last protocol offered by the client      + Fix: Add support for the extended range of options available      from OpenSSL 3.0.x. The options flag is now a 64-bit unsigned      int (represented by a Java long) rather than a 32-bit unsigned      int (represented by a Java int)      + Code: Remove unused code      + Ensure that per connection changes to certificate verification      settings, e.g. to support client certificate authentication,      do not modify the certificate verification settings for other      connections      + Fix: Fix a potential crash when configuring raw certificates      + Fix: Avoid a potential crash with very long ALPN protocol      names      + Fix: Make the call to a CertificateVerifier more robust      + Fix: Avoid a potential crash when processing OCSP URLs      + Fix: Make the processing of OCSP responses more robust      + Fix: Stricter OCSP handling when soft-fail is disabled      + Fix: Harden against the mis-use of Buffer.address(ByteBuffer)      + Fix: Harden against the mis-use of Pool.destroy(long)      + Code: The minimum supported OpenSSL version is now 3.0.x.
     OpenSSL 1.1.1 support was accidentally broken in 1.3.8. As no      bug reports were receive for that failure and since both      Debian and Ubuntu versions that used OpenSSL 1.1.1 have      reached end of support, OpenSSL 1.1.1 is no longer supported      + Update: OpenSSL 3.0.x is approaching end of support so the      recommended version of OpenSSL (and the version that windows      binaries will be built with) now follows the 3.5.x LTS branch      + Fix: Switch to automatic configuration of DH parameters.
     Manual configuration attempts will be ignored      + Code: Make setTmpECDHByCurveName() a NO-OP      + Fix: Refactor extraction of ECDH curve name from the      Certificate to avoid deprecated OpenSSL methods      + Fix: Refactor the native implementation of SSL.getTime() to      avoid the Y2038 problem in SSL_SESSION_get_time() when running      on a verion of OpenSSL that includes the new      SSL_SESSION_get_time_ex() method

    Changes for tomcat:

    - Update to Tomcat 9.0.122
     * Catalina      + Fix: Improve the handling of AsyncContext.dispatch() when the Context      attribute dispatchersUseEncodedPaths is set to false since the      application has no control over the path used for the      AsyncContext.dispatch(). Prior to this fix, paths containing literal '?'      characters were truncated. (markt)      + Fix: Ensure that capture groups from a RewriteCond always reflect the      result of the current request. (markt)      + Fix: When a PersistentManager needs to reduce the number of active      sessions, swap out the least recently used eligible sessions first. Pull      request #1045 provided by sainadh777. (markt)      + Fix: Align web.xml logging output with the new Context attribute      urlPatternsProvidedInDecodedForm. (markt)      + Fix: Improve robustness of DIGEST authentication to system clock jumps.
     (markt)      + Add: Support multiple protocol header values (treat as a single merged      header value) in the RemoteIpFilter and RemoteIpValve. (markt)      + Fix: potential concurrency issues when loading/saving sessions from/to a      session store. Custom Store implementations that do not extend StoreBase      must implement the new getSessionStoreLock() method of the Store      interface to ensure concurrency protection. The default method      implementation provided only provides the pre-fix functionality. (markt)      + Fix: Ensure that PersistentManager implementations that extend      PersistentManagerBase do not swap out sessions that are associated with      a request that is currently being processed. As a result, it is now a      requirement that the system property      org.apache.catalina.session.StandardSession.ACTIVITY_CHECK is set to      true (either explicitly or via STRICT_SERVLET_COMPLIANCE) if either      minIdleSwap or maxIdleSwap are configured. (markt)
     * Coyote      + Fix: xreflection generated code stack overflow issue. (remm)      + Fix: Align xreflection better with IntrospectionUtils. (remm)      + Fix: In HTTP/2 after half closed (remote), any unexpected frame should      be a stream error. (remm)      + Fix: incorrect initial window size calculation when upgrading to HTTP/2.
     (remm)      + Fix: Avoid HTTP/2 exceptions with invalid content-length values. (remm)      + Fix: Only try and load the native library from the CATALINA_HOME system      property when the property is set. (markt)      + Fix: max connections enforcement after an enpoint resume. (remm)      + Fix: Implement stricter ALPN matching for Connectors using FFM. (markt)      + Add: length validation for ALPN protocol names. (markt)      + Fix: Make FFM certificate verification more robust. (markt)      + Fix: Align FFM OCSP URL parsing with Tomcat Native and treat a parsing      failure as if no usable OCSP URLs were present. (markt)      + Fix: Make the processing of OCSP responses more robust. (markt)      + Fix: Stricter OCSP handling when soft-fail is disabled. (markt)      + Fix: Cleaner handling of AJP response headers which overflow the maximum      message size. (remm)      + Fix: Small per performance optimisation. Don't waste cycles swallowing      an AJP response body when the connection is going to be closed. (markt)      + Fix: OpenSSL support for CRLs when using OpenSSL trust with the server      key held in a Java key store. (markt)      + Fix: Reject HTTP/1.0 or earlier requests that send a transfer-encoding      header. (markt)      + Fix: Ensure per request HTTP/2 bad request marker is cleared when the      request is recycled. (markt)      + Fix: Additional clean-up after HTTP/2 stream reset to aid GC. (markt)      + Fix: Revert earlier refactoring of HTTP/2 header field validation that      moved it earlier since the refactoring made correct handling of invalid      headers more difficult. (markt)
     * Jasper      + Fix: EL evaluation of some lambda expressions. (remm)
     * WebSocket      + Fix: an exception when an automatic Pong response races with the closing      of the WebSocket session. (moritzfl)      + Fix: Harden the WebSocket client and use a SecureRandom when generating      the Sec-WebSocket-Key header. (markt)      + Fix: Improve robustness of client handshakes. (remm)      + Fix: Ensure that WebSocket write timeouts apply to the complete message      and are not lost if two writes have the same timeout. (markt)      + Fix: Reduce CPU usage while sending WebSocket close message. (markt)      + Fix: overly broad check that prevented request URIs containing literal {      and } characters from being mapped to WebSocket end points. (markt)      + Fix: handling of WebSocket messages with compressed payloads using per-      message-deflate that have one or more non-final blocks where the BFINAL      bit is set. (markt)      + Fix: handling of per-message-deflate context takeover when receiving      compressed WebSocket messages. (markt)
     * Web applications      + Fix: Manager: Fix a potential concurrency issue when ordering sessions      prior to displaying a list of session. (markt)      + Docs: Wrap the RewriteRule regular expression syntax reference on narrow      displays. Pull request #1044 by sainadh777. (markt)
     * Other      + Update: Easymock to 5.7.0. (markt)      + Update: bnd to 7.4.0. (markt)      + Update: Tomcat Native to 1.3.9. (markt)      + Add: Improvements to French translations. (remm)      + Add: Improvements to Japanese translations provided by tak7iji and      Ktamura.biz.80. (markt)
     * Cluster      + Fix: Validate that the DeltaManager attribute sendAllSessionsSize is a      positive integer. Zero or negative values previously caused an infinite      loop or a NegativeArraySizeException during session state transfer. Pull      request #1042 provided by lihongyi87. (markt)      + Fix: Improve robustness of cloud membership providers if an error occurs      fetching members. (remm)
     * jdbc-pool      + Fix: DataSourceProxy.getPooledConnection(String,String) now delegates to      getConnection(String,String) rather than getConnection(). (markt)      + Add: Log a warning if an attempt is made to obtain a connection with      credentials when alternateUsernameAllowed is set to false. (markt)      + Fix: Ensure StatementCache interceptor resets properties of cached      statements between uses. (mark)

    Changes for tomcat10:

    - Update to Tomcat 10.1.60
     * Catalina      + Fix: When a PersistentManager needs to reduce the number of active      sessions, swap out the least recently used eligible sessions first. Pull      request #1045 provided by sainadh777. (markt)      + Fix: Align web.xml logging output with the new Context attribute      urlPatternsProvidedInDecodedForm. (markt)      + Fix: Improve robustness of DIGEST authentication to system clock jumps.
     (markt)      + Add: Support multiple protocol header values (treat as a single merged      header value) in the RemoteIpFilter and RemoteIpValve. (markt)      + Fix: potential concurrency issues when loading/saving sessions from/to a      session store. Custom Store implementations that do not extend StoreBase      must implement the new getSessionStoreLock() method of the Store      interface to ensure concurrency protection. The default method      implementation provided only provides the pre-fix functionality. (markt)      + Fix: Ensure that PersistentManager implementations that extend      PersistentManagerBase do not swap out sessions that are associated with      a request that is currently being processed. This includes not swapping      out a session unless the session was created when activity tracking was      enabled. (markt)      + Fix: Ensure namespace attributes are XML escaped in WebDAV responses.
     + Fix: Resolve null or missing rewrite substitutions as an empty string,      to align with the mod_rewrite behavior. (remm)      + Add: a best efforts protection in the CrawlerSessionManagerValve against      crawlers being associated with an authenticated session. (markt)      + Fix: Clarify the meaning of various RewriteValve server variables and      explicitly use the canonical context path for the CONTEXT_PATH server      variable. (markt)      + Fix: storeconfig not saving the path when a context is saved in      server.xml. (remm)      + Fix: WAR URLConnection should propagate use of caching. (remm)      + Fix: Ensure resources are evicted from the static resource cache in the      correct order. (markt)      + Fix: When Jakarta Authentication is configured for a web application,      cache the ServerAuthConfig in the Authenticator valve. This ensures web      application specific settings are cached on a per web application basis.
     + Fix: 70203: Fix RegistrationListener notifications in Jakarta      Authentication implementation. (markt)      + Fix: Handle CGI scripts that write excessively to stdout after setting      an HTTP error status code. (schultz)      + Fix: Require the request to the login action during FORM authentication      to be made using HTTP POST. (markt)      + Fix: 70208: Make URL encoding more robust. Based on pull request #1065      by Chenjp. (markt)
     * Coyote      + Fix: xreflection generated code stack overflow issue. (remm)      + Fix: Align xreflection better with IntrospectionUtils. (remm)      + Fix: In HTTP/2 after half closed (remote), any unexpected frame should      be a stream error. (remm)      + Fix: incorrect initial window size calculation when upgrading to HTTP/2.
     (remm)      + Fix: Avoid HTTP/2 exceptions with invalid content-length values. (remm)      + Fix: Only try and load the native library from the CATALINA_HOME system      property when the property is set. (markt)      + Fix: max connections enforcement after an enpoint resume. (remm)      + Fix: Implement stricter ALPN matching for Connectors using FFM. (markt)      + Add: length validation for ALPN protocol names. (markt)      + Fix: Make FFM certificate verification more robust. (markt)      + Fix: Align FFM OCSP URL parsing with Tomcat Native and treat a parsing      failure as if no usable OCSP URLs were present. (markt)      + Fix: Make the processing of OCSP responses more robust. (markt)      + Fix: Stricter OCSP handling when soft-fail is disabled. (markt)      + Fix: Cleaner handling of AJP response headers which overflow the maximum      message size. (remm)      + Fix: Small per performance optimisation. Don't waste cycles swallowing      an AJP response body when the connection is going to be closed. (markt)      + Fix: OpenSSL support for CRLs when using OpenSSL trust with the server      key held in a Java key store. (markt)      + Fix: Reject HTTP/1.0 or earlier requests that send a transfer-encoding      header. (markt)      + Fix: Ensure per request HTTP/2 bad request marker is cleared when the      request is recycled. (markt)      + Fix: Additional clean-up after HTTP/2 stream reset to aid GC. (markt)      + Fix: Revert earlier refactoring of HTTP/2 header field validation that      moved it earlier since the refactoring made correct handling of invalid      headers more difficult. (markt)
     * Jasper      + Fix: EL evaluation of some lambda expressions. (remm)
     * WebSocket      + Fix: an exception when an automatic Pong response races with the closing      of the WebSocket session. (moritzfl)      + Fix: Harden the WebSocket client and use a SecureRandom when generating      the Sec-WebSocket-Key header. (markt)      + Fix: Improve robustness of client handshakes. (remm)      + Fix: Ensure that WebSocket write timeouts apply to the complete message      and are not lost if two writes have the same timeout. (markt)      + Fix: Reduce CPU usage while sending WebSocket close message. (markt)      + Fix: overly broad check that prevented request URIs containing literal {      and } characters from being mapped to WebSocket end points. (markt)      + Fix: handling of WebSocket messages with compressed payloads using per-      message-deflate that have one or more non-final blocks where the BFINAL      bit is set. (markt)      + Fix: handling of per-message-deflate context takeover when receiving      compressed WebSocket messages. (markt)
     * Web applications      + Fix: Manager: Fix a potential concurrency issue when ordering sessions      prior to displaying a list of session. (markt)      + Docs: Wrap the RewriteRule regular expression syntax reference on narrow      displays. Pull request #1044 by sainadh777. (markt)
     * Other      + Update: Easymock to 5.7.0. (markt)      + Update: bnd to 7.4.0. (markt)      + Update: Tomcat Native to 2.0.16. (markt)      + Add: Improvements to French translations. (remm)      + Add: Improvements to Japanese translations provided by tak7iji and      Ktamura.biz.80. (markt)
     * Cluster      + Fix: Validate that the DeltaManager attribute sendAllSessionsSize is a      positive integer. Zero or negative values previously caused an infinite      loop or a NegativeArraySizeException during session state transfer. Pull      request #1042 provided by lihongyi87. (markt)      + Fix: Improve robustness of cloud membership providers if an error occurs      fetching members. (remm)
     * jdbc-pool      + Fix: DataSourceProxy.getPooledConnection(String,String) now delegates to      getConnection(String,String) rather than getConnection(). (markt)      + Add: Log a warning if an attempt is made to obtain a connection with      credentials when alternateUsernameAllowed is set to false. (markt)      + Fix: Ensure StatementCache interceptor resets properties of cached      statements between uses. (mark)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

