远程 Windows 主机缺少安全更新 4486996。因而会受到多个漏洞的影响：- Windows 未正确披露文件信息时，存在信息漏洞。成功利用此漏洞可使攻击者读取磁盘上的文件内容。(CVE-2019-0636) - Windows 内核未能确处理内存对象时，存在权限提升漏洞。成功利用此漏洞的攻击者可在内核模式下运行任意代码。然后，攻击者可安装程序、查看/更改/删除数据或创建具有完全用户权限的新帐户。(CVE-2019-0656) - Win32k 组件未正确处理内存对象时，Windows 中存在权限提升漏洞。成功利用此漏洞的攻击者可在内核模式下运行任意代码。然后，攻击者可安装程序、查看/更改/删除数据或创建具有完全用户权限的新帐户。(CVE-2019-0623) - 主机操作系统上的 Windows Hyper-V 未正确验证来宾操作系统中经验证用户的输入时，存在信息泄露漏洞。(CVE-2019-0635) - Windows 内核未正确处理内存对象时，存在信息泄露漏洞。成功利用此漏洞的攻击者可获取信息而进一步危害用户系统。(CVE-2019-0621) - 人机接口设备 (HID) 组件未正确处理内存对象时，存在信息泄露漏洞。成功利用此漏洞的攻击者可获取信息而进一步危害受害者系统。(CVE-2019-0600, CVE-2019-0601) - 当软件无法检查文件的源标记时，.NET Framework 中存在远程代码执行漏洞。成功利用此漏洞的攻击者可在当前用户环境中运行任意代码。如果当前用户使用管理用户权限进行登录，攻击者可控制受影响系统。然后，攻击者可安装程序、查看/更改/删除数据或创建具有完全用户权限的新帐户。(CVE-2019-0613) - 当 Storage Service 不当处理文件操作时，存在权限提升漏洞。成功利用此漏洞的攻击者可在受害者系统上获得提升的权限。(CVE-2019-0659) - Windows 中存在安全功能绕过漏洞，允许攻击者绕过 Device Guard。成功利用此漏洞的攻击者可避开计算机上的用户模式代码完整性 (UMCI) 策略。(CVE-2019-0627, CVE-2019-0631, CVE-2019-0632) - win32k 组件未正确提供内核信息时，存在信息泄露漏洞。成功利用此漏洞的攻击者可获取信息而进一步危害用户系统。(CVE-2019-0628) - 某些 .Net Framework API 和 Visual Studio 的 URL 解析方式存在漏洞。成功利用此漏洞的攻击者可利用该漏洞，绕过用意在于确保用户提供的 URL 属于特定主机名称或该主机名称之子网域的安全逻辑。这可能会导致将未受信任的服务当作受信任的服务，与其进行具有特殊权限的通信。(CVE-2019-0657) - Windows 图形设备接口 (GDI) 处理内存对象的方式存在远程代码执行漏洞。成功利用此漏洞的攻击者可控制受影响的系统。然后，攻击者可安装程序、查看/更改/删除数据或创建具有完全用户权限的新帐户。(CVE-2019-0618, CVE-2019-0662) - 当 Windows Defender Firewall 误将防火墙配置文件应用至移动网络连接时，存在安全功能绕过漏洞。当 Windows 同时连接至以太网和移动网络时，即会出现此漏洞。攻击者无法远程触发此漏洞，此漏洞本身并不会导致 Windows 遭到恶意利用。此更新会通过更改 Windows Defender Firewall 在同时存有以太网和移动连接网络时处理防火墙配置文件的方式，来解决此行为。(CVE-2019-0637) - Microsoft Server Message Block 2.0 (SMBv2) 服务器处理某些请求时，存在远程代码执行漏洞。成功利用此漏洞的攻击者可获得在目标服务器上执行代码的能力。(CVE-2019-0630, CVE-2019-0633) - Windows GDI 组件未正确披露其内存内容时，存在信息泄露漏洞。成功利用此漏洞的攻击者可获取信息而进一步危害用户系统。攻击者可以通过多种方式利用该漏洞，比如诱使用户打开特制文档或访问不可信的网页。此安全更新通过更正 Windows GDI 组件处理内存对象的方式来修复漏洞。(CVE-2019-0602, CVE-2019-0615, CVE-2019-0616, CVE-2019-0619, CVE-2019-0660) - 攻击者向 DHCP 服务器发送特制的数据包时，Windows Server DHCP 服务中存在内存损坏漏洞。成功利用此漏洞的攻击者能在 DHCP 服务器上运行任意代码。(CVE-2019-0626) - Windows Jet 数据库引擎未正确处理内存对象时，存在远程代码执行漏洞。成功利用此漏洞的攻击者可在受害者系统上执行任意代码。攻击者可诱使受害者开启特制文件，进而利用此漏洞。此更新通过更正 Windows Jet 数据库引擎处理内存对象的方式来修复漏洞。(CVE-2019-0595, CVE-2019-0596, CVE-2019-0597, CVE-2019-0598, CVE-2019-0599, CVE-2019-0625) - Windows 内核未正确处理内存对象时，存在信息泄露漏洞。未经身份验证的攻击者可运行特制应用程序，以恶意利用此漏洞。成功利用此漏洞的攻击者可获取信息而进一步危害用户系统。(CVE-2019-0663)

