CVE-2024-43461 – Microsoft Windows MSHTML Platform Spoofing Vulnerability
https://notcve.org/view.php?id=CVE-2024-43461
10 Sep 2024 — Windows MSHTML Platform Spoofing Vulnerability This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Internet Explorer prompts the user after a file is downloaded. A crafted file name can cause the true file extension to be hidden, misleading the user into believing that the f... • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43461 • CWE-451: User Interface (UI) Misrepresentation of Critical Information •
CVE-2024-38223 – Windows Initial Machine Configuration Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2024-38223
13 Aug 2024 — Windows Initial Machine Configuration Elevation of Privilege Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38223 • CWE-284: Improper Access Control •
CVE-2024-38187 – Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2024-38187
13 Aug 2024 — Windows Kernel-Mode Driver Elevation of Privilege Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38187 • CWE-822: Untrusted Pointer Dereference •
CVE-2024-38186 – Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2024-38186
13 Aug 2024 — Windows Kernel-Mode Driver Elevation of Privilege Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38186 • CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition •
CVE-2024-38185 – Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2024-38185
13 Aug 2024 — Windows Kernel-Mode Driver Elevation of Privilege Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38185 • CWE-822: Untrusted Pointer Dereference •
CVE-2024-38180 – Windows SmartScreen Security Feature Bypass Vulnerability
https://notcve.org/view.php?id=CVE-2024-38180
13 Aug 2024 — Windows SmartScreen Security Feature Bypass Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38180 • CWE-693: Protection Mechanism Failure •
CVE-2024-38153 – Windows Kernel Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2024-38153
13 Aug 2024 — Windows Kernel Elevation of Privilege Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38153 • CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition •
CVE-2024-38152 – Windows OLE Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2024-38152
13 Aug 2024 — Windows OLE Remote Code Execution Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38152 • CWE-122: Heap-based Buffer Overflow •
CVE-2024-38151 – Windows Kernel Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2024-38151
13 Aug 2024 — Windows Kernel Information Disclosure Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38151 • CWE-125: Out-of-bounds Read •
CVE-2024-38146 – Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
https://notcve.org/view.php?id=CVE-2024-38146
13 Aug 2024 — Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38146 • CWE-476: NULL Pointer Dereference •