Talos discovers Microsoft kernel mode driver vulnerabilities that could lead to SYSTEM privileges; Seven other critical issues disclosed
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-21302 | Summary: As of July 8, 2025 Microsoft has completed mitigations to address this vulnerability | 6.7 | 2% | ||
CVE-2024-38063+1 related CVE | Windows TCP/IP Remote Code Execution Vulnerability | 9.8 | 71% | ||
| CVE-2024-38159 | Windows Network Virtualization Remote Code Execution Vulnerability | 9.1 group max | 2% | ||
CVE-2024-38193+1 related CVE | Use-After-Free Privilege Escalation in Microsoft Windows WinSock Driver (afd.sys) | 7.8 group max | 29% | KEVPoC | KEV |
From the original article
2 min read at blog.talosintelligence.com
Microsoft disclosed six security vulnerabilities that are actively being exploited across its products as part of the company’s regular Patch Tuesday security update. In all, August’s monthly round of patches from Microsoft included 87 vulnerabilities, seven of which are considered critical.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.