远程 Windows 主机缺少安全更新 4487026。因此，该应用程序受到多个漏洞的影响：

  - Windows 未正确公开文件信息时，存在信息漏洞。成功利用此漏洞可使攻击者读取磁盘上的文件内容。
    (CVE-2019-0636)

  - Microsoft Edge 未正确访问内存对象时，存在远程代码执行漏洞。
    此漏洞可使攻击者在当前用户环境中执行任意代码，从而导致内存损坏。成功利用此漏洞的攻击者可获得与当前用户相同的用户权限。(CVE-2019-0645)

  - 当 Storage Service 不当处理文件操作时，存在权限提升漏洞。成功利用此漏洞的攻击者可在受害者系统上获得提升的权限。
    (CVE-2019-0659)

  - Microsoft Edge 的脚本引擎处理内存对象的方式存在远程代码执行漏洞。此漏洞可使攻击者在当前用户环境下执行任意代码，从而导致内存损坏。成功利用此漏洞的攻击者可获得与当前用户相同的用户权限。（CVE-2019-0590、CVE-2019-0591、CVE-2019-0593、CVE-2019-0605、CVE-2019-0642、CVE-2019-0644、CVE-2019-0651、CVE-2019-0652、CVE-2019-0655）

  - Win32k 组件未正确处理内存中对象时，Windows 中存在权限提升漏洞。成功利用此漏洞的攻击者可在内核模式下运行任意代码。然后，攻击者可安装程序，
    查看、更改或删除数据，或者创建拥有完全用户权限的新帐户。(CVE-2019-0623)

  - 主机操作系统上的 Windows Hyper-V 未正确验证来宾操作系统中经过身份验证的用户的输入时，存在信息泄露漏洞。(CVE-2019-0635)

  - Windows 内核未正确处理内存中对象时，存在信息泄露漏洞。成功利用此漏洞的攻击者可获取信息，从而进一步危害用户系统。(CVE-2019-0621)

  - 人机接口设备 (HID) 组件未正确处理内存中的对象时，存在信息泄露漏洞。成功利用此漏洞的攻击者可获取信息，从而进一步危害受害者系统。（CVE-2019-0600、CVE-2019-0601）

  - 当软件无法检查文件的源标记时，.NET Framework 中存在远程代码执行漏洞。成功利用此漏洞的攻击者可在当前用户环境中运行任意代码。如果当前用户使用管理用户权限登录，攻击者可控制受影响的系统。然后，攻击者可安装程序，查看、更改或删除数据，或者创建拥有完全用户权限的新帐户。(CVE-2019-0613)

  - Windows GDI 组件不当披露其内存内容时，存在信息泄露漏洞。成功利用此漏洞的攻击者可获取信息以进一步危害用户系统。攻击者可以通过多种方式利用此漏洞，例如诱使用户打开特别构建的文档，或诱使用户访问不受信任的网页。
    此安全更新通过更正 Windows GDI 组件处理内存中对象的方式来修复漏洞。（CVE-2019-0602、CVE-2019-0615、CVE-2019-0616、CVE-2019-0619、CVE-2019-0660）

  - Windows 中存在安全功能绕过漏洞，可允许攻击者绕过 Device Guard。成功利用此漏洞的攻击者可避开计算机上的用户模式代码完整性 (UMCI) 策略。（CVE-2019-0627、CVE-2019-0631、CVE-2019-0632）

  - win32k 组件未正确提供内核信息时，存在信息泄露漏洞。
    成功利用此漏洞的攻击者可获取信息，从而进一步危害用户系统。(CVE-2019-0628)

  - Internet Explorer 未正确处理内存中对象时，存在信息泄露漏洞。
    成功利用此漏洞的攻击者可测试磁盘上是否存在文件。攻击者必须诱使用户打开恶意网站才能成功攻击。此安全更新通过变更 Internet Explorer 处理内存对象的方式，解决此漏洞。
    (CVE-2019-0676)

  - 某些 .Net Framework API 和 Visual Studio 的 URL 解析方式中存在漏洞。成功利用此漏洞的攻击者可利用该漏洞，绕过用意在于确保用户提供的 URL 属于特定主机名称或该主机名称之子网域的安全逻辑。这可能会导致将未受信任的服务当作受信任的服务，与其进行具有特殊权限的通信。
    (CVE-2019-0657)

