KLA77106 Multiple vulnerabilities in Microsoft Products (ESU)

🗓️ 12 Nov 2024 00:00:00Reported by Kaspersky LabType

Multiple Microsoft Products vulnerabilities. Allows arbitrary code execution, privilege escalation, UI spoofing, sensitive info disclosure

Reporter	Title	Published	Views	Family All 304
GithubExploit	Exploit for CVE-2024-49019	5 Mar 202509:35	–	githubexploit
ATTACKERKB	CVE-2024-43451	12 Nov 202400:00	–	attackerkb
Information Security Automation	November Microsoft Patch Tuesday	12 Nov 202422:48	–	avleonov
Information Security Automation	New episode “In The Trend of VM” (#10): 8 trending vulnerabilities of November, zero budget VM and who should look for patches	2 Jan 202519:34	–	avleonov
BDU FSTEC	The vulnerability of the Kerberos Key Distribution Center (KDC) Proxy Protocol implementation in Windows operating systems allows a perpetrator to execute arbitrary code.	14 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the NTLMv2 authentication protocol implemented in Windows operating systems allows a hacker to carry out a Pass-the-hash attack.	6 Feb 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Win32k.sys component in Windows operating systems, which allows a hacker to increase their privileges	14 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Windows operating system’s Telephony Service allows a perpetrator to execute arbitrary code.	15 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Windows operating system’s Telephony Service allows a perpetrator to execute arbitrary code.	15 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Windows operating system’s Telephony Service allows a perpetrator to execute arbitrary code.	15 Nov 202400:00	–	bdu_fstec

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43635
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43636
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43626
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49046
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43643
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43449
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43641
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43621
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43638
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43451

22 Jan 2025 00:00Current

9.6High risk

Vulners AI Score9.6

CVSS 3.16.8 - 9.8

EPSS0.81817

SSVC