Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
CVE-2024-49093 |
Description: Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
CVSS: HIGH (8.8) EPSS Score: 0.05%
December 12th, 2024 (4 months ago)
|
|
CVE-2024-49092 |
Description: Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
CVSS: MEDIUM (6.8) EPSS Score: 0.05%
December 12th, 2024 (4 months ago)
|
|
CVE-2024-49091 |
Description: Windows Domain Name Service Remote Code Execution Vulnerability
CVSS: HIGH (7.2) EPSS Score: 0.05%
December 12th, 2024 (4 months ago)
|
|
Description: A critical flaw in the company's rate limit for failed sign-in attempts allowed unauthorized access to a user account, including Outlook emails, OneDrive files, Teams chats, Azure Cloud, and more.
December 11th, 2024 (4 months ago)
|
|
|
Description: The Russian nation-state actor tracked as Secret Blizzard has been observed leveraging malware associated with other threat actors to deploy a known backdoor called Kazuar on target devices located in Ukraine.
The new findings come from the Microsoft threat intelligence team, which said it observed the adversary leveraging the Amadey bot malware to download custom malware onto "specifically
December 11th, 2024 (4 months ago)
|
|
|
Description: Cybersecurity researchers have flagged a "critical" security vulnerability in Microsoft's multi-factor authentication (MFA) implementation that allows an attacker to trivially sidestep the protection and gain unauthorized access to a victim's account.
"The bypass was simple: it took around an hour to execute, required no user interaction and did not generate any notification or provide the
December 11th, 2024 (4 months ago)
|
|
|
Description: Microsoft closed out its Patch Tuesday updates for 2024 with fixes for a total of 72 security flaws spanning its software portfolio, including one that it said has been exploited in the wild.
Of the 72 flaws, 17 are rated Critical, 54 are rated Important, and one is rated Moderate in severity. Thirty-one of the vulnerabilities are remote code execution flaws, and 27 of them allow for the
December 11th, 2024 (4 months ago)
|
|
CVE-2024-49118 |
Description: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVSS: HIGH (8.1) EPSS Score: 0.05%
December 11th, 2024 (4 months ago)
|
|
CVE-2024-49115 |
Description: Windows Remote Desktop Services Remote Code Execution Vulnerability
CVSS: HIGH (8.1) EPSS Score: 0.05%
December 11th, 2024 (4 months ago)
|
|
CVE-2024-49113 |
Description: Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
CVSS: HIGH (7.5) EPSS Score: 0.05%
December 11th, 2024 (4 months ago)
|