  - Internet Explorer 未正确访问内存中对象时，存在远程代码执行漏洞。
    此漏洞可使攻击者在当前用户环境下执行任意代码，从而导致内存损坏。成功利用此漏洞的攻击者可获得与当前用户相同的用户权限。(CVE-2019-0606)

  Windows 图形设备接口 (GDI) 处理内存中对象的方式存在远程代码执行漏洞。成功利用此漏洞的攻击者可控制受影响的系统。然后，攻击者可安装程序，查看、更改或删除数据，或者创建拥有完全用户权限的新帐户。（CVE-2019-0618、CVE-2019-0662）

  - Windows 内核未能确处理内存中对象时，存在权限提升漏洞。成功利用此漏洞的攻击者可在内核模式下运行任意代码。
    然后，攻击者可安装程序，查看、更改或删除数据，或者创建拥有完全用户权限的新帐户。(CVE-2019-0656)

  - Microsoft 浏览器未正确处理特定重定向时，存在欺骗漏洞。成功利用此漏洞的攻击者可诱使用户相信自己正在访问合法网站。该特制网站既可伪造内容，也可作为连接攻击和其他 Web 服务中的漏洞的枢纽。
    (CVE-2019-0654)

  - Microsoft 服务器消息块 2.0 (SMBv2) 服务器处理某些请求的方式中存在远程代码执行漏洞。成功利用此漏洞的攻击者可获得在目标服务器上执行代码的能力。
    （CVE-2019-0630、CVE-2019-0633）

  - 攻击者向 DHCP 服务器发送特别构建的数据包时，Windows Server DHCP 服务中存在内存损坏漏洞。成功利用此漏洞的攻击者可在 DHCP 服务器上运行任意代码。(CVE-2019-0626)

  - Windows Jet 数据库引擎未正确处理内存中对象时，存在远程代码执行漏洞。成功利用此漏洞的攻击者可在受害者系统上执行任意代码。攻击者可诱使受害者开启特制文件，进而利用此漏洞。此更新通过更正 Windows Jet 数据库引擎处理内存中对象的方式来修复此漏洞。（CVE-2019-0595、CVE-2019-0596、CVE-2019-0597、CVE-2019-0598、CVE-2019-0599、CVE-2019-0625）

  - Windows 内核未正确初始化内存对象时，存在信息泄露漏洞。
    未经身份验证的攻击者可运行特制应用程序，以恶意利用此漏洞。成功利用此漏洞的攻击者可获取信息而进一步危害用户系统。
    (CVE-2019-0663)

