Risk Scores
CVSS v4.0
6.900000095367432
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS Score
3.96%
88.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Microsoft Windows 11 Version 22H2 | |
| Microsoft | Microsoft Windows 11 Version 23H2 | |
| Microsoft | Microsoft Windows Server 2019 | |
| Microsoft | Microsoft Windows 10 Version 1607 | |
| Microsoft | Microsoft Windows Server 2016 | |
| Microsoft | Microsoft Windows Server 2022 | |
| Microsoft | Microsoft Windows 10 Version 21H2 | |
| Microsoft | Microsoft Windows 11 version 21H2 | |
| Microsoft | Microsoft Windows Server 2012 | |
| Microsoft | Microsoft Windows 10 Version 1809 | |
| Hitachi | Hitachi Storage | |
| Microsoft | Microsoft Windows Server 2022 23H2 Edition | |
| Microsoft | Microsoft Windows 10 Version 22H2 | |
| Microsoft | Microsoft Windows Server 2008 R2 SP1 | |
| Microsoft | Microsoft Windows 10 | |
| Microsoft | Microsoft Windows Server 2008 SP2 | |
| Microsoft | Microsoft Windows Server 2012 R2 |
Timeline
- Jun 11, 2024 CVE Published
- Jun 12, 2024 EPSS Score
- Jul 4, 2024 EPSS Score
- Aug 18, 2024 EPSS Score
- Sep 10, 2024 EPSS Score
- Oct 4, 2024 Coalition ESS Score
- Oct 24, 2024 EPSS Score
- Nov 16, 2024 EPSS Score
- Nov 21, 2024 CVE Updated
- Jan 1, 2025 EPSS Score
- Jan 21, 2025 Coalition ESS Score
- Jan 23, 2025 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1347.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1347 advisory
- https://msrc.microsoft.com/update-guide advisory
- https://github.com/tykawaii98/CVE-2024-30088 advisory
- https://www.hitachi.com/products/it/storage-solutions/sec_info/2024/06.html advisory
- https://github.com/varwara/CVE-2024-35250 advisory
- https://github.com/Dor00tkit/CVE-2024-30090 advisory
- https://www.cisa.gov/news-events/alerts/2024/12/16/cisa-adds-two-known-exploited-vulnerabilities-catalog exploit
- https://ssd-disclosure.com/ssd-advisory-cldflt-heap-based-overflow-pe/ advisory
- https://www.picussecurity.com/resource/blog/oilrig-exposed-tools-techniques-apt34 advisory