CVE-2024-49076 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

...

CVE-2024-43600 Microsoft Office Elevation of Privilege Vulnerability

...

CVE-2024-49129 Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

...

CVE-2024-49120 Windows Remote Desktop Services Remote Code Execution Vulnerability

...

CVE-2024-49115 Windows Remote Desktop Services Remote Code Execution Vulnerability

...

CVE-2024-49111

CVE-2024-49111 is a Windows Wireless Wide Area Network Service elevation-of-privilege vulnerability. The CVSS 3.1 base metrics show a MEDIUM severity (6.6), with the attack vector as physical and low privileges required , no user interaction, and impacts to confidentiality, integrity, and availab...

CVE-2024-49098

CVE-2024-49098 affects Windows WWAN Service (WwanSvc). The vulnerability allows information disclosure in WWAN, with CVSS 3.1: AV Physical, AC Low, PR Low, UI None, S Unchanged, C High, I None, A None. Exploitation requires physical access and low complexity; attacker needs low privileges. Remedi...

CVE-2024-49094 Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability

...

CVE-2024-49068

CVE-2024-49068 is a Microsoft SharePoint Elevation of Privilege vulnerability. The entry lists a high-severity impact with CVSSv3.1: base score 8.2 (NETWORK, ATTACK VECTOR), no user interaction, no privileges required, and CONFD/HIGH impact on confidentiality, LOW on integrity, NONE on availabili...

CVE-2024-49101

creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2024-12-10 20:07:35+00:00| seen| https://infosec.exchange/users/cve/statuses/113630331175468128...

CVE-2024-46657

Artifex Software mupdf v1.24.9 was discovered to contain a segmentation fault via the component /tools/pdfextract.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PDF file...

CVE-2024-54152

Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to version 1.4.3, an attacker can write a malicious expression that escapes the sandbox to execute arbitrary code on the system. With a more complex undisclosed payload, one can get full access...

Full-Face Masks to Frustrate Identification

This is going to be interesting. It's a video of someone trying on a variety of printed full-face masks. They won't fool anyone for long, but will survive casual scrutiny. And they're cheap and easy to swap...

CVE-2024-10959

creationtimestamp| type| source ---|---|--- 2024-12-10 11:13:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113628229621507746 2024-12-10 13:17:32+00:00| seen| https://t.me/cvedetector/12496...

CVE-2024-52538

creationtimestamp| type| source ---|---|--- 2024-12-10 10:21:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113628025811609242 2024-12-10 13:17:28+00:00| seen| https://t.me/cvedetector/12495 2024-12-16 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1691/...

CVE-2024-8805

creationtimestamp| type| source ---|---|--- 2024-12-10 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1647/ 2024-12-17 15:59:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113668991825517358 2024-12-17 17:36:47+00:00| seen| https://t.me/cvedetector/13102...

CVE-2024-55637

Deserialization of Untrusted Data vulnerability in Drupal Core allows Object Injection.This issue affects Drupal Core: from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8. Drupal core contains a chain of methods that is exploitable when an insecure deserialization...

CVE-2024-46442

An issue in the BYD Dilink Headunit System v3.0 to v4.0 allows attackers to bypass authentication via a bruteforce attack...

CVE-2024-50920

Insecure permissions in Silicon Labs SiLabs Z-Wave Series 700 and 800 v7.21.1 allow attackers to create a fake node via supplying crafted packets...

CVE-2024-50626

creationtimestamp| type| source ---|---|--- 2024-12-09 21:28:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113624985735998812 2024-12-09 23:54:39+00:00| seen| https://t.me/cvedetector/12454...