远程 Windows 主机缺少安全更新 4486564 或累积更新 4486563。因而会受到多个漏洞的影响：- Microsoft Server Message Block 2.0 (SMBv2) 服务器处理某些请求的方式存在远程代码执行漏洞。成功利用此漏洞的攻击者可获得在目标服务器上执行代码的能力。(CVE-2019-0630) - Win32k 组件未能正确处理内存对象时，Windows 中存在权限提升漏洞。成功利用此漏洞的攻击者可在内核模式下运行任意代码。然后，攻击者可安装程序、查看/更改/删除数据或创建具有完全用户权限的新帐户。(CVE-2019-0623) - 主机操作系统上的 Windows Hyper-V 未正确验证来宾操作系统中经验证用户的输入时，存在信息泄露漏洞。(CVE-2019-0635) - Windows GDI 组件未正确揭露其内存内容时，存在信息泄露漏洞。成功利用此漏洞的攻击者可获取信息而进一步危害用户系统。攻击者可以通过多种方式利用该漏洞，比如诱使用户打开特制文档或访问不可信的网页。此安全更新通过更正 Windows GDI 组件处理内存对象的方式来修复漏洞。(CVE-2019-0602, CVE-2019-0615, CVE-2019-0616, CVE-2019-0619, CVE-2019-0660, CVE-2019-0664) - Windows 内核未正确处理内存对象时，存在信息泄露漏洞。成功利用此漏洞的攻击者可获取信息而进一步危害用户系统。经身份验证的攻击者可通过运行特制的应用程序以利用此漏洞。此更新通过更正 Windows 内核处理内存对象的方式修复漏洞。(CVE-2019-0661) - 人机接口设备 (HID) 组件未正确处理内存对象时，存在信息泄露漏洞。成功利用此漏洞的攻击者可获取信息而进一步危害受害者系统。(CVE-2019-0600, CVE-2019-0601) - 当软件无法检查文件的源标记时，.NET Framework 中存在远程代码执行漏洞。成功利用此漏洞的攻击者可在当前用户环境中运行任意代码。如果当前用户使用管理用户权限进行登录，攻击者可控制受影响系统。然后，攻击者可安装程序、查看/更改/删除数据或创建具有完全用户权限的新帐户。(CVE-2019-0613) - Windows 内核未正确处理内存对象时，存在信息泄露漏洞。成功利用此漏洞的攻击者可获取信息而进一步危害用户系统。(CVE-2019-0621) - win32k 组件未正确提供内核信息时，存在信息泄露漏洞。成功利用此漏洞的攻击者可获取信息而进一步危害用户系统。(CVE-2019-0628) - Internet Explorer 未正确处理内存对象时，存在信息泄露漏洞。成功利用此漏洞的攻击者可测试磁盘上是否存在文件。攻击者必须诱使用户打开恶意网站才能成功攻击。此安全更新通过变更 Internet Explorer 处理内存对象的方式，解决此漏洞。(CVE-2019-0676) - 某些 .Net Framework API 和 Visual Studio 的 URL 解析方式存在漏洞。成功利用此漏洞的攻击者可利用该漏洞，绕过用意在于确保用户提供的 URL 属于特定主机名称或该主机名称之子网域的安全逻辑。这可能会导致将未受信任的服务当作受信任的服务，与其进行具有特殊权限的通信。(CVE-2019-0657) - Internet Explorer 未正确访问内存对象时，存在远程代码执行漏洞。此漏洞可使攻击者在当前用户环境中执行任意代码，从而导致内存损坏。成功利用此漏洞的攻击者可获得与当前用户相同的用户权限。(CVE-2019-0606) - Windows 图形设备接口 (GDI) 处理内存对象的方式存在远程代码执行漏洞。成功利用此漏洞的攻击者可控制受影响的系统。然后，攻击者可安装程序、查看/更改/删除数据或创建具有完全用户权限的新帐户。(CVE-2019-0618, CVE-2019-0662) - Windows 未正确披露文件信息时，存在信息漏洞。成功利用此漏洞可使攻击者读取磁盘上的文件内容。(CVE-2019-0636) - Microsoft 浏览器未正确处理特定重定向时，存在伪造漏洞。成功利用此漏洞的攻击者可诱使用户相信自己正在访问合法网站。该特制网站既可伪造内容，也可作为连接攻击和其他 Web 服务中的漏洞的枢纽。(CVE-2019-0654) - 攻击者向 DHCP 服务器发送特制的数据包时，Windows Server DHCP 服务中存在内存损坏漏洞。成功利用此漏洞的攻击者能在 DHCP 服务器上运行任意代码。(CVE-2019-0626) - Windows Jet 数据库引擎未正确处理内存对象时，存在远程代码执行漏洞。成功利用此漏洞的攻击者可在受害者系统上执行任意代码。攻击者可诱使受害者开启特制文件，进而利用此漏洞。此更新通过更正 Windows Jet 数据库引擎处理内存对象的方式来修复漏洞。(CVE-2019-0595, CVE-2019-0596, CVE-2019-0597, CVE-2019-0598, CVE-2019-0599, CVE-2019-0625) - Windows 内核未正确处理内存对象时，存在信息泄露漏洞。未经身份验证的攻击者可运行特制应用程序，以恶意利用此漏洞。成功利用此漏洞的攻击者可获取信息而进一步危害用户系统。(CVE-2019-0663)

The remote Windows host is missing security update 4486996. It is, therefore, affected by multiple vulnerabilities :

  - An information vulnerability exists when Windows     improperly discloses file information. Successful     exploitation of the vulnerability could allow the     attacker to read the contents of files on disk.
    (CVE-2019-0636)

  - An elevation of privilege vulnerability exists when the     Windows kernel fails to properly handle objects in     memory. An attacker who successfully exploited this     vulnerability could run arbitrary code in kernel mode.
    An attacker could then install programs; view, change,     or delete data; or create new accounts with full user     rights.  (CVE-2019-0656)

  - An elevation of privilege vulnerability exists in     Windows when the Win32k component fails to properly     handle objects in memory. An attacker who successfully     exploited this vulnerability could run arbitrary code in     kernel mode. An attacker could then install programs;
    view, change, or delete data; or create new accounts     with full user rights.  (CVE-2019-0623)

  - An information disclosure vulnerability exists when     Windows Hyper-V on a host operating system fails to     properly validate input from an authenticated user on a     guest operating system.  (CVE-2019-0635)

  - An information disclosure vulnerability exists when the     Windows kernel improperly handles objects in memory. An     attacker who successfully exploited this vulnerability     could obtain information to further compromise the users     system.  (CVE-2019-0621)

