9721 matches found
CVE-2024-49078
Technical details about CVE-2024-49078 are not publicly available in the provided documents. Monitor for updates from Microsoft and CVE feeds for affected components, root cause, and remediation.
CVE-2024-49076 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
...
CVE-2024-43600 Microsoft Office Elevation of Privilege Vulnerability
...
CVE-2024-49129 Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
...
CVE-2024-49120 Windows Remote Desktop Services Remote Code Execution Vulnerability
...
CVE-2024-49115 Windows Remote Desktop Services Remote Code Execution Vulnerability
...
CVE-2024-49111
CVE-2024-49111 is a Windows Wireless Wide Area Network Service elevation-of-privilege vulnerability. The CVSS 3.1 base metrics show a MEDIUM severity (6.6), with the attack vector as physical and low privileges required , no user interaction, and impacts to confidentiality, integrity, and availab...
CVE-2024-49098
CVE-2024-49098 affects Windows WWAN Service (WwanSvc). The vulnerability allows information disclosure in WWAN, with CVSS 3.1: AV Physical, AC Low, PR Low, UI None, S Unchanged, C High, I None, A None. Exploitation requires physical access and low complexity; attacker needs low privileges. Remedi...
CVE-2024-49094 Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
...
CVE-2024-49068
CVE-2024-49068 is a Microsoft SharePoint Elevation of Privilege vulnerability. The entry lists a high-severity impact with CVSSv3.1: base score 8.2 (NETWORK, ATTACK VECTOR), no user interaction, no privileges required, and CONFD/HIGH impact on confidentiality, LOW on integrity, NONE on availabili...
CVE-2024-49101
creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2024-12-10 20:07:35+00:00| seen| https://infosec.exchange/users/cve/statuses/113630331175468128...
CVE-2024-46657
Artifex Software mupdf v1.24.9 was discovered to contain a segmentation fault via the component /tools/pdfextract.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PDF file...
CVE-2024-54152
Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to version 1.4.3, an attacker can write a malicious expression that escapes the sandbox to execute arbitrary code on the system. With a more complex undisclosed payload, one can get full access...
Full-Face Masks to Frustrate Identification
This is going to be interesting. It's a video of someone trying on a variety of printed full-face masks. They won't fool anyone for long, but will survive casual scrutiny. And they're cheap and easy to swap...
CVE-2024-10959
creationtimestamp| type| source ---|---|--- 2024-12-10 11:13:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113628229621507746 2024-12-10 13:17:32+00:00| seen| https://t.me/cvedetector/12496...
CVE-2024-52538
creationtimestamp| type| source ---|---|--- 2024-12-10 10:21:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113628025811609242 2024-12-10 13:17:28+00:00| seen| https://t.me/cvedetector/12495 2024-12-16 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1691/...
CVE-2024-8805
creationtimestamp| type| source ---|---|--- 2024-12-10 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1647/ 2024-12-17 15:59:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113668991825517358 2024-12-17 17:36:47+00:00| seen| https://t.me/cvedetector/13102...
CVE-2024-55637
Deserialization of Untrusted Data vulnerability in Drupal Core allows Object Injection.This issue affects Drupal Core: from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8. Drupal core contains a chain of methods that is exploitable when an insecure deserialization...