CVE-2024-49147: Microsoft Update Catalog Elevation of Privilege Vulnerability
9.3
CVSS
Description
Deserialization of untrusted data in Microsoft Update Catalog allows an unauthorized attacker to elevate privileges on the website’s webserver.
Classification
CVE ID: CVE-2024-49147
CVSS Base Severity: CRITICAL
CVSS Base Score: 9.3
Affected Products
Vendor: Microsoft
Product: Microsoft Update Catalog
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.21% (probability of being exploited)
EPSS Percentile: 58.86% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)