遠端 Windows 主機缺少安全性更新 4540673。
因此，此類應用程式受到多個弱點影響：

  - 當 Windows Device Setup Manager 不當處理檔案作業時，存在權限提升弱點。成功惡意利用此弱點的攻擊者可在提升的內容中執行處理程序。攻擊者可以在受害者系統中執行特別建構的應用程式，進而利用此弱點。此更新透過修正 Windows Device Setup Manager 處理檔案作業的方式來解決此弱點。(CVE-2020-0819)

  當 Windows Work Folder Service 未正確處理檔案作業時，存在權限提高弱點。成功惡意利用此弱點的攻擊者可在提升的內容中執行處理程序。攻擊者可以在受害者系統中執行特別建構的應用程式，進而利用此弱點。更新透過修正 Windows Work Folder Service 處理檔案作業的方式來解決此弱點。(CVE-2020-0777、CVE-2020-0797、CVE-2020-0800、CVE-2020-0864、CVE-2020-0865、CVE-2020-0866、CVE-2020-0897)

  - 當 Internet Explorer 不當存取記憶體中的物件時，存在遠端程式碼執行弱點。
    攻擊者可以在目前使用者的內容中執行任意程式碼，該弱點能夠藉此等方式損毀記憶體。成功利用此弱點的攻擊者可取得與當前使用者相同的使用者權限。。(CVE-2020-0824)

  - Windows Installer 中有一個權限提高弱點，這是因為 Windows Installer 處理特定檔案系統作業的方式。(CVE-2020-0814、CVE-2020-0842、CVE-2020-0843)

  - 當 Windows Modules Installer Service 不當洩漏檔案資訊時，存在一個資訊弱點。
    成功惡意利用此弱點可讓攻擊者讀取檔案系統上的任何檔案。
    (CVE-2020-0859)

  - Windows Mobile Device Management (MDM) Diagnostics 未正確處理接合時，存在權限提高弱點。成功利用此弱點的攻擊者可繞過存取限制，從而移除檔案。(CVE-2020-0854)

  - 當 Windows Graphics 元件未正確處理記憶體中的物件時，存在權限提高弱點。成功惡意利用此弱點的攻擊者可在提升的內容中執行處理程序。(CVE-2020-0791)

  - 當 Windows Network Connections Service 無法正確處理記憶體中的物件時，存在資訊洩漏弱點。成功利用該弱點的攻擊者可能會洩漏權限提升之處理程序的記憶體內容。(CVE-2020-0871))

  - 當「Public Account Pictures」資料夾未正確處理接合時，存在權限提高弱點。CVE-2020-0858)

  - 當 Microsoft IIS Server 無法正確處理格式錯誤的要求標頭時，有一個竄改弱點。成功惡意利用此弱點的攻擊者可造成容易受到攻擊的伺服器無法正確處理 HTTP 標頭，並竄改傳回給用戶端的回應。(CVE-2020-0645)

  - Provisioning Runtime 驗證某些檔案作業的方式中存在權限提升弱點。成功利用該弱點的攻擊者可在受害系統上取得更高的權限。(CVE-2020-0808)

