Exploit / PoCcritical
Two Zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-21907 | Newtonsoft.Json before version 13.0.1 is affected by a mishandling of exceptional conditions vulnerability | 7.5 | 33% | PoC ×4 | |
CVE-2025-55234+3 related CVEs | SMB Relay Elevation of Privilege in Microsoft Windows SMB Server | 9.8 group max | 20% |
From the original article
2 min read at infosecurity-magazine.com
Microsoft issued updates to fix 81 vulnerabilities in this month’s Patch Tuesday yesterday, including two classed as zero-days which have been disclosed but not yet exploited. The first is CVE-2024-21907, which relates to improper handling of exceptional conditions in Newtonsoft. Json – a part of SQL server.
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.