  - An information disclosure vulnerability exists when the     Human Interface Devices (HID) component improperly     handles objects in memory. An attacker who successfully     exploited this vulnerability could obtain information to     further compromise the victims system.  (CVE-2019-0600,     CVE-2019-0601)

  - A remote code execution vulnerability exists in .NET     Framework and Visual Studio software when the software     fails to check the source markup of a file. An attacker     who successfully exploited the vulnerability could run     arbitrary code in the context of the current user. If     the current user is logged on with administrative user     rights, an attacker could take control of the affected     system. An attacker could then install programs; view,     change, or delete data; or create new accounts with full     user rights.  (CVE-2019-0613)

  - An elevation of privilege vulnerability exists when the     Storage Service improperly handles file operations. An     attacker who successfully exploited this vulnerability     could gain elevated privileges on the victim system.
    (CVE-2019-0659)

  - A security feature bypass vulnerability exists in     Windows which could allow an attacker to bypass Device     Guard. An attacker who successfully exploited this     vulnerability could circumvent a User Mode Code     Integrity (UMCI) policy on the machine.  (CVE-2019-0627,     CVE-2019-0631, CVE-2019-0632)

  - An information disclosure vulnerability exists when the     win32k component improperly provides kernel information.
    An attacker who successfully exploited the vulnerability     could obtain information to further compromise the users     system.  (CVE-2019-0628)

  - A vulnerability exists in certain .Net Framework API's     and Visual Studio in the way they parse URL's. An     attacker who successfully exploited this vulnerability     could use it to bypass security logic intended to ensure     that a user-provided URL belonged to a specific hostname     or a subdomain of that hostname. This could be used to     cause privileged communication to be made to an     untrusted service as if it was a trusted service.
    (CVE-2019-0657)

  - A remote code execution vulnerability exists in the way     that the Windows Graphics Device Interface (GDI) handles     objects in the memory. An attacker who successfully     exploited this vulnerability could take control of the     affected system. An attacker could then install     programs; view, change, or delete data; or create new     accounts with full user rights.  (CVE-2019-0618,     CVE-2019-0662)

  - A security feature bypass vulnerability exists when     Windows Defender Firewall incorrectly applies firewall     profiles to cellular network connections. This     vulnerability occurs when Windows is connected to both     an ethernet network and a cellular network. An attacker     would have no way to trigger this vulnerability     remotely, and this vulnerability by itself does not     allow Windows to be exploited. This update addresses the     behavior by correcting how Windows Defender Firewall     handles firewall profiles when ethernet and cellular     network connections are both present. (CVE-2019-0637)

  - A remote code execution vulnerability exists in the way     that the Microsoft Server Message Block 2.0 (SMBv2)     server handles certain requests. An attacker who     successfully exploited the vulnerability could gain the     ability to execute code on the target server.
    (CVE-2019-0630, CVE-2019-0633)

  - An information disclosure vulnerability exists when the     Windows GDI component improperly discloses the contents     of its memory. An attacker who successfully exploited     the vulnerability could obtain information to further     compromise the users system. There are multiple ways an     attacker could exploit the vulnerability, such as by     convincing a user to open a specially crafted document,     or by convincing a user to visit an untrusted webpage.
    The security update addresses the vulnerability by     correcting how the Windows GDI component handles objects     in memory. (CVE-2019-0602, CVE-2019-0615, CVE-2019-0616,     CVE-2019-0619, CVE-2019-0660)

  - A memory corruption vulnerability exists in the Windows     Server DHCP service when an attacker sends specially     crafted packets to a DHCP server. An attacker who     successfully exploited the vulnerability could run     arbitrary code on the DHCP server.  (CVE-2019-0626)

  - A remote code execution vulnerability exists when the     Windows Jet Database Engine improperly handles objects     in memory. An attacker who successfully exploited this     vulnerability could execute arbitrary code on a victim     system. An attacker could exploit this vulnerability by     enticing a victim to open a specially crafted file. The     update addresses the vulnerability by correcting the way     the Windows Jet Database Engine handles objects in     memory. (CVE-2019-0595, CVE-2019-0596, CVE-2019-0597,     CVE-2019-0598, CVE-2019-0599, CVE-2019-0625)

  - An information disclosure vulnerability exists when the     Windows kernel improperly initializes objects in memory.
    To exploit this vulnerability, an authenticated attacker     could run a specially crafted application. An attacker who     successfully exploited this vulnerability could obtain     information to further compromise the user's system.
    (CVE-2019-0663)

The remote Windows host is missing security update 4487026. It is, therefore, affected by multiple vulnerabilities :

  - An information vulnerability exists when Windows     improperly discloses file information. Successful     exploitation of the vulnerability could allow the     attacker to read the contents of files on disk.
    (CVE-2019-0636)