  - 當 Win32k 元件無法正確處理記憶體中的物件時，Windows 中存在權限提高弱點。成功惡意利用此弱點的攻擊者可在核心模式中執行任意程式碼。之後，攻擊者可安裝程式、
    攻擊者接下來可以安裝程式、檢視/變更/刪除資料，或是建立具有完整使用者權限的新帳號。(CVE-2020-0788、CVE-2020-0877、CVE-2020-0887)

  - Windows Network Connections Service 處理記憶體中物件的方式存在一個權限提高弱點。成功惡意利用此弱點的攻擊者可以憑藉提升的權限執行程式碼。(CVE-2020-0778、CVE-2020-0802、CVE-2020-0803、CVE-2020-0804、CVE-2020-0845)

  - Windows 已連線使用者體驗與遙測服務不當洩漏檔案資訊時，存在資訊弱點。成功惡意利用此弱點可讓攻擊者讀取檔案系統上的任何檔案。
    (CVE-2020-0863)

  - 當 win32k 元件不當提供核心資訊時，存在資訊洩漏弱點。
    成功利用該弱點的攻擊者可以取得資訊以進一步入侵使用者系統。(CVE-2020-0876)

  - 當 Windows Installer 無法正確清理導致不安全程式庫載入行為的輸入時，Windows Installer 中存在權限提高弱點。本地驗證的攻擊者可以藉由提升的系統權限執行任意程式碼。攻擊者接下來可以安裝程式、檢視/變更/刪除資料，或是建立具有完整使用者權限的新帳號。安全性更新修正輸入清理錯誤以防止不需要的提升，進而修復該弱點。 (CVE-2020-0798)

  - 當 Windows 核心無法正確剖析某些符號連結時，Microsoft Windows 中存在一個權限提升弱點。成功利用此弱點的攻擊者可能會存取具特殊權限的登錄機碼，因此提升權限。攻擊者接下來可以安裝程式、檢視/變更/刪除資料，或是建立具有完整使用者權限的新帳號。
    (CVE-2020-0799)

  - 當 Connected User Experiences 和 Telemetry Service 未正確處理檔案作業時，存在權限提高弱點。成功惡意利用此弱點的攻擊者可在提升的內容中執行處理程序。攻擊者可以在受害者系統中執行特別建構的應用程式，進而利用此弱點。此安全性更新透過修正 Connected User Experiences 和 Telemetry Service 處理檔案作業的方式，解決此弱點。(CVE-2020-0844)

  - 當 Diagnostics Hub Standard Collector 或 Visual Studio Standard Collector 允許在任意位置建立檔案時，存在權限提升弱點。(CVE-2020-0810)

  - Microsoft Windows 存在遠端程式碼執行弱點，當處理 .LNK 檔案時，可導致遠端程式碼執行。成功惡意利用此弱點的攻擊者可取得與本機使用者相同的使用者權限。(CVE-2020-0684)

  - Windows 不當處理永久連結時，有一個權限提高弱點。若攻擊者惡意利用此弱點得逞，其即可覆寫目標檔案，進而導致提升狀態。
    (CVE-2020-0840、CVE-2020-0841、CVE-2020-0849、CVE-2020-0896)

  - 當 Windows CSC Service 不當處理記憶體時，存在一個權限提高弱點。
    (CVE-2020-0769、CVE-2020-0771)

  - Windows 圖形裝置介面 (GDI) 處理記憶體中物件的方式存在一個資訊洩漏弱點，使得攻擊者能夠從目標系統擷取資訊。資訊洩漏本身不允許任意程式碼執行；但是如果攻擊者使用此弱點並且結合其他弱點，則其可允許執行任意程式碼。(CVE-2020-0874、CVE-2020-0879)

  - Windows Search Indexer 處理記憶體中之物件的方式存在一個權限提高弱點。成功利用該弱點的攻擊者可以憑藉提升的權限執行程式碼。(CVE-2020-0857)

  - 當 Windows 錯誤報告 (WER) 處理及執行檔案時，WER 中存在一個權限提高弱點。如果攻擊者成功利用此弱點，可允許權限提升。
    成功惡意利用此弱點的攻擊者可取得敏感資訊與系統功能的更大存取權。(CVE-2020-0806)

  - 當 Windows GDI 元件不當洩漏其記憶體的內容時，存在資訊洩漏弱點。成功利用該弱點的攻擊者可以取得資訊以進一步入侵使用者系統。攻擊者可以有多種方式惡意利用弱點，諸如誘騙使用者開啟特製文件或是誘騙使用者造訪未受信任的網頁。
    安全性更新透過修正 Windows GDI 元件處理記憶體中物件的方式解決該弱點。(CVE-2020-0774、CVE-2020-0880、CVE-2020-0882)

  - Windows Graphics Device Interface (GDI) 處理記憶體中物件的方式中存在遠端程式碼執行弱點。成功利用此弱點的攻擊者可控制受影響的系統。攻擊者接下來可以安裝程式、檢視/變更/刪除資料，或是建立具有完整使用者權限的新帳號。(CVE-2020-0881、CVE-2020-0883)

  - 當 Windows GDI 元件不當洩漏其記憶體的內容時，存在資訊洩漏弱點。成功惡意利用此弱點的攻擊者可以取得資訊以進一步入侵使用者系統。攻擊者可以有多種方式惡意利用弱點，諸如誘騙使用者開啟特製文件或是誘騙使用者造訪未受信任的網頁。
    此更新會透過修正 Windows GDI 元件處理記憶體中物件的方式解決該弱點。
    (CVE-2020-0885)

