CVE-2024-11859

CVSS 4.0: 8.4 high
EPSS: 2%p80
Published: Apr 7, 2025 · Apr 7, 2025
Modified: Jun 17, 2026

Analyze CVE-2024-11859 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

DLL Search Order Hijacking vulnerability potentially allowed an attacker with administrator privileges to load a malicious dynamic-link library and execute its code.

Weakness: CWE-427

Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

NVD CVE.org GitHub PoCs EPSS (2.1%)

In the news

6 stories

⚡ Weekly Recap: Windows 0-Day, VPN Exploits, Weaponized AI, Hijacked Antivirus and More

The Hacker NewsMay 6, 07:05 UTC · May 6, 2025RansomwareCVE-2025-29824 CVE-2024-11859 CVE-2025-3102+171 · 1 read

Flaw in ESET security software used to spread malware from ToddyCat group

The RecordApr 7, 15:36 UTC · Apr 7, 2025MalwareExploitedCVE-2024-118593

ToddyCat’s New Hacking Tools Steal Outlook Emails and Microsoft 365 Access Tokens

The Hacker NewsNov 25, 16:23 UTC · Nov 25, 2025VulnerabilityCVE-2024-118592 · 1 read

Description · NVD

In the news

⚡ Weekly Recap: Windows 0-Day, VPN Exploits, Weaponized AI, Hijacked Antivirus and More

Flaw in ESET security software used to spread malware from ToddyCat group

ToddyCat’s New Hacking Tools Steal Outlook Emails and Microsoft 365 Access Tokens

An APT group exploited ESET flaw to execute malware

APT group ToddyCat exploits a vulnerability in ESET for DLL proxying

New TCESB Malware Found in Active Attacks Exploiting ESET Security Scanner