cvelistv5 - cve-2024-49138

CVE-2024-49138 (GCVE-0-2024-49138)

Vulnerability from cvelistv5

Published

2024-12-10 17:49

Modified

2025-07-30 01:36

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE

CWE-122 - Heap-based Buffer Overflow

Summary

Windows Common Log File System Driver Elevation of Privilege Vulnerability

References

►

URL

CISA Known exploited vulnerability

Data from the Known Exploited Vulnerabilities Catalog

Date added: 2024-12-10

Due date: 2024-12-31

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Used in ransomware: Unknown

Notes: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-49138 ; https://nvd.nist.gov/vuln/detail/CVE-2024-49138

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-49138",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-12-19T04:55:27.058430Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2024-12-10",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-49138"
              },
              "type": "kev"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-30T01:36:24.241Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "timeline": [
          {
            "lang": "en",
            "time": "2024-12-10T00:00:00+00:00",
            "value": "CVE-2024-49138 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-04-24T18:26:15.535Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://www.exploit-db.com/exploits/52270"
          },
          {
            "url": "https://packetstorm.news/files/id/190585/"
          }
        ],
        "title": "CVE Program Container",
        "x_generator": {
          "engine": "ADPogram 0.0.1"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 1809",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.6659",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2019",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.6659",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2019 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.6659",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2022",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.20348.2966",
              "status": "affected",
              "version": "10.0.20348.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 21H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.19044.5247",
              "status": "affected",
              "version": "10.0.19043.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 11 version 22H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.22621.4602",
              "status": "affected",
              "version": "10.0.22621.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems",
            "ARM64-based Systems",
            "32-bit Systems"
          ],
          "product": "Windows 10 Version 22H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.19045.5247",
              "status": "affected",
              "version": "10.0.19045.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2025 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.26100.2605",
              "status": "affected",
              "version": "10.0.26100.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "ARM64-based Systems"
          ],
          "product": "Windows 11 version 22H3",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.22631.4602",
              "status": "affected",
              "version": "10.0.22631.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows 11 Version 23H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.22631.4602",
              "status": "affected",
              "version": "10.0.22631.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2022, 23H2 Edition (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.25398.1308",
              "status": "affected",
              "version": "10.0.25398.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 11 Version 24H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.26100.2605",
              "status": "affected",
              "version": "10.0.26100.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2025",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.26100.2605",
              "status": "affected",
              "version": "10.0.26100.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 1507",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.10240.20857",
              "status": "affected",
              "version": "10.0.10240.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 1607",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.7606",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2016",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.7606",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2016 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.7606",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems"
          ],
          "product": "Windows Server 2008 Service Pack 2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.0.6003.23016",
              "status": "affected",
              "version": "6.0.6003.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows Server 2008 Service Pack 2 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.0.6003.23016",
              "status": "affected",
              "version": "6.0.6003.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2008  Service Pack 2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.0.6003.23016",
              "status": "affected",
              "version": "6.0.6003.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2008 R2 Service Pack 1",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.1.7601.27467",
              "status": "affected",
              "version": "6.1.7601.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.1.7601.27467",
              "status": "affected",
              "version": "6.1.7601.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.2.9200.25222",
              "status": "affected",
              "version": "6.2.9200.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.2.9200.25222",
              "status": "affected",
              "version": "6.2.9200.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 R2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.3.9600.22318",
              "status": "affected",
              "version": "6.3.9600.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 R2 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.3.9600.22318",
              "status": "affected",
              "version": "6.3.9600.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.17763.6659",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.17763.6659",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.17763.6659",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.20348.2966",
                  "versionStartIncluding": "10.0.20348.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.19044.5247",
                  "versionStartIncluding": "10.0.19043.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_22H2:*:*:*:*:*:*:arm64:*",
                  "versionEndExcluding": "10.0.22621.4602",
                  "versionStartIncluding": "10.0.22621.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "10.0.19045.5247",
                  "versionStartIncluding": "10.0.19045.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.26100.2605",