  - 當 Media Foundation 未正確處理記憶體中的物件時，存在資訊洩漏弱點。
    成功惡意利用此弱點的攻擊者可以取得資訊以進一步危害使用者系統。已取得受害者系統執行權限的攻擊者可以執行特製的應用程式，藉此惡意利用此弱點。此更新透過修正 Media Foundation 處理記憶體中物件的方式來解決此弱點。(CVE-2020-0820)

  - 當 Windows Update Orchestrator Service 未正確處理檔案作業時，存在權限提高弱點。成功惡意利用此弱點的攻擊者可在提升的內容中執行處理程序。攻擊者可以在受害者系統中執行特別建構的應用程式，進而利用此弱點。更新透過修正 Windows Update Orchestrator Service 處理檔案作業的方式來解決此弱點。(CVE-2020-0867、CVE-2020-0868)

  - Windows Network List Service 處理記憶體中物件的方式中存在權限提高弱點。成功利用該弱點的攻擊者可以憑藉提升的權限執行程式碼。(CVE-2020-0780)

  - Windows 未正確處理對進階本機程序呼叫 (ALPC) 的呼叫時，存在權限提高弱點。成功利用此弱點的攻擊者，可在本機系統的安全性內容中執行任意程式碼。攻擊者接下來可以安裝程式、檢視/變更/刪除資料，或是建立具有完整使用者權限的新帳號。
    (CVE-2020-0834)

  - 當 Windows User Profile Service (ProfSvc) 未正確處理符號連結時，存在一個權限提高弱點。若攻擊者惡意利用此弱點得逞，其即可在提升的內容中刪除檔案和資料夾。(CVE-2020-0785)

  - 當 Windows Defender Security Center 不當處理記憶體中的特定物件時，存在一個權限提升弱點。(CVE-2020-0762、CVE-2020-0763)

  - 當 Windows 網路驅動程式介面規格 (NDIS) 不當處理記憶體時，存在一個資訊洩漏弱點。(CVE-2020-0861)

  - 當 DirectX 圖形元件未正確處理記憶體中的物件時，存在權限提高弱點。成功惡意利用此弱點的攻擊者可在核心模式中執行任意程式碼。攻擊者接下來可以安裝程式、檢視/變更/刪除資料，或是建立具有完整使用者權限的新帳號。
    (CVE-2020-0690)

  - 當 Windows AppX Deployment Server 不當處理檔案作業時，存在一個權限提升弱點。(CVE-2020-0776)

  - 指令碼引擎在 Internet Explorer 內處理記憶體中物件的方式存在遠端程式碼執行弱點。攻擊者可以在目前使用者的內容中執行任意程式碼，該弱點能夠藉此等方式損毀記憶體。成功利用此弱點的攻擊者可取得與當前使用者相同的使用者權限。
    (CVE-2020-0832、CVE-2020-0833)

  - 指令碼引擎在 Microsoft 瀏覽器中處理記憶體中物件的方式存在一個遠端程式碼執行弱點。攻擊者可以在目前使用者的內容中執行任意程式碼，該弱點能夠藉此等方式損毀記憶體。成功利用此弱點的攻擊者可取得與當前使用者相同的使用者權限。
    (CVE-2020-0768、CVE-2020-0830)

  - 當 MSI 套件處理符號連結時，在 Windows Installer 中存在一個權限提高弱點。若惡意利用此弱點得逞，攻擊者即可繞過存取限制，以新增或移除檔案。(CVE-2020-0779)

  - 當 Windows Background Intelligent Transfer Service (BITS) 未正確處理符號連結時，存在一個權限提高弱點。若攻擊者惡意利用此弱點得逞，其即可覆寫目標檔案，進而導致提升狀態。
    (CVE-2020-0787)

  - VBScript 引擎處理記憶體中物件的方式中存在遠端程式碼執行弱點。攻擊者可以在目前使用者的內容中執行任意程式碼，該弱點能夠藉此等方式損毀記憶體。成功利用此弱點的攻擊者可取得與當前使用者相同的使用者權限。。(CVE-2020-0847)

  - 當 Diagnostics Hub Standard Collector Service 未正確處理檔案作業時，存在權限提高弱點。成功利用此弱點的攻擊者可取得提升的權限。無權限存取有弱點的系統的攻擊者可加以惡意利用。此安全性更新可確保 Diagnostics Hub Standard Collector Service 正確處理檔案作業，從而修復此弱點。(CVE-2020-0793)

  - Windows 錯誤報告未正確處理檔案作業時，存在資訊洩漏弱點。(CVE-2020-0775)

  - Windows Universal Plug 和 Play (UPnP) 服務不當處理記憶體中的物件時，有一個權限提高弱點。成功利用此弱點的攻擊者可使用提高的系統權限執行任意程式碼。攻擊者接下來可以安裝程式、檢視/變更/刪除資料，或是建立具有完整使用者權限的新帳號。(CVE-2020-0781、CVE-2020-0783)

  - 當 Windows Media Foundation 未正確處理記憶體中的物件時，存在記憶體損毀弱點。
    成功利用該弱點的攻擊者可以安裝程式、檢視、變更或刪除資料，或是建立具有完整使用者權限的新帳戶。攻擊者可以有多種方式惡意利用弱點，諸如誘騙使用者開啟特製文件或是誘騙使用者造訪惡意網頁。安全性更新透過修正 Windows Media Foundation 處理記憶體中物件的方式修復該弱點。(CVE-2020-0801、CVE-2020-0807、CVE-2020-0809、CVE-2020-0869)

  - 當 Windows Imaging Component 無法正確處理記憶體中的物件時，存在一個資訊洩漏弱點。成功惡意利用此弱點的攻擊者可以取得資訊以進一步危害使用者系統。
    攻擊者有多種方式可以利用此弱點：(CVE-2020-0853)

