The vulnerability of the Windows operating system’s streaming data transmission service allows attackers to enhance their privileges.

🗓️ 24 Jun 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

A vulnerability in Windows streaming service allows privilege escalation via a non trusted pointer.

Reporter	Title	Published	Views	Family All 53
Information Security Automation	New episode “In The Trend of VM” (#9): 4 trending vulnerabilities of October, scandal at The Linux Foundation, social “attack on the complainer”, “Ford’s method” for motivating IT specialists to fix vulnerabilities	28 Nov 202412:57	–	avleonov
Information Security Automation	The severity of the Elevation of Privilege – Microsoft Streaming Service (CVE-2024-30090) vulnerability has increased	22 Oct 202411:44	–	avleonov
Information Security Automation	The severity of the Elevation of Privilege – Windows Kernel-Mode Driver (CVE-2024-35250) vulnerability has increased	22 Oct 202420:07	–	avleonov
Circl	CVE-2024-30090	17 Oct 202409:56	–	circl
CNNVD	Microsoft Streaming Service Security Vulnerability	11 Jun 202400:00	–	cnnvd
CVE	CVE-2024-30090	11 Jun 202416:59	–	cve
Cvelist	CVE-2024-30090 Microsoft Streaming Service Elevation of Privilege Vulnerability	11 Jun 202416:59	–	cvelist
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	17 Oct 202408:38	–	githubexploit
Microsoft KB	June 11, 2024—KB5039211 (OS Builds 19044.4529 and 19045.4529) - EXPIRED	13 Aug 202407:00	–	mskb
Microsoft KB	June 11, 2024—KB5039212 (OS Builds 22621.3737 and 22631.3737)	13 Aug 202407:00	–	mskb

Source	Link
msrc	www.msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-30090
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB20240611230
github	www.github.com/Dor00tkit/CVE-2024-30090
web	www.web.nvd.nist.gov/view/vuln/detail

18 Oct 2024 00:00Current

7.7High risk

Vulners AI Score7.7

CVSS 26

CVSS 37

EPSS0.20925

Windows streaming service non trusted pointer privilege escalation data transmission