OilRig Exploits Windows Kernel Flaw in Espionage Campaign Targeting UAE and Gulf

The Iranian threat actor known as OilRig has been observed exploiting a now-patched privilege escalation flaw impacting the Windows Kernel as part of a cyber espionage campaign targeting the U.A.E. and the broader Gulf region. "The group utilizes sophisticated tactics that include deploying a...

VulnCheck KEV: CVE-2024-30088

Microsoft Windows Kernel contains a time-of-check to time-of-use TOCTOU race condition vulnerability that could allow for privilege escalation...

The vulnerability of the Windows operating system’s kernel allows attackers to enhance their privileges.

The vulnerability of the Windows operating system’s kernel is related to the use of uninitialized resources. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of Windows operating system kernels, related to the swapping of a non-trusted pointer, allows attackers to escalate their privileges.

The vulnerability of the Windows operating system’s kernel is related to the swapping of an unreliable pointer. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the secure kernel mode of Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the Windows operating system’s safe mode relates to the swapping of a non-trusted pointer. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Windows operating system’s kernel allows attackers to enhance their privileges.

The vulnerability of the Windows operating system’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...

Microsoft Windows Multiple Vulnerabilities (KB5044280)

This host is missing an important security update according to Microsoft KB5044280 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

CVE-2024-43570

Windows Kernel Elevation of Privilege Vulnerability...

CVE-2024-43554

Windows Kernel-Mode Driver Information Disclosure Vulnerability...

CVE-2024-43528

Windows Secure Kernel Mode Elevation of Privilege Vulnerability...

CVE-2024-43520

Windows Kernel Denial of Service Vulnerability...

CVE-2024-43511

Windows Kernel Elevation of Privilege Vulnerability...

CVE-2024-43502

Windows Kernel Elevation of Privilege Vulnerability...

CVE-2024-37979

Windows Kernel Elevation of Privilege Vulnerability...

CVE-2024-43570 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2024-43570

CVE-2024-43570 is a Windows Kernel Elevation of Privilege vulnerability. Connected sources confirm affected software as Windows kernel components and indicate fixes released in October 2024 through MSRC advisories and OS updates (KB5044280/KB5044281/KB5044285) covering multiple Windows builds, wi...

CVE-2024-43570 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2024-43520 Windows Kernel Denial of Service Vulnerability

...

CVE-2024-43511 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2024-37979 Windows Kernel Elevation of Privilege Vulnerability

...