CVSS: 5.5EPSS: 0%CPEs: 11EXPL: 1CVE-2024-38041 – Windows Kernel Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2024-38041
Windows Kernel Information Disclosure Vulnerability Vulnerabilidad de divulgación de información del kernel de Windows • https://github.com/varwara/CVE-2024-38041 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38041 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 7.8EPSS: 0%CPEs: 15EXPL: 0CVE-2024-38034 – Windows Filtering Platform Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2024-38034
Windows Filtering Platform Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios en Windows Filtering Platform • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38034 • CWE-190: Integer Overflow or Wraparound •
CVSS: 7.2EPSS: 0%CPEs: 16EXPL: 0CVE-2024-38025 – Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2024-38025
Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability Vulnerabilidad de ejecución remota de código de la librería Microsoft Windows Performance Data Helper • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38025 • CWE-122: Heap-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVSS: 7.2EPSS: 0%CPEs: 3EXPL: 1CVE-2024-38024 – Microsoft SharePoint Server Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2024-38024
Microsoft SharePoint Server Remote Code Execution Vulnerability Vulnerabilidad de ejecución remota de código de Microsoft SharePoint Server This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft SharePoint Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the implementation of the FindSpecific method. The process does not properly restrict a user-supplied argument before using it to create an instance of an object. An attacker can leverage this vulnerability to execute code in the context of the service account. • https://github.com/testanull/MS-SharePoint-July-Patch-RCE-PoC https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38024 • CWE-502: Deserialization of Untrusted Data •
CVSS: 7.2EPSS: 0%CPEs: 3EXPL: 1CVE-2024-38023 – Microsoft SharePoint Server Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2024-38023
Microsoft SharePoint Server Remote Code Execution Vulnerability Vulnerabilidad de ejecución remota de código de Microsoft SharePoint Server • https://github.com/testanull/MS-SharePoint-July-Patch-RCE-PoC https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38023 • CWE-502: Deserialization of Untrusted Data •