MSRC-CVE-2024-49057 — Microsoft Defender for Endpoint on Android Spoofing Vulnerability

Summary

Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?
The user must install and use a specially-crafted malicious application on their Android device.

Security updates
1.0.7128.0101 — https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/mtd?view=o365-worldwide

Vulnerabilities 1

High 8.1

CVE-2024-49057

Microsoft Defender for Endpoint on Android Spoofing Vulnerability

Microsoft Defender for Endpoint on Android Spoofing Vulnerability

Microsoft Microsoft Defender for Endpoint for Android Android

Dec 10, 2024

Revision history

2024-12-10 #1
Information published.

References

CVE-2024-49057 Microsoft Defender for Endpoint on Android Spoofing Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49057
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss