deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-47603
Published: 2024-12-12
Description: GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_matroska_demux_update_tracks function within matroska-demux.c. The vulnerability occurs when the gst_caps_is_equal function is called with invalid caps values. If this happen, then in the function gst_buffer_get_size the call to GST_BUFFER_MEM_PTR can return a null pointer. Attempting to dereference the size field of this null pointer results in a null pointer dereference. This vulnerability is fixed in 1.24.10.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8057.patch; https://gstreamer.freedesktop.org/security/sa-2024-0021.html; https://securitylab.github.com/advisories/GHSL-2024-251_Gstreamer/
CVE: CVE-2024-47606
Published: 2024-12-12
Description: GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemux_parse_theora_extension within qtdemux.c. The vulnerability occurs due to an underflow of the gint size variable, which causes size to hold a large unintended value when cast to an unsigned integer. This 32-bit negative value is then cast to a 64-bit unsigned integer (0xfffffffffffffffa) in a subsequent call to gst_buffer_new_and_alloc. The function gst_buffer_new_allocate then attempts to allocate memory, eventually calling _sysmem_new_block. The function _sysmem_new_block adds alignment and header size to the (unsigned) size, causing the overflow of the 'slice_size' variable. As a result, only 0x89 bytes are allocated, despite the large input size. When the following memcpy call occurs in gst_buffer_fill, the data from the input file will overwrite the content of the GstMapInfo info structure. Finally, during the call to gst_memory_unmap, the overwritten memory may cause a function pointer hijack, as the mem->allocator->mem_unmap_full function is called with a corrupted pointer. This function pointer overwrite could allow an attacker to alter the execution flow of the program, leading to arbitrary code execution. This vulnerability is fixed in 1.24.10.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190, CWE-191
References: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8032.patch; https://gstreamer.freedesktop.org/security/sa-2024-0014.html; https://securitylab.github.com/advisories/GHSL-2024-166_Gstreamer/
CVE: CVE-2024-47607
Published: 2024-12-12
Description: GStreamer is a library for constructing graphs of media-handling components.  stack-buffer overflow has been detected in the gst_opus_dec_parse_header function within `gstopusdec.c'. The pos array is a stack-allocated buffer of size 64. If n_channels exceeds 64, the for loop will write beyond the boundaries of the pos array. The value written will always be GST_AUDIO_CHANNEL_POSITION_NONE. This bug allows to overwrite the EIP address allocated in the stack. This vulnerability is fixed in 1.24.10.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8037.patch; https://gstreamer.freedesktop.org/security/sa-2024-0024.html; https://securitylab.github.com/advisories/GHSL-2024-115_GHSL-2024-118_Gstreamer/
CVE: CVE-2024-47613
Published: 2024-12-12
Description: GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been identified in `gst_gdk_pixbuf_dec_flush` within `gstgdkpixbufdec.c`. This function invokes `memcpy`, using `out_pix` as the destination address. `out_pix` is expected to point to the frame 0 from the frame structure, which is read from the input file. However, in certain situations, it can points to a NULL frame, causing the subsequent call to `memcpy` to attempt writing to the null address (0x00), leading to a null pointer dereference. This vulnerability can result in a Denial of Service (DoS) by triggering a segmentation fault (SEGV). This vulnerability is fixed in 1.24.10.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-476, CWE-787
References: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8041.patch; https://gstreamer.freedesktop.org/security/sa-2024-0025.html; https://securitylab.github.com/advisories/GHSL-2024-115_GHSL-2024-118_Gstreamer/
CVE: CVE-2024-47615
Published: 2024-12-12
Description: GStreamer is a library for constructing graphs of media-handling components. An OOB-Write has been detected in the function gst_parse_vorbis_setup_packet within vorbis_parse.c. The integer size is read from the input file without proper validation. As a result, size can exceed the fixed size of the pad->vorbis_mode_sizes array (which size is 256). When this happens, the for loop overwrites the entire pad structure with 0s and 1s, affecting adjacent memory as well. This OOB-write can overwrite up to 380 bytes of memory beyond the boundaries of the pad->vorbis_mode_sizes array. This vulnerability is fixed in 1.24.10.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8038.patch; https://gstreamer.freedesktop.org/security/sa-2024-0026.html; https://securitylab.github.com/advisories/GHSL-2024-115_GHSL-2024-118_Gstreamer/
CVE: CVE-2024-47774
Published: 2024-12-12
Description: GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been identified in the gst_avi_subtitle_parse_gab2_chunk function within gstavisubtitle.c. The function reads the name_length value directly from the input file without checking it properly. Then, the a condition, does not properly handle cases where name_length is greater than 0xFFFFFFFF - 17, causing an integer overflow. In such scenario, the function attempts to access memory beyond the buffer leading to an OOB-read. This vulnerability is fixed in 1.24.10.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://github.com/github/securitylab-vulnerabilities/issues/1826; https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8043.patch; https://securitylab.github.com/advisories/GHSL-2024-262_Gstreamer/
CVE: CVE-2024-47775
Published: 2024-12-12
Description: GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been found in the parse_ds64 function within gstwavparse.c. The parse_ds64 function does not check that the buffer buf contains sufficient data before attempting to read from it, doing multiple GST_READ_UINT32_LE operations without performing boundary checks. This can lead to an OOB-read when buf is smaller than expected. This vulnerability allows reading beyond the bounds of the data buffer, potentially leading to a crash (denial of service) or the leak of sensitive data. This vulnerability is fixed in 1.24.10.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8042.patch; https://gstreamer.freedesktop.org/security/sa-2024-0027.html; https://securitylab.github.com/advisories/GHSL-2024-261_Gstreamer/
