Summary
Ein lokaler Angreifer kann mehrere Schwachstellen in Microsoft Windows ausnutzen, um seine Privilegien zu erhöhen.
Product
Windows ist ein Betriebssystem von Microsoft.
Vulnerabilities 2
-
High 7.3
Windows Update Stack Elevation of Privilege Vulnerability
Summary Microsoft was notified that an elevation of privilege vulnerability exists in Windows Update, potentially enabling an attacker with basic user privileges to reintroduce previously mitigated vulnerabilities or circumvent some features of Virtualization…
-
Medium 6.7
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
Summary: As of July 8, 2025 Microsoft has completed mitigations to address this vulnerability. See KB5042562: Guidance for blocking rollback of virtualization-based security related updates and the Recommended Actions section of this CVE for guidance on how t…
Revision history
-
#2
PoC "DownDate" für beide Schwachstellen verfügbar
-
#1
Initiale Fassung
References
-
Microsoft Security Update Guide vom 2024-08-07
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21302
-
Microsoft Security Update Guide vom 2024-08-07
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38202
-
Microsoft Security Update Guide vom 2024-08-13
https://msrc.microsoft.com/update-guide/
-
Safebreach Blog: Windows Downgrade Attacks
https://www.safebreach.com/blog/downgrade-attacks-using-windows-updates/
-
PoC Windows DownDate
https://github.com/SafeBreach-Labs/WindowsDowndate/blob/main/README.md