Exploit / PoCcriticalExploited in the wild

U.S. CISA adds Microsoft Windows Kernel, Mozilla Firefox and SolarWinds Web Help Desk bugs to its Known Exploited Vulnerabilities catalog

Security Affairsby @securityaffairsOct 16, 2024 · 10:48 UTC (Oct 16, 2024)2 min read4 · 2 reads

Read at securityaffairs.com

Analyze CVE-2024-30088 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2024-30088 CVE-2024-9680 CVE-2024-28987

Tags: cve-2024-30088 cve-2024-9680 cve-2024-28987 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-28987	Hardcoded Credential in SolarWinds Web Help Desk Allows Unauthenticated Access	9.1	93%	KEV	Aug 21, 2024 KEV Oct 15, 2024
CVE-2024-30088	Microsoft Windows Kernel TOCTOU Race Condition Privilege Escalation (CVE-2024-30088)	7.0	68%	KEVRansomware	Jun 11, 2024 KEV Oct 15, 2024
CVE-2024-9680	Use-After-Free in Mozilla Firefox Animation Timelines Allows Code Execution	9.8	23%	KEVRansomware	Oct 9, 2024 KEV Oct 15, 2024

From the original article

2 min read at securityaffairs.com

U. S. Cybersecurity and Infrastructure Security Agency (CISA) adds Windows Kernel, Mozilla Firefox and SolarWinds Web Help Desk bugs to its Known Exploited Vulnerabilities catalog.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.