  - A remote code execution vulnerability exists when     Microsoft Edge improperly accesses objects in memory.
    The vulnerability could corrupt memory in such a way     that enables an attacker to execute arbitrary code in     the context of the current user. An attacker who     successfully exploited the vulnerability could gain the     same user rights as the current user.  (CVE-2019-0645)

  - An elevation of privilege vulnerability exists when the     Storage Service improperly handles file operations. An     attacker who successfully exploited this vulnerability     could gain elevated privileges on the victim system.
    (CVE-2019-0659)

  - A remote code execution vulnerability exists in the way     that the scripting engine handles objects in memory in     Microsoft Edge. The vulnerability could corrupt memory     in such a way that an attacker could execute arbitrary     code in the context of the current user. An attacker who     successfully exploited the vulnerability could gain the     same user rights as the current user.  (CVE-2019-0590,     CVE-2019-0591, CVE-2019-0593, CVE-2019-0605,     CVE-2019-0642, CVE-2019-0644, CVE-2019-0651,     CVE-2019-0652, CVE-2019-0655)

  - An elevation of privilege vulnerability exists in     Windows when the Win32k component fails to properly     handle objects in memory. An attacker who successfully     exploited this vulnerability could run arbitrary code in     kernel mode. An attacker could then install programs;
    view, change, or delete data; or create new accounts     with full user rights.  (CVE-2019-0623)

  - An information disclosure vulnerability exists when     Windows Hyper-V on a host operating system fails to     properly validate input from an authenticated user on a     guest operating system.  (CVE-2019-0635)

  - An information disclosure vulnerability exists when the     Windows kernel improperly handles objects in memory. An     attacker who successfully exploited this vulnerability     could obtain information to further compromise the users     system.  (CVE-2019-0621)

  - An information disclosure vulnerability exists when the     Human Interface Devices (HID) component improperly     handles objects in memory. An attacker who successfully     exploited this vulnerability could obtain information to     further compromise the victims system.  (CVE-2019-0600,     CVE-2019-0601)

  - A remote code execution vulnerability exists in .NET     Framework and Visual Studio software when the software     fails to check the source markup of a file. An attacker     who successfully exploited the vulnerability could run     arbitrary code in the context of the current user. If     the current user is logged on with administrative user     rights, an attacker could take control of the affected     system. An attacker could then install programs; view,     change, or delete data; or create new accounts with full     user rights.  (CVE-2019-0613)

  - An information disclosure vulnerability exists when the     Windows GDI component improperly discloses the contents     of its memory. An attacker who successfully exploited     the vulnerability could obtain information to further     compromise the users system. There are multiple ways an     attacker could exploit the vulnerability, such as by     convincing a user to open a specially crafted document,     or by convincing a user to visit an untrusted webpage.
    The security update addresses the vulnerability by     correcting how the Windows GDI component handles objects     in memory. (CVE-2019-0602, CVE-2019-0615, CVE-2019-0616,     CVE-2019-0619, CVE-2019-0660)

  - A security feature bypass vulnerability exists in     Windows which could allow an attacker to bypass Device     Guard. An attacker who successfully exploited this     vulnerability could circumvent a User Mode Code     Integrity (UMCI) policy on the machine.  (CVE-2019-0627,     CVE-2019-0631, CVE-2019-0632)

  - An information disclosure vulnerability exists when the     win32k component improperly provides kernel information.
    An attacker who successfully exploited the vulnerability     could obtain information to further compromise the users     system.  (CVE-2019-0628)

  - An information disclosure vulnerability exists when     Internet Explorer improperly handles objects in memory.
    An attacker who successfully exploited this     vulnerability could test for the presence of files on     disk. For an attack to be successful, an attacker must     persuade a user to open a malicious website. The     security update addresses the vulnerability by changing     the way Internet Explorer handles objects in memory.
    (CVE-2019-0676)

  - A vulnerability exists in certain .Net Framework API's     and Visual Studio in the way they parse URL's. An     attacker who successfully exploited this vulnerability     could use it to bypass security logic intended to ensure     that a user-provided URL belonged to a specific hostname     or a subdomain of that hostname. This could be used to     cause privileged communication to be made to an     untrusted service as if it was a trusted service.
    (CVE-2019-0657)

  - A remote code execution vulnerability exists when     Internet Explorer improperly accesses objects in memory.
    The vulnerability could corrupt memory in such a way     that an attacker could execute arbitrary code in the     context of the current user. An attacker who     successfully exploited the vulnerability could gain the     same user rights as the current user.  (CVE-2019-0606)

  - A remote code execution vulnerability exists in the way     that the Windows Graphics Device Interface (GDI) handles     objects in the memory. An attacker who successfully     exploited this vulnerability could take control of the     affected system. An attacker could then install     programs; view, change, or delete data; or create new     accounts with full user rights.  (CVE-2019-0618,     CVE-2019-0662)