CVE: CVE-2024-47776
Published: 2024-12-12
Description: GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in gst_wavparse_cue_chunk within gstwavparse.c. The vulnerability happens due to a discrepancy between the size of the data buffer and the size value provided to the function. This mismatch causes the comparison  if (size < 4 + ncues * 24) to fail in some cases, allowing the subsequent loop to access beyond the bounds of the data buffer. The root cause of this discrepancy stems from a miscalculation when clipping the chunk size based on upstream data size. This vulnerability allows reading beyond the bounds of the data buffer, potentially leading to a crash (denial of service) or the leak of sensitive data. This vulnerability is fixed in 1.24.10.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8042.patch; https://gstreamer.freedesktop.org/security/sa-2024-0027.html; https://securitylab.github.com/advisories/GHSL-2024-260_Gstreamer/
CVE: CVE-2024-47777
Published: 2024-12-12
Description: GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been identified in the gst_wavparse_smpl_chunk function within gstwavparse.c. This function attempts to read 4 bytes from the data + 12 offset without checking if the size of the data buffer is sufficient. If the buffer is too small, the function reads beyond its bounds. This vulnerability may result in reading 4 bytes out of the boundaries of the data buffer. This vulnerability is fixed in 1.24.10.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8042.patch; https://gstreamer.freedesktop.org/security/sa-2024-0027.html; https://securitylab.github.com/advisories/GHSL-2024-259_Gstreamer/
CVE: CVE-2024-47778
Published: 2024-12-12
Description: GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in gst_wavparse_adtl_chunk within gstwavparse.c. This vulnerability arises due to insufficient validation of the size parameter, which can exceed the bounds of the data buffer. As a result, an OOB read occurs in the following while loop. This vulnerability can result in reading up to 4GB of process memory or potentially causing a segmentation fault (SEGV) when accessing invalid memory. This vulnerability is fixed in 1.24.10.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8042.patch; https://gstreamer.freedesktop.org/security/sa-2024-0027.html; https://securitylab.github.com/advisories/GHSL-2024-258_Gstreamer/
CVE: CVE-2024-47834
Published: 2024-12-12
Description: GStreamer is a library for constructing graphs of media-handling components. An Use-After-Free read vulnerability has been discovered affecting the processing of CodecPrivate elements in Matroska streams. In the GST_MATROSKA_ID_CODECPRIVATE case within the gst_matroska_demux_parse_stream function, a data chunk is allocated using gst_ebml_read_binary. Later, the allocated memory is freed in the gst_matroska_track_free function, by the call to g_free (track->codec_priv). Finally, the freed memory is accessed in the caps_serialize function through gst_value_serialize_buffer. The freed memory will be accessed in the gst_value_serialize_buffer function. This results in a UAF read vulnerability, as the function tries to process memory that has already been freed. This vulnerability is fixed in 1.24.10.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-416
References: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8057.patch; https://gstreamer.freedesktop.org/security/sa-2024-0030.html; https://securitylab.github.com/advisories/GHSL-2024-280_Gstreamer/
CVE: CVE-2024-47835
Published: 2024-12-12
Description: GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been detected in the parse_lrc function within gstsubparse.c. The parse_lrc function calls strchr() to find the character ']' in the string line. The pointer returned by this call is then passed to g_strdup(). However, if the string line does not contain the character ']', strchr() returns NULL, and a call to g_strdup(start + 1) leads to a null pointer dereference. This vulnerability is fixed in 1.24.10.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8039.patch; https://gstreamer.freedesktop.org/security/sa-2024-0029.html; https://securitylab.github.com/advisories/GHSL-2024-263_Gstreamer/
CVE: CVE-2024-49057
Published: 2024-12-12
Description: Microsoft Defender for Endpoint on Android Spoofing Vulnerability
CVSS Score: 8.1 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49057
CVE: CVE-2024-49059
Published: 2024-12-12
Description: Microsoft Office Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-59, CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49059
CVE: CVE-2024-49062
Published: 2024-12-12
Description: Microsoft SharePoint Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-23
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49062
CVE: CVE-2024-49063
Published: 2024-12-12
Description: Microsoft/Muzic Remote Code Execution Vulnerability
CVSS Score: 8.4 (HIGH)
CWE: CWE-502
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49063
CVE: CVE-2024-49064
Published: 2024-12-12
Description: Microsoft SharePoint Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-611
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49064
CVE: CVE-2024-49065
Published: 2024-12-12
Description: Microsoft Office Remote Code Execution Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49065
CVE: CVE-2024-49068
Published: 2024-12-12
Description: Microsoft SharePoint Elevation of Privilege Vulnerability
CVSS Score: 8.2 (HIGH)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49068
CVE: CVE-2024-49069
Published: 2024-12-12
Description: Microsoft Excel Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49069
CVE: CVE-2024-49070
Published: 2024-12-12
Description: Microsoft SharePoint Remote Code Execution Vulnerability
CVSS Score: 7.4 (HIGH)
CWE: CWE-502
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49070
