CVE-2024-26252

CVE-2024-26252 refers to a Windows kernel vulnerability in the rndismp6.sys driver that enables remote code execution. The issue is described as affecting the Windows component rndismp6.sys with a CVSSv3.1 base score of 6.8 (Medium), and usability concerns indicate a physical attack vector, low a...

Windows rndismp6.sys Remote Code Execution Vulnerability

...

Windows rndismp6.sys Remote Code Execution Vulnerability

...

PT-2024-2998 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the rndismp6.sys driver of Windows operating systems. This can be exploited by remote attackers to execute arbitrary code, affecting...

KB5036960: Windows Server 2012 R2 Security Update (April 2024)

The remote Windows host is missing security update 5036960. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC SQL Server ODBC Driver Remote Code Execution Vulnerability CVE-2024-26214 - Secure Boot Security Feature Bypass Vulnerability CVE-2024-20669, CVE-2024-20688,...

KB5036899: Windows 10 Version 1607 / Windows Server 2016 Security Update (April 2024)

The remote Windows host is missing security update 5036899. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC SQL Server ODBC Driver Remote Code Execution Vulnerability CVE-2024-26214 - Secure Boot Security Feature Bypass Vulnerability CVE-2024-20669, CVE-2024-26168,...

KB5036909: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (April 2024)

The remote Windows host is missing security update 5036909. It is, therefore, affected by multiple vulnerabilities - SmartScreen Prompt Security Feature Bypass Vulnerability CVE-2024-29988 - Secure Boot Security Feature Bypass Vulnerability CVE-2024-20669, CVE-2024-26168, CVE-2024-26171,...

KB5036969: Windows Server 2012 Security Update (April 2024)

The remote Windows host is missing security update 5036969. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC SQL Server ODBC Driver Remote Code Execution Vulnerability CVE-2024-26214 - Secure Boot Security Feature Bypass Vulnerability CVE-2024-20669, CVE-2024-20688,...

KB5036894: Windows 11 version 21H2 Security Update (April 2024)

The remote Windows host is missing security update 5036894. It is, therefore, affected by multiple vulnerabilities - SmartScreen Prompt Security Feature Bypass Vulnerability CVE-2024-29988 - Secure Boot Security Feature Bypass Vulnerability CVE-2024-20669, CVE-2024-26168, CVE-2024-26171,...

CVE-2024-26253: Improper Input Validation

Windows rndismp6.sys Remote Code Execution Vulnerability...

PT-2024-3024

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to a driver vulnerability in Windows, specifically with the rndismp6.sys driver, which involves dereferencing an untrusted pointer. This can allow an attacker to execute...

KB5036893: Windows 11 version 22H2 / Windows 11 version 23H2 Security Update (April 2024)

The remote Windows host is missing security update 5036893. It is, therefore, affected by multiple vulnerabilities - SmartScreen Prompt Security Feature Bypass Vulnerability CVE-2024-29988 - Secure Boot Security Feature Bypass Vulnerability CVE-2024-20669, CVE-2024-26168, CVE-2024-26171,...

KB5036910: Windows Server version 23H2 Security Update (April 2024)

The remote Windows host is missing security update 5036910. It is, therefore, affected by multiple vulnerabilities - SmartScreen Prompt Security Feature Bypass Vulnerability CVE-2024-29988 - Secure Boot Security Feature Bypass Vulnerability CVE-2024-20669, CVE-2024-26168, CVE-2024-26171,...

CVE-2024-26252: Untrusted Pointer Dereference

Windows rndismp6.sys Remote Code Execution Vulnerability...

KB5036922: Windows Server 2008 R2 Security Update (April 2024)

The remote Windows host is missing security update 5036922. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC SQL Server ODBC Driver Remote Code Execution Vulnerability CVE-2024-26214 - Windows rndismp6.sys Remote Code Execution Vulnerability CVE-2024-26252, CVE-2024-26253 -...

KB5036896: Windows 10 version 1809 / Windows Server 2019 Security Update (April 2024)

The remote Windows host is missing security update 5036896. It is, therefore, affected by multiple vulnerabilities - SmartScreen Prompt Security Feature Bypass Vulnerability CVE-2024-29988 - Secure Boot Security Feature Bypass Vulnerability CVE-2024-20669, CVE-2024-26168, CVE-2024-26171,...

KB5036925: Windows 10 LTS 1507 Security Update (April 2024)

The remote Windows host is missing security update 5036925. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC SQL Server ODBC Driver Remote Code Execution Vulnerability CVE-2024-26214 - Secure Boot Security Feature Bypass Vulnerability CVE-2024-20669, CVE-2024-26168,...

CVE-2024-31817

In TOTOLINK EX200 V4.0.3c.7646B20201211, an attacker can obtain sensitive information without authorization through the function getSysStatusCfg...

PT-2024-28107

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.9.0-rc7 Description A system crash occurs when the /sys/bus/ap/apqmask file is updated with a relative mask value, such as +0x10-0x12,+60,-90, where one of the numeric values exceeds INT MAX. The issue arises...

emulsion (>=6.0.0, <=10.0.0), libavif-sys (>=0.8.0, <=0.15.0) +1 more potentially affected by unknown CVE via libdav1d-sys (>=0.2.0, <=0.6.0)

libdav1d-sys CARGO version =0.2.0, =6.0.0, =0.8.0, =0.9.4, =0.10.1 Source cves: unknown CVE Source advisory: OSV:GHSA-MC39-H54G-PVW6...