CVSS: 8.8EPSS: 0%CPEs: 14EXPL: 0CVE-2024-21412 – Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability
https://notcve.org/view.php?id=CVE-2024-21412
Internet Shortcut Files Security Feature Bypass Vulnerability Vulnerabilidad de omisión de la función de seguridad de archivos de acceso directo a Internet This vulnerability allows remote attackers to bypass the SmartScreen security feature to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Internet Shortcut (.URL) files. The issue results from the lack of a security check on chained Internet Shortcut files. An attacker can leverage this vulnerability to execute code in the context of the current user. Microsoft Windows Internet Shortcut Files contains an unspecified vulnerability that allows for a security feature bypass. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21412 • CWE-693: Protection Mechanism Failure •
CVSS: 6.5EPSS: 0%CPEs: 13EXPL: 1CVE-2024-21320 – Windows Themes Spoofing Vulnerability
https://notcve.org/view.php?id=CVE-2024-21320
Windows Themes Spoofing Vulnerability Vulnerabilidad de suplantación de temas de Windows • https://github.com/sxyrxyy/CVE-2024-21320-POC https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21320 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 6.5EPSS: 0%CPEs: 16EXPL: 0CVE-2024-21314 – Microsoft Message Queuing Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2024-21314
Microsoft Message Queuing Information Disclosure Vulnerability Vulnerabilidad de divulgación de información de Microsoft Message Queue Server • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21314 • CWE-125: Out-of-bounds Read •
CVSS: 7.5EPSS: 0%CPEs: 37EXPL: 0CVE-2024-21312 – .NET Framework Denial of Service Vulnerability
https://notcve.org/view.php?id=CVE-2024-21312
.NET Framework Denial of Service Vulnerability Vulnerabilidad de denegación de servicio de .NET Framework • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21312 https://security.netapp.com/advisory/ntap-20240208-0008 • CWE-20: Improper Input Validation •
CVSS: 5.5EPSS: 0%CPEs: 16EXPL: 0CVE-2024-21311 – Windows Cryptographic Services Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2024-21311
Windows Cryptographic Services Information Disclosure Vulnerability Vulnerabilidad de divulgación de información de servicios criptográficos de Windows • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21311 • CWE-125: Out-of-bounds Read •