  - 當 Windows Language Pack Installer 不當處理檔案作業時，存在一個權限提高弱點。成功惡意利用此弱點的攻擊者可在提升的內容中執行處理程序。攻擊者可以在受害者系統中執行特別建構的應用程式，進而利用此弱點。此更新透過修正 Windows Language Pack Installer 處理檔案作業的方式解決此弱點。(CVE-2020-0822)

  - 當 Windows ActiveX Installer Service 不當處理記憶體時，存在一個權限提高弱點。(CVE-2020-0770、CVE-2020-0773、CVE-2020-0860)

  - 當 Windows Error Reporting 不當處理記憶體時，存在一個權限提高弱點。
    (CVE-2020-0772)

远程 Windows 主机缺少安全更新 4540673。
因此，该应用程序受到多个漏洞的影响：

  - Windows 设备安装管理器未正确处理文件操作时，存在权限提升漏洞。成功利用该漏洞的攻击者能在权限提升的环境中运行进程。攻击者可通过在受害者系统上运行特别构建的应用程序来利用该漏洞。此更新通过更正 Windows 设备安装管理器处理文件操作的方式来修复此漏洞。(CVE-2020-0819)

  - Windows 工作文件夹服务未正确处理文件操作时，存在权限提升漏洞。成功利用该漏洞的攻击者可在权限提升后的环境中运行进程。攻击者可通过在受害者系统上运行特别构建的应用程序来利用该漏洞。此更新通过更正 Windows Work Folder Service 处理文件操作的方式来修复此漏洞。（CVE-2020-0777、CVE-2020-0797、CVE-2020-0800、CVE-2020-0864、CVE-2020-0865、CVE-2020-0866、CVE-2020-0897）

  - Internet Explorer 未正确访问内存中对象时，存在远程代码执行漏洞。
    此漏洞可使攻击者在当前用户环境下执行任意代码，从而导致内存损坏。成功利用此漏洞的攻击者可获得与当前用户相同的用户权限。(CVE-2020-0824)

  - Windows Installer 中存在权限提升漏洞，这是 Windows Installer 处理某些文件系统操作的方式所致。（CVE-2020-0814、CVE-2020-0842、CVE-2020-0843）

  - Windows 模块安装程序服务未正确公开文件信息时，存在信息漏洞。
    成功利用此漏洞可使攻击者读取文件系统上的任意文件。
    (CVE-2020-0859)

  - Windows 移动设备管理 (MDM) 诊断未正确处理连接时，存在权限提升漏洞。成功利用此漏洞的攻击者可绕过访问限制并删除文件。(CVE-2020-0854)

  - Windows 图形组件未正确处理内存中的对象时，存在权限提升漏洞。成功利用该漏洞的攻击者可在权限提升后的环境中运行进程。(CVE-2020-0791)

  - Windows Network Connections Service 无法正确处理内存中对象时，存在信息泄露漏洞。成功利用此漏洞的攻击者可能会泄露提升进程的内存内容。(CVE-2020-0871)

  -“公共用户头像” 文件夹未正确处理连接时，存在权限提升漏洞。(CVE-2020-0858)

  - Microsoft IIS 服务器未正确处理格式错误的请求标头时，存在篡改漏洞。成功利用此漏洞的攻击者可能会导致易受攻击的服务器错误处理 HTTP 标头并篡改返回至客户端的响应。(CVE-2020-0645)

  - Provisioning Runtime 验证某些文件操作的方式中存在权限提升漏洞。成功利用此漏洞的攻击者可在受害者系统上获得提升的权限。(CVE-2020-0808)

  - Win32k 组件未正确处理内存中对象时，Windows 中存在权限提升漏洞。成功利用此漏洞的攻击者可在内核模式下运行任意代码。然后，攻击者可安装程序，
    查看、更改或删除数据，或者创建拥有完全用户权限的新帐户。（CVE-2020-0788、CVE-2020-0877、CVE-2020-0887）

  - Windows Network Connections Service 处理内存中对象的方式存在权限提升漏洞。成功利用此漏洞的攻击者可使用已提升权限执行代码。（CVE-2020-0778、CVE-2020-0802、CVE-2020-0803、CVE-2020-0804、CVE-2020-0845）

  - Windows 连接用户体验和遥测服务未正确披露文件信息时，存在信息漏洞。成功利用此漏洞可使攻击者读取文件系统上的任意文件。
    (CVE-2020-0863)

  - win32k 组件未正确提供内核信息时，存在信息泄露漏洞。
    成功利用此漏洞的攻击者可获取信息，从而进一步危害用户系统。(CVE-2020-0876)

  - Windows Installer 未能正确清理可造成不安全库加载行为的输入时，其中存在权限提升漏洞。通过本地身份验证的攻击者使用提升的系统权限可运行任意代码。然后，攻击者可安装程序，查看、更改或删除数据，或者创建拥有完全用户权限的新帐户。此安全更新通过更正输入清理错误来避免意外提升，从而修复此漏洞。(CVE-2020-0798)

  - Windows 内核未能正确处理某些符号链接的分析时，Microsoft Windows 中存在权限提升漏洞。成功利用此漏洞的攻击者可访问具有特权的注册密钥，从而提升权限。然后，攻击者可安装程序，查看、更改或删除数据，或者创建拥有完全用户权限的新帐户。
    (CVE-2020-0799)

  - 互联用户体验和遥测服务未正确处理文件操作时，存在权限提升漏洞。成功利用该漏洞的攻击者可在权限提升后的环境中运行进程。攻击者可通过在受害者系统上运行特别构建的应用程序来利用该漏洞。此安全更新通过更正互联用户体验和遥测服务处理文件操作的方式来修复此漏洞。(CVE-2020-0844)

  - 诊断中心标准收集器或 Visual Studio 标准收集器允许在任意位置创建文件时，存在权限提升漏洞。(CVE-2020-0810)

  - Microsoft Windows 中存在远程代码执行漏洞，可在处理 .LNK 文件时允许远程代码执行。成功利用此漏洞的攻击者可获得与本地用户相同的用户权限。(CVE-2020-0684)

  - Windows 未正确处理硬链接时，存在权限提升漏洞。成功利用此漏洞的攻击者可覆写导致状态提升的目标文件。
    （CVE-2020-0840、CVE-2020-0841、CVE-2020-0849、CVE-2020-0896）

  - Windows CSC 服务未正确处理内存时，存在权限提升漏洞。
    （CVE-2020-0769、CVE-2020-0771）

  - Windows 图形设备接口 (GDI) 处理内存中对象的方式存在信息泄露漏洞，攻击者可利用此漏洞从目标系统中检索信息。就其本身而言，攻击者无法利用信息泄露漏洞执行任意代码，但如果攻击者将其与另一漏洞结合使用，则可运行任意代码。（CVE-2020-0874、CVE-2020-0879）

  - Windows Search 索引器处理内存中对象的方式存在权限提升漏洞。成功利用此漏洞的攻击者可使用已提升权限执行代码。(CVE-2020-0857)

  - Windows 错误报告 (WER) 处理并执行文件时，WER 中存在权限提升漏洞。一旦攻击者成功利用此漏洞，便可实现权限提升。
    成功利用此漏洞的攻击者可获得对敏感信息和系统功能的更大访问权。(CVE-2020-0806)

  - Windows GDI 组件不当披露其内存内容时，存在信息泄露漏洞。成功利用此漏洞的攻击者可获取信息以进一步危害用户系统。攻击者可以通过多种方式利用此漏洞，例如诱使用户打开特别构建的文档，或诱使用户访问不受信任的网页。
    此安全更新通过更正 Windows GDI 组件处理内存中对象的方式来修复漏洞。（CVE-2020-0774、CVE-2020-0880、CVE-2020-0882）

  Windows 图形设备接口 (GDI) 处理内存中对象的方式存在远程代码执行漏洞。成功利用此漏洞的攻击者可控制受影响的系统。然后，攻击者可安装程序，查看、更改或删除数据，或者创建拥有完全用户权限的新帐户。（CVE-2020-0881、CVE-2020-0883）

  - Windows GDI 组件不当披露其内存内容时，存在信息泄露漏洞。成功利用此漏洞的攻击者可获取信息以进一步危害用户系统。攻击者可以通过多种方式利用此漏洞，例如诱使用户打开特别构建的文档或诱使用户访问不受信任的网页。
    此更新通过更正 Windows GDI 组件处理内存中对象的方式来修复漏洞。
    (CVE-2020-0885)

  - 媒体基础未正确处理内存中对象时，存在信息泄露漏洞。
    成功利用此漏洞的攻击者可获取信息，从而进一步危害用户系统。已经在受害者系统上获得执行的攻击者，可通过运行特制的应用程序来利用此漏洞。此更新通过更正 Media Foundation 处理内存中对象的方式来修复此漏洞。(CVE-2020-0820)

  - Windows Update Orchestrator Service 未正确处理文件操作时，存在权限提升漏洞。成功利用该漏洞的攻击者能在权限提升的环境中运行进程。攻击者可通过在受害者系统上运行特别构建的应用程序来利用该漏洞。此更新通过更正 Windows Update Orchestrator Service 处理文件操作的方式来修复此漏洞。（CVE-2020-0867、CVE-2020-0868）

  - Windows Network List Service 处理内存中对象的方式存在权限提升漏洞。成功利用此漏洞的攻击者可使用已提升权限执行代码。(CVE-2020-0780)

  - Windows 未正确处理 Advanced Local Procedure Call (ALPC) 调用时，存在权限提升漏洞。成功利用此漏洞的攻击者可在本地系统的安全环境中运行任意代码。然后，攻击者可安装程序，查看、更改或删除数据，或者创建拥有完全用户权限的新帐户。
    (CVE-2020-0834)

  - Windows User Profile Service (ProfSvc) 未正确处理符号链接时，存在权限提升漏洞。成功利用该漏洞的攻击者可在权限提升后的环境中删除文件和文件夹。(CVE-2020-0785)

  - Windows Defender 安全中心处理内存中的某些对象时，存在权限提升漏洞。（CVE-2020-0762、CVE-2020-0763）

  - Windows 网络驱动程序接口规范 (NDIS) 未正确处理内存时，存在信息泄露漏洞。(CVE-2020-0861)

  - DirectX 未正确处理内存中对象时，存在权限提升漏洞。成功利用此漏洞的攻击者可在内核模式下运行任意代码。然后，攻击者可安装程序，查看、更改或删除数据，或者创建拥有完全用户权限的新帐户。
    (CVE-2020-0690)

  - Windows AppX 部署服务器未正确处理文件操作时，存在权限提升漏洞。(CVE-2020-0776)

  - Internet Explorer 中，脚本引擎处理内存中对象的方式存在远程代码执行漏洞。此漏洞可使攻击者在当前用户环境下执行任意代码，从而导致内存损坏。成功利用此漏洞的攻击者可获得与当前用户相同的用户权限。
    （CVE-2020-0832、CVE-2020-0833）

  - 在 Microsoft 浏览器中，脚本引擎处理内存中对象的方式存在远程代码执行漏洞。此漏洞可使攻击者在当前用户环境下执行任意代码，从而导致内存损坏。成功利用此漏洞的攻击者可获得与当前用户相同的用户权限。
    （CVE-2020-0768、CVE-2020-0830）

  - MSI 程序包处理符号链接时，Windows Installer 中存在权限提升漏洞。成功利用此漏洞的攻击者可绕过访问限制，从而添加或移除文件。(CVE-2020-0779)

