CVE-2024-49147

Deserialization of untrusted data in Microsoft Update Catalog allows an unauthorized attacker to elevate privileges on the website’s webserver...

CVE-2024-49147

creationtimestamp| type| source ---|---|--- 2024-12-12 19:13:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113641441491376096 2024-12-12 19:56:06+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113641610646102864 2024-12-12 21:21:56+00:00| seen|...

CVE-2024-49147 Microsoft Update Catalog Elevation of Privilege Vulnerability

...

CVE-2024-49147

CVE-2024-49147 affects Microsoft Update Catalog. The vulnerability is described as deserialization of untrusted data that allows an unauthorized attacker to escalate privileges on the site’s web server. Affected component is the Update Catalog service; the underlying issue is deserialization rath...