  - An elevation of privilege vulnerability exists when the     Windows kernel fails to properly handle objects in     memory. An attacker who successfully exploited this     vulnerability could run arbitrary code in kernel mode.
    An attacker could then install programs; view, change,     or delete data; or create new accounts with full user     rights.  (CVE-2019-0656)

  - A spoofing vulnerability exists when Microsoft browsers     improperly handles specific redirects. An attacker who     successfully exploited this vulnerability could trick a     user into believing that the user was on a legitimate     website. The specially crafted website could either     spoof content or serve as a pivot to chain an attack     with other vulnerabilities in web services.
    (CVE-2019-0654)

  - A remote code execution vulnerability exists in the way     that the Microsoft Server Message Block 2.0 (SMBv2)     server handles certain requests. An attacker who     successfully exploited the vulnerability could gain the     ability to execute code on the target server.
    (CVE-2019-0630, CVE-2019-0633)

  - A memory corruption vulnerability exists in the Windows     Server DHCP service when an attacker sends specially     crafted packets to a DHCP server. An attacker who     successfully exploited the vulnerability could run     arbitrary code on the DHCP server.  (CVE-2019-0626)

  - A remote code execution vulnerability exists when the     Windows Jet Database Engine improperly handles objects     in memory. An attacker who successfully exploited this     vulnerability could execute arbitrary code on a victim     system. An attacker could exploit this vulnerability by     enticing a victim to open a specially crafted file. The     update addresses the vulnerability by correcting the way     the Windows Jet Database Engine handles objects in     memory. (CVE-2019-0595, CVE-2019-0596, CVE-2019-0597,     CVE-2019-0598, CVE-2019-0599, CVE-2019-0625)

  - An information disclosure vulnerability exists when the     Windows kernel improperly initializes objects in memory.
    To exploit this vulnerability, an authenticated attacker     could run a specially crafted application. An attacker who     successfully exploited this vulnerability could obtain     information to further compromise the user's system.
    (CVE-2019-0663)

An update of the dotnet package has been released.

The remote Windows host is missing security update 4486564 or cumulative update 4486563. It is, therefore, affected by multiple vulnerabilities :

  - A remote code execution vulnerability exists in the way     that the Microsoft Server Message Block 2.0 (SMBv2)     server handles certain requests. An attacker who     successfully exploited the vulnerability could gain the     ability to execute code on the target server.
    (CVE-2019-0630)

  - An elevation of privilege vulnerability exists in     Windows when the Win32k component fails to properly     handle objects in memory. An attacker who successfully     exploited this vulnerability could run arbitrary code in     kernel mode. An attacker could then install programs;
    view, change, or delete data; or create new accounts     with full user rights.  (CVE-2019-0623)

  - An information disclosure vulnerability exists when     Windows Hyper-V on a host operating system fails to     properly validate input from an authenticated user on a     guest operating system.  (CVE-2019-0635)

  - An information disclosure vulnerability exists when the     Windows GDI component improperly discloses the contents     of its memory. An attacker who successfully exploited     the vulnerability could obtain information to further     compromise the users system. There are multiple ways an     attacker could exploit the vulnerability, such as by     convincing a user to open a specially crafted document,     or by convincing a user to visit an untrusted webpage.
    The security update addresses the vulnerability by     correcting how the Windows GDI component handles objects     in memory. (CVE-2019-0602, CVE-2019-0615, CVE-2019-0616,     CVE-2019-0619, CVE-2019-0660, CVE-2019-0664)

  - An information disclosure vulnerability exists when the     Windows kernel improperly handles objects in memory. An     attacker who successfully exploited this vulnerability     could obtain information to further compromise the users     system. An authenticated attacker could exploit this     vulnerability by running a specially crafted     application. The update addresses the vulnerability by     correcting how the Windows kernel handles objects in     memory. (CVE-2019-0661)

  - An information disclosure vulnerability exists when the     Human Interface Devices (HID) component improperly     handles objects in memory. An attacker who successfully     exploited this vulnerability could obtain information to     further compromise the victims system.  (CVE-2019-0600,     CVE-2019-0601)

  - A remote code execution vulnerability exists in .NET     Framework and Visual Studio software when the software     fails to check the source markup of a file. An attacker     who successfully exploited the vulnerability could run     arbitrary code in the context of the current user. If     the current user is logged on with administrative user     rights, an attacker could take control of the affected     system. An attacker could then install programs; view,     change, or delete data; or create new accounts with full     user rights.  (CVE-2019-0613)

  - An information disclosure vulnerability exists when the     Windows kernel improperly handles objects in memory. An     attacker who successfully exploited this vulnerability     could obtain information to further compromise the users     system.  (CVE-2019-0621)

