WID-SEC-W-2024-3657

DeutschShown in its original language — a full translation is planned for a future version.

Microsoft Windows: Mehrere Schwachstellen

view advisory published 2024-12-10

Ein Angreifer kann mehrere Schwachstellen in verschiedenen Versionen von Microsoft Windows und Microsoft Windows Server ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Situation zu erzeugen.

describes (59)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2024-49138US	—OT critical	26.2% (98th)	KEV	2024-12-12
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2024-49132US	—	1.10% (66th)	—	2024-12-12
Windows Remote Desktop Services Remote Code Execution Vulnerability
CVE-2024-49129US	—	0.85% (58th)	—	2024-12-12
Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
CVE-2024-49128US	—	1.17% (67th)	—	2024-12-12
Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
CVE-2024-49127US	—	1.29% (70th)	—	2024-12-12
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVE-2024-49126US	—	1.29% (70th)	—	2024-12-12
Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability
CVE-2024-49125US	—	1.53% (75th)	—	2024-12-12
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-49124US	—	1.42% (73rd)	—	2024-12-12
Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability
CVE-2024-49123US	—	1.10% (66th)	—	2024-12-12
Windows Remote Desktop Services Remote Code Execution Vulnerability
CVE-2024-49122US	—	20.9% (98th)	—	2024-12-12
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2024-49121US	—	2.35% (84th)	—	2024-12-12
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
CVE-2024-49120US	—	1.09% (65th)	—	2024-12-12
Windows Remote Desktop Services Remote Code Execution Vulnerability
CVE-2024-49119US	—	1.17% (67th)	—	2024-12-12
Windows Remote Desktop Services Remote Code Execution Vulnerability
CVE-2024-49118US	—	1.45% (73rd)	—	2024-12-12
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2024-49117US	—	1.03% (63rd)	Exploit	2024-12-12
Windows Hyper-V Remote Code Execution Vulnerability
CVE-2024-49116US	—	10.3% (96th)	—	2024-12-12
Windows Remote Desktop Services Remote Code Execution Vulnerability
CVE-2024-49115US	—	1.11% (66th)	—	2024-12-12
Windows Remote Desktop Services Remote Code Execution Vulnerability
CVE-2024-49114US	—	0.75% (55th)	—	2024-12-12
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2024-49113US	—	83.8% (100th)	Exploit	2024-12-12
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
CVE-2024-49112US	—	72.2% (99th)	Exploit	2024-12-12
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

showing 20 of 59

references

External citations — patches, advisories, analysis.

PoC CVE-2024-49112 vom 2025-01-01external
Microsoft Leitfaden für Sicherheitsupdatesexternal
WID-SEC-W-2024-3657 - CSAF Versionself
WID-SEC-2024-3657 - Portal Versionself
Hitachi Vulnerability Information HITACHI-SEC-2024-312 vom 2025-01-29external
PoC CVE-2024-49113 vom 2025-01-02external

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan