CVSS: 8.8EPSS: 0%CPEs: 7EXPL: 1CVE-2024-29988 – Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability
https://notcve.org/view.php?id=CVE-2024-29988
SmartScreen Prompt Security Feature Bypass Vulnerability Vulnerabilidad de omisión de la función de seguridad de solicitud de SmartScreen This vulnerability allows remote attackers to bypass the SmartScreen security feature to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Internet Shortcut (.URL) files. The issue results from the lack of a security check on chained Internet Shortcut files. An attacker can leverage this vulnerability to execute code in the context of the current user. Microsoft SmartScreen Prompt contains a security feature bypass vulnerability that allows an attacker to bypass the Mark of the Web (MotW) feature. • https://github.com/Sploitus/CVE-2024-29988-exploit https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29988 • CWE-693: Protection Mechanism Failure •
CVSS: 7.8EPSS: 0%CPEs: 16EXPL: 0CVE-2024-26169 – Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability
https://notcve.org/view.php?id=CVE-2024-26169
Windows Error Reporting Service Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios del servicio de informes de errores de Windows Microsoft Windows Error Reporting Service contains an improper privilege management vulnerability that allows a local attacker with user permissions to gain SYSTEM privileges. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26169 • CWE-269: Improper Privilege Management •
CVSS: 5.5EPSS: 0%CPEs: 13EXPL: 0CVE-2024-21408 – Windows Hyper-V Denial of Service Vulnerability
https://notcve.org/view.php?id=CVE-2024-21408
Windows Hyper-V Denial of Service Vulnerability Vulnerabilidad de denegación de servicio de Windows Hyper-V • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21408 • CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') •
CVSS: 8.1EPSS: 0%CPEs: 14EXPL: 0CVE-2024-21407 – Windows Hyper-V Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2024-21407
Windows Hyper-V Remote Code Execution Vulnerability Vulnerabilidad de ejecución remota de código de Windows Hyper-V • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21407 • CWE-416: Use After Free •
CVSS: 7.5EPSS: 0%CPEs: 14EXPL: 0CVE-2024-21406 – Windows Printing Service Spoofing Vulnerability
https://notcve.org/view.php?id=CVE-2024-21406
Windows Printing Service Spoofing Vulnerability Vulnerabilidad de suplantación del servicio de impresión de Windows • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21406 • CWE-319: Cleartext Transmission of Sensitive Information •