CVE-2024-38112 – Microsoft Windows MSHTML Platform Spoofing Vulnerability
https://notcve.org/view.php?id=CVE-2024-38112
Windows MSHTML Platform Spoofing Vulnerability Vulnerabilidad de suplantación de plataforma Windows MSHTML Microsoft Windows MSHTML Platform contains a spoofing vulnerability that has a high impact to confidentiality, integrity, and availability. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38112 • CWE-451: User Interface (UI) Misrepresentation of Critical Information •
CVE-2024-38104 – Windows Fax Service Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2024-38104
Windows Fax Service Remote Code Execution Vulnerability Vulnerabilidad de ejecución remota de código del servicio de fax de Windows • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38104 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-822: Untrusted Pointer Dereference •
CVE-2024-38102 – Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
https://notcve.org/view.php?id=CVE-2024-38102
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability Vulnerabilidad de denegación de servicio del controlador de Windows Layer-2 Bridge Network • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38102 • CWE-125: Out-of-bounds Read •
CVE-2024-38064 – Windows TCP/IP Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2024-38064
Windows TCP/IP Information Disclosure Vulnerability Vulnerabilidad de divulgación de información TCP/IP de Windows • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38064 • CWE-908: Use of Uninitialized Resource •
CVE-2024-38061 – DCOM Remote Cross-Session Activation Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2024-38061
DCOM Remote Cross-Session Activation Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios de activación remota entre sesiones de DCOM • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38061 • CWE-284: Improper Access Control •