CVE-2024-38163

Windows Update Stack Elevation of Privilege Vulnerability...

CVE-2024-38163

Windows Update Stack Elevation of Privilege Vulnerability...

Patch Tuesday - August 2024

Microsoft is addressing 88 vulnerabilities this August 2024 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation and/or public disclosure for ten of the vulnerabilities published today, which is significantly more than usual. At time of writing, all six of the known-exploited...

CVE-2024-38163 Windows Update Stack Elevation of Privilege Vulnerability

...

CVE-2024-38163

CVE-2024-38163 is a Windows Update Stack Elevation of Privilege vulnerability with a CVSS v3.1 base score of 7.8 (LOCAL, Low attack complexity, Low privileges required, No user interaction). It affects the Windows Update servicing stack and can lead to SYSTEM-level compromise under local access. ...

CVE-2024-38163 Windows Update Stack Elevation of Privilege Vulnerability

...

2024-08 Cumulative Update for Windows 11 for x64-based Systems (KB5041592)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

August 13, 2024—KB5041160 (OS Build 20348.2655)

None None...

August 13, 2024—KB5041782 (OS Build 10240.20751) - EXPIRED

None None...

June 11, 2024—KB5039225 (OS Build 10240.20680) - EXPIRED

None None...

KB5042321: Windows Recovery Environment update for Windows 11, version 21H2: January 9, 2024

None None...

July 9, 2024—KB5040448 (OS Build 10240.20710) - EXPIRED

None None...

June 11, 2024—KB5039214 (OS Build 14393.7070) - EXPIRED

None None...

August 13, 2024—KB5041578 (OS Build 17763.6189) - EXPIRED

None None...

June 11, 2024—Hotpatch KB5039330 (OS Build 20348.2522)

None None...

KLA71483 SUI vulnerability in Microsoft Apps

A spoofing vulnerability vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2024-38177 CVE list CVE-2024-38177 critical Solution Install necessary updates from the KB section, that are listed in your Windows...

Microsoft Windows Update Stack 访问控制错误漏洞

Microsoft Windows Update Stack is part of Microsoft Corporation USA for managing updates. An access control error vulnerability exists in Microsoft Windows Update Stack. An attacker could exploit this vulnerability to elevate privileges. The following products and versions are affected:Windows...

PT-2024-5740 · Microsoft · Windows 10 +1

Name of the Vulnerable Software and Affected Versions: Windows 10 affected versions not specified Description: The issue is related to a lack of access control in the Windows Update Stack component, which can be exploited to elevate privileges. An attacker must first obtain the ability to execute...

KLA71480 SUI vulnerability in Microsoft Dynamics

A cross-site-scripting XSS vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2024-38211 Related products Microsoft-Dynamics-365 CVE list CVE-2024-38211 critical KB list 5041557 Solution Install necessary...

KLA71478 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A denial of service vulnerability in .NET and Visua...