CVE: CVE-2024-49072
Published: 2024-12-12
Description: Windows Task Scheduler Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49072
CVE: CVE-2024-49073
Published: 2024-12-12
Description: Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49073
CVE: CVE-2024-49074
Published: 2024-12-12
Description: Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49074
CVE: CVE-2024-49075
Published: 2024-12-12
Description: Windows Remote Desktop Services Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49075
CVE: CVE-2024-49076
Published: 2024-12-12
Description: Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-287
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49076
CVE: CVE-2024-49077
Published: 2024-12-12
Description: Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-125, CWE-191
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49077
CVE: CVE-2024-49078
Published: 2024-12-12
Description: Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-125, CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49078
CVE: CVE-2024-49079
Published: 2024-12-12
Description: Input Method Editor (IME) Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49079
CVE: CVE-2024-49080
Published: 2024-12-12
Description: Windows IP Routing Management Snapin Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49080
CVE: CVE-2024-49081
Published: 2024-12-12
Description: Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49081
CVE: CVE-2024-49082
Published: 2024-12-12
Description: Windows File Explorer Information Disclosure Vulnerability
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49082
CVE: CVE-2024-49083
Published: 2024-12-12
Description: Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49083
CVE: CVE-2024-49084
Published: 2024-12-12
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49084
CVE: CVE-2024-49085
Published: 2024-12-12
Description: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122, CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49085
CVE: CVE-2024-49086
Published: 2024-12-12
Description: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49086
CVE: CVE-2024-49087
Published: 2024-12-12
Description: Windows Mobile Broadband Driver Information Disclosure Vulnerability
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49087
CVE: CVE-2024-49088
Published: 2024-12-12
Description: Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-126
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49088
CVE: CVE-2024-49089
Published: 2024-12-12
Description: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVSS Score: 7.2 (HIGH)
CWE: CWE-122, CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49089
CVE: CVE-2024-49090
Published: 2024-12-12
Description: Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-822
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49090
CVE: CVE-2024-49091
Published: 2024-12-12
Description: Windows  Domain Name Service Remote Code Execution Vulnerability
CVSS Score: 7.2 (HIGH)
CWE: CWE-591
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49091
CVE: CVE-2024-49092
Published: 2024-12-12
Description: Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49092
CVE: CVE-2024-49093
Published: 2024-12-12
Description: Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-681
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49093
CVE: CVE-2024-49094
Published: 2024-12-12
Description: Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49094
CVE: CVE-2024-49095
Published: 2024-12-12
Description: Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-415, CWE-591, CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49095
CVE: CVE-2024-49096
Published: 2024-12-12
Description: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49096
CVE: CVE-2024-49097
Published: 2024-12-12
Description: Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-416, CWE-591, CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49097
CVE: CVE-2024-49098
Published: 2024-12-12
Description: Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49098
CVE: CVE-2024-49099
Published: 2024-12-12
Description: Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49099
CVE: CVE-2024-49101
Published: 2024-12-12
Description: Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49101
CVE: CVE-2024-49102
Published: 2024-12-12
Description: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49102
CVE: CVE-2024-49103
Published: 2024-12-12
Description: Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-125, CWE-191
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49103
CVE: CVE-2024-49104
Published: 2024-12-12
Description: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49104
CVE: CVE-2024-49105
Published: 2024-12-12
Description: Remote Desktop Client Remote Code Execution Vulnerability
CVSS Score: 8.4 (HIGH)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49105
CVE: CVE-2024-49106
Published: 2024-12-12
Description: Windows Remote Desktop Services Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
CWE: CWE-416, CWE-591, CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49106
CVE: CVE-2024-49107
Published: 2024-12-12
Description: WmsRepair Service Elevation of Privilege Vulnerability
CVSS Score: 7.3 (HIGH)
CWE: CWE-59, CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49107
CVE: CVE-2024-49108
Published: 2024-12-12
Description: Windows Remote Desktop Services Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
CWE: CWE-416, CWE-591, CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49108
CVE: CVE-2024-49109
Published: 2024-12-12
Description: Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49109
CVE: CVE-2024-49110
Published: 2024-12-12
Description: Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49110
CVE: CVE-2024-49111
Published: 2024-12-12
Description: Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49111
CVE: CVE-2024-49112
Published: 2024-12-12
Description: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49112
CVE: CVE-2024-49113
Published: 2024-12-12
Description: Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49113
CVE: CVE-2024-49114
Published: 2024-12-12
Description: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-820
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49114