  - An information disclosure vulnerability exists when the     win32k component improperly provides kernel information.
    An attacker who successfully exploited the vulnerability     could obtain information to further compromise the users     system.  (CVE-2019-0628)

  - An information disclosure vulnerability exists when     Internet Explorer improperly handles objects in memory.
    An attacker who successfully exploited this     vulnerability could test for the presence of files on     disk. For an attack to be successful, an attacker must     persuade a user to open a malicious website. The     security update addresses the vulnerability by changing     the way Internet Explorer handles objects in memory.
    (CVE-2019-0676)

  - A vulnerability exists in certain .Net Framework API's     and Visual Studio in the way they parse URL's. An     attacker who successfully exploited this vulnerability     could use it to bypass security logic intended to ensure     that a user-provided URL belonged to a specific hostname     or a subdomain of that hostname. This could be used to     cause privileged communication to be made to an     untrusted service as if it was a trusted service.
    (CVE-2019-0657)

  - A remote code execution vulnerability exists when     Internet Explorer improperly accesses objects in memory.
    The vulnerability could corrupt memory in such a way     that an attacker could execute arbitrary code in the     context of the current user. An attacker who     successfully exploited the vulnerability could gain the     same user rights as the current user.  (CVE-2019-0606)

  - A remote code execution vulnerability exists in the way     that the Windows Graphics Device Interface (GDI) handles     objects in the memory. An attacker who successfully     exploited this vulnerability could take control of the     affected system. An attacker could then install     programs; view, change, or delete data; or create new     accounts with full user rights.  (CVE-2019-0618,     CVE-2019-0662)

  - An information vulnerability exists when Windows     improperly discloses file information. Successful     exploitation of the vulnerability could allow the     attacker to read the contents of files on disk.
    (CVE-2019-0636)

  - A spoofing vulnerability exists when Microsoft browsers     improperly handles specific redirects. An attacker who     successfully exploited this vulnerability could trick a     user into believing that the user was on a legitimate     website. The specially crafted website could either     spoof content or serve as a pivot to chain an attack     with other vulnerabilities in web services.
    (CVE-2019-0654)

  - A memory corruption vulnerability exists in the Windows     Server DHCP service when an attacker sends specially     crafted packets to a DHCP server. An attacker who     successfully exploited the vulnerability could run     arbitrary code on the DHCP server.  (CVE-2019-0626)

  - A remote code execution vulnerability exists when the     Windows Jet Database Engine improperly handles objects     in memory. An attacker who successfully exploited this     vulnerability could execute arbitrary code on a victim     system. An attacker could exploit this vulnerability by     enticing a victim to open a specially crafted file. The     update addresses the vulnerability by correcting the way     the Windows Jet Database Engine handles objects in     memory. (CVE-2019-0595, CVE-2019-0596, CVE-2019-0597,     CVE-2019-0598, CVE-2019-0599, CVE-2019-0625)

  - An information disclosure vulnerability exists when the     Windows kernel improperly initializes objects in memory.
    To exploit this vulnerability, an authenticated attacker     could run a specially crafted application. An attacker who     successfully exploited this vulnerability could obtain     information to further compromise the user's system.
    (CVE-2019-0663)

ID	名前	製品	ファミリー	公開日	更新日	深刻度
122119	KB4486996：Windows 10 版本 1709 和 Windows Server 版本 1709 的 2019 年 2 月安全更新	Nessus	Windows : Microsoft Bulletins	2019/2/12	2024/6/17	critical
122126	KB4487026：Windows 10 版本 1607 和 Windows Server 2016 的 2019 年 2 月安全更新	Nessus	Windows : Microsoft Bulletins	2019/2/12	2022/5/25	critical
122118	KB4486564：Windows 7 和 Windows Server 2008 R2 的 2019 年 2 月安全更新	Nessus	Windows : Microsoft Bulletins	2019/2/12	2024/6/17	critical
122119	KB4486996: Windows 10 Version 1709 and Windows Server Version 1709 February 2019 Security Update	Nessus	Windows : Microsoft Bulletins	2019/2/12	2024/6/17	critical
122126	KB4487026: Windows 10 Version 1607 and Windows Server 2016 February 2019 Security Update	Nessus	Windows : Microsoft Bulletins	2019/2/12	2022/5/25	critical
237067	Photon OS 4.0: Dotnet PHSA-2025-4.0-0804	Nessus	PhotonOS Local Security Checks	2025/5/22	2025/6/13	high
122118	KB4486564: Windows 7 and Windows Server 2008 R2 February 2019 Security Update	Nessus	Windows : Microsoft Bulletins	2019/2/12	2024/6/17	critical

検出

プラグインの検索

critical

critical

critical

critical

critical

high

critical