CVE-2024-38237 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

...

CVE-2024-38237 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

...

CVE-2024-38237

CVE-2024-38237 is a local privilege-escalation in Windows Kernel Streaming WOW Thunk Service Driver. Affected component is a Windows kernel-mode driver used by streaming services; vulnerability exploited locally with low privileges and no user interaction, leading to elevated privileges and poten...

CVE-2024-38241 Kernel Streaming Service Driver Elevation of Privilege Vulnerability

...

CVE-2024-38241

CVE-2024-38241 is a Windows kernel streaming service driver elevation of privilege vulnerability (local, required privileges: low; attack complexity: low; user interaction: none). The NVD entry assigns CVSS v3.1: 7.8 (HIGH) with impacts to confidentiality, integrity, and availability (all HIGH) i...

CVE-2024-38242 Kernel Streaming Service Driver Elevation of Privilege Vulnerability

...

CVE-2024-38242 Kernel Streaming Service Driver Elevation of Privilege Vulnerability

...

CVE-2024-38241 Kernel Streaming Service Driver Elevation of Privilege Vulnerability

...

CVE-2024-38242

CVE-2024-38242: Kernel Streaming Service Driver Elevation of Privilege. A local attacker with low privileges can exploit this to gain SYSTEM-level access without user interaction (per CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H; base 7.8). Microsoft has released updates to fix the issue (e.g., ...

CVE-2024-43799

A flaw was found in the Send library. This vulnerability allows remote code execution via untrusted input passed to the SendStream.redirect function. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria...

CVE-2024-43799

Send is a library for streaming files from the file system as a http response. Send passes untrusted user input to SendStream.redirect which executes untrusted code. This issue is patched in send 0.19.0...

Man Faces 20 Years in Prison for First-Ever AI Music Streaming Scam

A North Carolina man has been arrested in the first criminal case involving AI-generated music streaming fraud. Accused…...

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

...

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

...

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

...

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

...

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

...

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

...

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

...

PT-2024-6258 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a buffer overflow in the "heap" of the Kernel Streaming Service Driver in Windows operating systems. This can allow an attacker to elevate their privileges. An...