CVE-2024-49074: Use After Free

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability...

Microsoft Windows Kernel Vulnerability

Microsoft Windows Kernel is the kernel of the Windows operating system from Microsoft Corporation USA. A competitive condition issue vulnerability exists in Microsoft Windows Kernel. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are...

CVE-2024-49084: Concurrent Execution using Shared Resource with Improper Synchronization

Windows Kernel Elevation of Privilege Vulnerability...

Windows Win32 kernel Privilege Escalation

The vulnerability of the Win32 kernel subsystem in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...

Windows NT OS Kernel Privilege Escalation

The vulnerability of the Windows NT OS Kernel component of the Microsoft operating system is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to increase their privileges...

Windows Kernel Privilege Escalation

The vulnerability of the Windows Kernel component of the Microsoft operating system is related to buffer overflows in the stack. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Windows Kernel-Mode Driver Privilege Escalation

The vulnerability of the Windows Kernel-Mode Driver graphics driver in the Windows operating system is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to gain increased privileges...

CVE-2024-43631

Windows Secure Kernel Mode Elevation of Privilege Vulnerability...

CVE-2024-43623

Windows NT OS Kernel Elevation of Privilege Vulnerability...

CVE-2024-43630

CVE-2024-43630 is a Windows Kernel Elevation of Privilege vulnerability. Connected sources confirm it affects Windows kernel components and is characterized by local, low-privilege attack with no user interaction, enabling highest/total impact on confidentiality, integrity, and availability. The ...

November 12, 2024—KB5046616 (OS Build 20348.2849)

None None...

PT-2024-8326 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in the Windows Win32 Kernel Subsystem. This can allow an attacker to elevate their privileges. The estimated numb...

CVE-2024-43640: Double Free

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability...

PT-2024-8090

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to a buffer overflow on the stack in the Windows Kernel component of the Microsoft Windows operating system. This can allow an attacker to elevate their...

Microsoft Windows Kernel security vulnerabilities

Microsoft Windows Kernel is the kernel of the Windows operating system by Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Kernel. An attacker can exploit the vulnerability to elevate privileges. The following products and versions are affected:Windows 10 Version 21...

Microsoft Windows NT OS Kernel Input Validation Error Vulnerability

The Microsoft Windows NT OS Kernel is the core of the Windows operating system from Microsoft Corporation USA and is responsible for managing system resources, providing hardware abstraction, and ensuring system security and stability. A security vulnerability exists in the Microsoft Windows NT O...

CVE-2024-43630: Stack-based Buffer Overflow

Windows Kernel Elevation of Privilege Vulnerability...

Metasploit Weekly Wrap-Up 11/01/2024

Pool Party Windows Process Injection This Metasploit-Framework release includes a new injection technique deployed on core Meterpreter functionalities such as process migration and DLL Injection. The research of a new injection technique known as PoolParty highlighted new ways to gain code...

Researchers Uncover OS Downgrade Vulnerability Targeting Microsoft Windows Kernel

A new attack technique could be used to bypass Microsoft's Driver Signature Enforcement DSE on fully patched Windows systems, leading to operating system OS downgrade attacks. "This bypass allows loading unsigned kernel drivers, enabling attackers to deploy custom rootkits that can neutralize...

The severity of the Elevation of Privilege – Windows Kernel-Mode Driver (CVE-2024-35250) vulnerability has increased

The severity of the Elevation of Privilege - Windows Kernel-Mode Driver CVE-2024-35250 vulnerability has increased. This vulnerability was fixed as part of the June Microsoft Patch Tuesday. As in the case of the CVE-2024-30090 vulnerability, it was discovered by a researcher with the nickname...