CVE-2024-37976 – Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability
https://notcve.org/view.php?id=CVE-2024-37976
08 Oct 2024 — Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37976 • CWE-190: Integer Overflow or Wraparound •
CVE-2024-43573 – Microsoft Windows MSHTML Platform Spoofing Vulnerability
https://notcve.org/view.php?id=CVE-2024-43573
08 Oct 2024 — Windows MSHTML Platform Spoofing Vulnerability Microsoft Windows MSHTML Platform contains an unspecified spoofing vulnerability which can lead to a loss of confidentiality. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43573 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVE-2024-43554 – Windows Kernel-Mode Driver Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2024-43554
08 Oct 2024 — Windows Kernel-Mode Driver Information Disclosure Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43554 • CWE-212: Improper Removal of Sensitive Information Before Storage or Transfer •
CVE-2024-43535 – Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2024-43535
08 Oct 2024 — Windows Kernel-Mode Driver Elevation of Privilege Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43535 • CWE-416: Use After Free •
CVE-2024-43534 – Windows Graphics Component Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2024-43534
08 Oct 2024 — Windows Graphics Component Information Disclosure Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43534 • CWE-125: Out-of-bounds Read •
CVE-2024-43532 – Remote Registry Service Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2024-43532
08 Oct 2024 — Remote Registry Service Elevation of Privilege Vulnerability • https://github.com/HazeLook/CVE-2024-43532 • CWE-636: Not Failing Securely ('Failing Open') •
CVE-2024-43519 – Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2024-43519
08 Oct 2024 — Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43519 • CWE-197: Numeric Truncation Error •
CVE-2024-43518 – Windows Telephony Server Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2024-43518
08 Oct 2024 — Windows Telephony Server Remote Code Execution Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43518 • CWE-122: Heap-based Buffer Overflow •
CVE-2024-43515 – Internet Small Computer Systems Interface (iSCSI) Denial of Service Vulnerability
https://notcve.org/view.php?id=CVE-2024-43515
08 Oct 2024 — Internet Small Computer Systems Interface (iSCSI) Denial of Service Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43515 • CWE-400: Uncontrolled Resource Consumption •
CVE-2024-43513 – BitLocker Security Feature Bypass Vulnerability
https://notcve.org/view.php?id=CVE-2024-43513
08 Oct 2024 — BitLocker Security Feature Bypass Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43513 • CWE-693: Protection Mechanism Failure •