  - Windows 后台智能传输服务 (BITS) 未正确处理符号链接时，存在权限提升漏洞。成功利用此漏洞的攻击者可覆写导致状态提升的目标文件。
    (CVE-2020-0787)

  - VBScript 引擎处理内存中对象的方式存在远程代码执行漏洞。此漏洞可使攻击者在当前用户环境下执行任意代码，从而导致内存损坏。成功利用此漏洞的攻击者可获得与当前用户相同的用户权限。(CVE-2020-0847)

  - 诊断中心标准收集器服务未正确处理文件操作时，存在权限提升漏洞。成功利用此漏洞的攻击者可获得提升的权限。对易受攻击的系统拥有非特许访问权的攻击者可利用此漏洞。此安全性更新通过确保诊断中心标准收集器服务正确处理文件操作来修复此漏洞。(CVE-2020-0793)

  - Windows 错误报告未正确处理文件操作时，存在信息泄露漏洞。(CVE-2020-0775)

  Windows 通用即插即用 (UPnP) 服务未正确处理内存中对象时，存在权限提升漏洞。成功利用此漏洞的攻击者可使用已提升系统权限运行任意代码。然后，攻击者可安装程序，查看、更改或删除数据，或者创建拥有完全用户权限的新帐户。（CVE-2020-0781、CVE-2020-0783）

  - Windows 媒体基础未正确处理内存中对象时，存在内存损坏漏洞。
    成功利用此漏洞的攻击者可安装程序、查看、更改或删除数据，或者创建拥有完全用户权限的新帐户。攻击者可以通过多种方式利用此漏洞，例如诱使用户打开特别构建的文档，或诱使用户访问恶意网页。此安全更新通过更正 Windows 媒体基础处理内存中对象的方式来修复此漏洞。（CVE-2020-0801、CVE-2020-0807、CVE-2020-0809、CVE-2020-0869）

  Windows 映像组件无法正确处理内存中对象时，存在信息泄露漏洞。成功利用此漏洞的攻击者可获取信息以进一步危害用户系统。
    攻击者可以通过多种方式利用此漏洞：(CVE-2020-0853)

  - Windows 语言包安装程序未正确处理文件操作时，存在权限提升漏洞。成功利用该漏洞的攻击者能在权限提升的环境中运行进程。攻击者可通过在受害者系统上运行特别构建的应用程序来利用该漏洞。此更新通过更正 Windows 语言包安装程序处理文件操作的方式来修复此漏洞。(CVE-2020-0822)

  - Windows ActiveX 安装程序服务未正确处理内存时，存在权限提升漏洞。（CVE-2020-0770、CVE-2020-0773、CVE-2020-0860）

  - Windows 错误报告未正确处理内存时，存在权限提升漏洞。
    (CVE-2020-0772)

ID	名稱	產品	系列	已發布	已更新	嚴重性
139484	KB4565349：Windows 10 版本 1809 和 Windows Server 2019 的 2020 年 8 月安全更新	Nessus	Windows : Microsoft Bulletins	2020/8/11	2025/12/17	high
134368	KB4538461：Windows 10 版本 1809 和 Windows Server 2019 的 2020 年 3 月安全更新	Nessus	Windows : Microsoft Bulletins	2020/3/10	2023/2/20	critical
139484	KB4565349: Windows 10 Version 1809 and Windows Server 2019 August 2020 Security Update	Nessus	Windows : Microsoft Bulletins	2020/8/11	2025/12/17	high
134368	KB4538461: Windows 10 Version 1809 and Windows Server 2019 March 2020 Security Update	Nessus	Windows : Microsoft Bulletins	2020/3/10	2023/2/20	critical
53784	openSUSE 安全更新：OpenOffice_org (openSUSE-SU-2011:0337-1)	Nessus	SuSE Local Security Checks	2011/5/5	2021/1/14	high
134369	KB4540670: Windows 10 Version 1607 and Windows Server 2016 March 2020 Security Update	Nessus	Windows : Microsoft Bulletins	2020/3/10	2023/2/20	critical
363782	SUSE SLES15: libtcnative-1-0 / libtcnative-1-0-devel / tomcat / etc (SUSE-SU-2026:4546-1)	Nessus	SuSE Local Security Checks	2026/10/7	2026/10/26	critical
134370	KB4540673：Windows 10 1903 版與 Windows 10 1909 版的 2020 年 3 月安全性更新	Nessus	Windows : Microsoft Bulletins	2020/3/10	2023/2/20	critical
134370	KB4540673: Windows 10バージョン1903およびWindows 10バージョン1909の2020年3月のセキュリティ更新プログラム	Nessus	Windows : Microsoft Bulletins	2020/3/10	2023/2/20	critical
363782	SUSE SLES15:libtcnative-1-0 / libtcnative-1-0-devel / tomcat / など(SUSE-SU-2026:4546-1)	Nessus	SuSE Local Security Checks	2026/10/7	2026/10/26	critical
134370	KB4540673：Windows 10 版本 1903 和 Windows 10 版本 1909 的 2020 年 3 月安全更新	Nessus	Windows : Microsoft Bulletins	2020/3/10	2023/2/20	critical
134370	KB4540673: Windows 10 Version 1903 and Windows 10 Version 1909 March 2020 Security Update	Nessus	Windows : Microsoft Bulletins	2020/3/10	2023/2/20	critical
330575	SUSE SLED15: apache-commons-compress / apache-commons-lang3 / beust-jcommander / etc (SUSE-SU-2026:3390-1)	Nessus	SuSE Local Security Checks	2026/7/29	2026/7/29	medium

偵測

搜尋 Plugin

high

critical

high

critical

high

critical

critical

critical

critical

critical

critical

critical

medium