Microsoft Windows Multiple Vulnerabilities (KB5039214)

This host is missing an important security update according to Microsoft KB5039214 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft and Adobe Patch Tuesday, June 2024 Security Update Review

Microsofts June Patch Tuesday is here, bringing fixes for vulnerabilities impacting its multiple products. This months release highlights the ongoing battle against cybersecurity threats, from critical updates to important fixes. Lets dive into the crucial insights from Microsofts Patch Tuesday...

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to carry out attacks that can lead to the following categories of damage: - Denial-of-Service DoS - Circumvention of security measure - Remote code execution Administrator/Root rights - Remote code...

CVE-2024-35250

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability...

CVE-2024-30099

Windows Kernel Elevation of Privilege Vulnerability...

CVE-2024-30099

Windows Kernel Elevation of Privilege Vulnerability...

CVE-2024-30091

Win32k Elevation of Privilege Vulnerability...

CVE-2024-30088

Windows Kernel Elevation of Privilege Vulnerability...

CVE-2024-30084

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability...

CVE-2024-30068

Windows Kernel Elevation of Privilege Vulnerability...

CVE-2024-30068

Windows Kernel Elevation of Privilege Vulnerability...

CVE-2024-30068

Windows Kernel Elevation of Privilege Vulnerability...

CVE-2024-30064

Windows Kernel Elevation of Privilege Vulnerability...

CVE-2024-30064

Windows Kernel Elevation of Privilege Vulnerability...

CVE-2024-30099 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2024-30088 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2024-30088 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2024-30088

CVE-2024-30088 is a Windows Kernel TOCTOU race condition that can lead to local privilege escalation via AuthzBasepCopyoutInternalSecurityAttributes. Publicly discussed exploits and PoCs exist (Windows kernel LPE PoCs and Metasploit module), and CISA lists it as a known-exploited vulnerability; a...

CVE-2024-30068 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2024-30064

CVE-2024-30064 is a Windows kernel–level elevation of privilege vulnerability with a CVSS v3.1 base score of 8.8 (privileges required: LOW, attack vector: LOCAL, user interaction: NONE, scope: CHANGED, confidentiality/integrity/availability: HIGH). The Initial description confirms a Windows Kerne...