11 matches found
Exploit for Heap-based Buffer Overflow in Microsoft
CVE-2024-30051 — Windows DWM Heap Overflow EoP · Master's Thes...
Exploit for Out-of-bounds Write in Microsoft
Windows DWM Core Library Elevation of Privilege Vulnerability...
Microsoft Patches 61 Flaws, Including Two Actively Exploited Zero-Days
Microsoft has addressed a total of 61 new security flaws in its software as part of its Patch Tuesday updates for May 2024, including two zero-days which have been actively exploited in the wild. Of the 61 flaws, one is rated Critical, 59 are rated Important, and one is rated Moderate in severity...
Microsoft Windows Multiple Vulnerabilities (KB5037763)
This host is missing an important security update according to Microsoft KB5037763 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft Windows Multiple Vulnerabilities (KB5037788)
This host is missing a critical security update according to Microsoft KB5037788 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Patch Tuesday - May 2024
Microsoft is addressing 61 vulnerabilities this May 2024 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation and/or public disclosure for three of the vulnerabilities published today. At time of writing, two of the vulnerabilities patched today are listed on CISA KEV. Microsoft is...
Patch Tuesday, May 2024 Edition
Microsoft today released updates to fix more than 60 security holes in Windows computers and supported software, including two "zero-day" vulnerabilities in Windows that are already being exploited in active attacks. There are also important security patches available for macOS and Adobe users, a...
CVE-2024-30051
creationtimestamp| type| source ---|---|--- 2024-05-14 19:24:41+00:00| seen| https://t.me/ctinow/217206 2024-05-14 19:26:18+00:00| published-proof-of-concept| Telegram/xKobwKEaEJKL-BnrvdEsrnNGc8TDVnVJMQ35O2secrvZtg 2024-05-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123...
CVE-2024-30051
Windows DWM Core Library Elevation of Privilege Vulnerability...
CVE-2024-30051
CVE-2024-30051 is an Elevation of Privilege in the Windows Desktop Window Manager (DWM) core library dwmcore.dll. The root cause is a heap-based buffer overflow in CCommandBuffer::Initialize caused by a size miscalculation (integer division) that can overflow the heap during a heap spray, allowin...
