KLA67434 Multiple vulnerabilities in Microsoft Products (ESU)

🗓️ 14 May 2024 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 41 Views

Multiple vulnerabilities in Microsoft Products (ESU). Remote code execution, privilege escalation, security bypass, denial of service, and information disclosure with CVE-2024-30020, CVE-2024-30010, and others

Reporter	Title	Published	Views	Family All 298
0day.today	Microsoft Windows TOCTOU Local Privilege Escalation Exploit	18 Sep 202400:00	–	zdt
BDU FSTEC	The vulnerability of the Win32k.sys component in Windows operating systems, which allows an attacker to increase their privileges and gain access to confidential data	17 May 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Win32k.sys component in Windows operating systems, which allows a hacker to increase their privileges	17 May 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Win32k.sys component in Windows operating systems, which allows a hacker to increase their privileges	17 May 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the NTFS file system of the Windows operating system, which allows a perpetrator to increase their privileges	17 May 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Windows RRAS operating system’s routing and remote access service allows a hacker to execute arbitrary code.	20 May 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Windows RRAS operating system’s routing and remote access service, related to numerical truncation errors, allows a hacker to execute arbitrary code.	20 May 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Windows RRAS operating system’s routing and remote access service, related to numerical truncation errors, allows a hacker to execute arbitrary code.	20 May 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Windows Cryptographic Operating Systems allows attackers to gain unauthorized access to protected information.	20 May 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Windows RRAS operating system’s routing and remote access service allows a hacker to execute arbitrary code.	20 May 202400:00	–	bdu_fstec

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30020
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30010
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30027
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30025
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30050
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30015
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30038
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30037
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30014
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30009

26 Mar 2025 00:00Current

9.7High risk

Vulners AI Score9.7

CVSS 3.18.8

EPSS0.11471

SSVC