Vulnerabilitymedium

Finding vulnerabilities in ClipSp, the driver at the core of Windows’ Client License Platform

Cisco TalosNov 25, 2024 · 13:00 UTC (Nov 25, 2024)9 min read5 · 2 reads

Read at blog.talosintelligence.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2024-38184 CVE-2024-38185 CVE-2024-38186 CVE-2024-38062 CVE-2024-38187

Tags: cve-2024-38184 cve-2024-38185 cve-2024-38186 cve-2024-38062 cve-2024-38187 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-38062	Windows Kernel-Mode Driver Elevation of Privilege Vulnerability	7.8	2%		Jul 9, 2024
CVE-2024-38184 +3 related CVEs CVE-2024-38185 CVE-2024-38187 CVE-2024-38186	Windows Kernel-Mode Driver Elevation of Privilege Vulnerability	7.8	1%		Aug 13, 2024

From the original article

9 min read at blog.talosintelligence.com

ClipSP (clipsp. sys) is a Windows driver used to implement client licensing and system policies on Windows 10 and 11 systems. Cisco Talos researchers have discovered eight vulnerabilities related to clipsp.

Cisco Talos

blog.talosintelligence.com

Read the full article at Cisco Talos

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.