Lucene search

K
githubexploit4E231E12-9AA0-5E24-BF65-4601364E1324
HistoryJun 24, 2024 - 10:37 a.m.

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Microsoft

2024-06-2410:37:26
112
toctou race condition
microsoft
authz
cve-2024-30088
bug
kernel
security attribute
rtlcopyunicodestring
ntqueryinformationtoken
patch

7 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

7.4 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

13.4%

CVE-2024-30088

Bug:

  • Bug is inside function *AuthzBa…

This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.

7 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

7.4 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

13.4%