Summary
Ein Angreifer kann mehrere Schwachstellen in verschiedenen Versionen von Microsoft Windows und Microsoft Windows Server ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen, seine Privilegien zu erweitern, beliebigen Programmcode auszuführen, Informationen offenzulegen oder einen Denial of Service Zustand herbeizuführen.
Product
Windows ist ein Betriebssystem von Microsoft.
Vulnerabilities 35
-
High 7.8
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
KEV Dec 16, 2024 -
High 7.0
Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
KEV Oct 15, 2024 -
Critical 9.8CVE-2024-30080 EPSS 43%
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
-
High 8.8
Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
-
High 8.8
Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
-
High 8.8
Windows Wi-Fi Driver Remote Code Execution Vulnerability
Windows Wi-Fi Driver Remote Code Execution Vulnerability
-
High 8.8
Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability
Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability
-
High 8.0
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
-
High 8.0
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
-
High 8.0
Windows OLE Remote Code Execution Vulnerability
Windows OLE Remote Code Execution Vulnerability
-
High 7.8
Windows Standards-Based Storage Management Service Remote Code Execution Vulnerability
Windows Standards-Based Storage Management Service Remote Code Execution Vulnerability
-
High 7.8
Microsoft Event Trace Log File Parsing Remote Code Execution Vulnerability
Microsoft Event Trace Log File Parsing Remote Code Execution Vulnerability
-
High 7.8
Win32k Elevation of Privilege Vulnerability
Win32k Elevation of Privilege Vulnerability
-
High 7.8
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
-
High 7.8
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
-
High 7.8
Win32k Elevation of Privilege Vulnerability
Win32k Elevation of Privilege Vulnerability
-
High 7.8
Microsoft Streaming Service Elevation of Privilege Vulnerability
Microsoft Streaming Service Elevation of Privilege Vulnerability
-
High 7.8
Win32k Elevation of Privilege Vulnerability
Win32k Elevation of Privilege Vulnerability
-
High 7.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
-
High 7.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
-
High 7.5
The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote att…
-
High 7.5
DHCP Server Service Denial of Service Vulnerability
DHCP Server Service Denial of Service Vulnerability
-
High 7.5
Windows Standards-Based Storage Management Service Denial of Service Vulnerability
Windows Standards-Based Storage Management Service Denial of Service Vulnerability
-
High 7.3
Windows Storage Elevation of Privilege Vulnerability
Windows Storage Elevation of Privilege Vulnerability
-
High 7.0CVE-2024-30084 Public exploit
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
-
High 7.0CVE-2024-30090 Public exploit
Microsoft Streaming Service Elevation of Privilege Vulnerability
Microsoft Streaming Service Elevation of Privilege Vulnerability
-
High 7.0
Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
-
High 7.0
Windows Perception Service Elevation of Privilege Vulnerability
Windows Perception Service Elevation of Privilege Vulnerability
-
Medium 6.8
Windows Container Manager Service Elevation of Privilege Vulnerability
Windows Container Manager Service Elevation of Privilege Vulnerability
-
Medium 6.7
Windows Distributed File System (DFS) Remote Code Execution Vulnerability
Windows Distributed File System (DFS) Remote Code Execution Vulnerability
-
Medium 5.5
Windows Themes Denial of Service Vulnerability
Windows Themes Denial of Service Vulnerability
-
Medium 5.5
Winlogon Elevation of Privilege Vulnerability
Winlogon Elevation of Privilege Vulnerability
-
Medium 5.5
Winlogon Elevation of Privilege Vulnerability
Winlogon Elevation of Privilege Vulnerability
-
Medium 5.5
Windows Cryptographic Services Information Disclosure Vulnerability
Windows Cryptographic Services Information Disclosure Vulnerability
-
Medium 4.7
Windows Remote Access Connection Manager Information Disclosure Vulnerability
Windows Remote Access Connection Manager Information Disclosure Vulnerability
Revision history
-
#8
CVE-2024-30088 wird ausgenutzt
-
#7
Exploit für CVE-2024-30085 aufgenommen
-
#6
Aktive Ausnutzung gemeldet
-
#5
weiteren PoC aufgenommen
-
#4
weiteren PoC aufgenommen
-
#3
Neue Updates von HITACHI aufgenommen
-
#2
PoC aufgenommen
-
#1
Initiale Fassung
References
-
Microsoft Leitfaden für Sicherheitsupdates vom 2024-06-11
https://msrc.microsoft.com/update-guide
-
PoC für CVE-2024-30088 auf GitHub vom 2024-06-11
https://github.com/tykawaii98/CVE-2024-30088
-
Hitachi Vulnerability Information HITACHI-SEC-2024-306 vom 2024-07-26
https://www.hitachi.com/products/it/storage-solutions/sec_info/2024/06.html
-
PoC auf varwara GitHub vom 2024-10-14
https://github.com/varwara/CVE-2024-35250
-
PoC auf Dor00tkit GitHub vom 2024-10-21
https://github.com/Dor00tkit/CVE-2024-30090
-
CISA Known Exploited Vulnerabilities Catalog vom 2024-12-16
https://www.cisa.gov/news-events/alerts/2024/12/16/cisa-adds-two-known-exploited-vulnerabilities-catalog
-
SSD Advisory vom 2024-12-23
https://ssd-disclosure.com/ssd-advisory-cldflt-heap-based-overflow-pe/
-
Picus Security Report vom 2024-12-26
https://www.picussecurity.com/resource/blog/oilrig-exposed-tools-techniques-apt34