cve-2024-49039-task_scheduler_eop_reproduction

CVE-2024-49039: Windows 작업 스케줄러 권한 상승 취약점 개요 CVE-2024-49039는 인증된 공격자가 AppContainer 샌드박스를 탈출하여 Low 무결성AppContainer에서 Medium 무결성으로 권한을 상승시킬 수 있게 하는 Windows 작업 스케줄러 권한 상승EoP 취약점입니다. 이 취약점은 CVSS 점수 8.8을 부여받았으며, RomCom 위협 그룹에 의해 실제 환경에서 활발히 악용되었습니다. CVE ID : CVE-2024-49039 CVSS 점수 : 8.8 높음 CWE : CWE-2...

firewall-cve

firewall-cve Vulnerabilità di bypass delle funzionalità di sicurezza delle regole firewall di Windows AppContainer CVE-2021-41338 Vulnerabilità di sicurezza pubblicata: 12 ottobre 2021 CNA assegnante: Microsoft MITRE CVE-2021-41338 CVSS:3.1 5.5 / 5.0 Vettore di attacco Locale Complessità...

Windows-AppResolver-LPE-PoC

Windows AppResolver LPE PoC Proof of concept for an AppResolv...

EUVD-2021-18834

Malware in sbrugna...

EUVD-2019-1325

Malware in sbrugna...

EUVD-2021-21114

Malware in sbrugna...

EUVD-2019-1673

Malware in sbrugna...

EUVD-2018-1626

Malware in sbrugna...

EUVD-2017-17453

Malware in sbrugna...

EUVD-2017-0597

Malware in sbrugna...

EUVD-2021-27653

Malicious code in bioql PyPI...

EUVD-2021-28367

Malicious code in bioql PyPI...

EUVD-2022-35372

Malicious code in bioql PyPI...

CVE-2019-0938

An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka 'Microsoft Edge Elevation of Privilege Vulnerability'...

VulnCheck KEV: CVE-2024-49039

Microsoft Windows Task Scheduler contains a privilege escalation vulnerability that can allow an attacker-provided, local application to escalate privileges outside of its AppContainer, and access privileged RPC functions...

Microsoft Windows Task Scheduler Privilege Escalation Vulnerability

Microsoft Windows Task Scheduler contains a privilege escalation vulnerability that can allow an attacker-provided, local application to escalate privileges outside of its AppContainer, and access privileged RPC functions...

September 10, 2024—KB5043050 (OS Build 17763.6293) - EXPIRED

None None...

September 10, 2024—KB5042881 (OS Build 20348.2700)

None None...

Vulnerability fixed in Microsoft System Center Defender for IoT

Microsoft has fixed a vulnerability in Defender for IoT. A malicious party can exploit the vulnerability to break out of the AppContainer for IoT devices and potentially execute arbitrary code on the system where the AppContainer is implemented. Microsoft Defender for IoT:...

PT-2023-2465 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows CNG Key Isolation Service. This vulnerability is caused by synchronization errors when using a share...