                  "versionStartIncluding": "10.0.26100.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*",
                  "versionEndExcluding": "10.0.22631.4602",
                  "versionStartIncluding": "10.0.22631.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "10.0.22631.4602",
                  "versionStartIncluding": "10.0.22631.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_23h2:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.25398.1308",
                  "versionStartIncluding": "10.0.25398.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*",
                  "versionEndExcluding": "10.0.26100.2605",
                  "versionStartIncluding": "10.0.26100.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.26100.2605",
                  "versionStartIncluding": "10.0.26100.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.10240.20857",
                  "versionStartIncluding": "10.0.10240.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.14393.7606",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.14393.7606",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.14393.7606",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.0.6003.23016",
                  "versionStartIncluding": "6.0.6003.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.0.6003.23016",
                  "versionStartIncluding": "6.0.6003.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "6.0.6003.23016",
                  "versionStartIncluding": "6.0.6003.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.1.7601.27467",
                  "versionStartIncluding": "6.1.7601.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.1.7601.27467",
                  "versionStartIncluding": "6.1.7601.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.2.9200.25222",
                  "versionStartIncluding": "6.2.9200.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.2.9200.25222",
                  "versionStartIncluding": "6.2.9200.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.3.9600.22318",
                  "versionStartIncluding": "6.3.9600.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.3.9600.22318",
                  "versionStartIncluding": "6.3.9600.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2024-12-10T08:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Windows Common Log File System Driver Elevation of Privilege Vulnerability"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122: Heap-based Buffer Overflow",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-13T15:25:46.585Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Windows Common Log File System Driver Elevation of Privilege Vulnerability",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49138"
        }
      ],
      "title": "Windows Common Log File System Driver Elevation of Privilege Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2024-49138",
    "datePublished": "2024-12-10T17:49:48.419Z",
    "dateReserved": "2024-10-11T20:57:49.210Z",
    "dateUpdated": "2025-07-30T01:36:24.241Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "cisa_known_exploited": {
      "cveID": "CVE-2024-49138",
      "cwes": "[\"CWE-122\"]",
      "dateAdded": "2024-12-10",
      "dueDate": "2024-12-31",
      "knownRansomwareCampaignUse": "Unknown",
      "notes": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-49138 ; https://nvd.nist.gov/vuln/detail/CVE-2024-49138",
      "product": "Windows",
      "requiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",
      "shortDescription": "Microsoft Windows Common Log File System (CLFS) driver contains a heap-based buffer overflow vulnerability that allows a local attacker to escalate privileges.",
      "vendorProject": "Microsoft",
      "vulnerabilityName": "Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-49138\",\"sourceIdentifier\":\"secure@microsoft.com\",\"published\":\"2024-12-12T02:04:40.307\",\"lastModified\":\"2025-04-28T20:48:07.563\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Windows Common Log File System Driver Elevation of Privilege Vulnerability\"},{\"lang\":\"es\",\"value\":\" Vulnerabilidad de elevaci\u00f3n de privilegios en Windows Common Log File System Driver\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"secure@microsoft.com\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}]},\"cisaExploitAdd\":\"2024-12-10\",\"cisaActionDue\":\"2024-12-31\",\"cisaRequiredAction\":\"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.\",\"cisaVulnerabilityName\":\"Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability\",\"weaknesses\":[{\"source\":\"secure@microsoft.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-122\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*\",\"versionEndExcluding\":\"10.0.10240.20857\",\"matchCriteriaId\":\"10F567C3-3739-4F3D-B9E0-D2725D09CE0D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*\",\"versionEndExcluding\":\"10.0.10240.20857\",\"matchCriteriaId\":\"04D1F48B-C323-4062-B5E1-9700ADBB153C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*\",\"versionEndExcluding\":\"10.0.14393.7606\",\"matchCriteriaId\":\"29B44B5E-3D35-4A5B-A916-6E70923FAB7C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*\",\"versionEndExcluding\":\"10.0.14393.7606\",\"matchCriteriaId\":\"77EAFFB9-3053-4197-B52D-69F4F86C8FBA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*\",\"versionEndExcluding\":\"10.0.17763.6659\",\"matchCriteriaId\":\"5FA7C375-3A7C-4F34-B6E7-82C187B4F7AF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*\",\"versionEndExcluding\":\"10.0.17763.6659\",\"matchCriteriaId\":\"576F141F-C874-4817-961A-2C4D2AB3DEA4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*\",\"versionEndExcluding\":\"10.0.19044.5247\",\"matchCriteriaId\":\"2BD1D819-7D27-4181-9672-0F1DC6F15BA1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*\",\"versionEndExcluding\":\"10.0.19044.5247\",\"matchCriteriaId\":\"6DF22110-AA81-4D46-BE27-A3F70112AD44\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*\",\"versionEndExcluding\":\"10.0.19044.5247\",\"matchCriteriaId\":\"A374923B-799C-4057-9C77-DE03A20FF4FE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*\",\"versionEndExcluding\":\"10.0.19045.5247\",\"matchCriteriaId\":\"979EA48D-ED87-4852-B436-D730A9130BA9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*\",\"versionEndExcluding\":\"10.0.19045.5247\",\"matchCriteriaId\":\"1FA81A8A-13B7-4180-8F8E-9079F6C82353\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*\",\"versionEndExcluding\":\"10.0.19045.5247\",\"matchCriteriaId\":\"9ACEFC50-0F9A-45DF-9002-B823DAE1FE97\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:arm64:*\",\"versionEndExcluding\":\"10.0.22621.4602\",\"matchCriteriaId\":\"C928D5FD-9F91-4BC7-A151-76B72F9539B3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:x64:*\",\"versionEndExcluding\":\"10.0.22621.4602\",\"matchCriteriaId\":\"943E002C-645E-4AA0-B15A-621B79DF97A5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*\",\"versionEndExcluding\":\"10.0.22631.4602\",\"matchCriteriaId\":\"ED3FE198-9DED-4108-AFAC-3BBF93AC7779\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*\",\"versionEndExcluding\":\"10.0.22631.4602\",\"matchCriteriaId\":\"3B0A1BFF-C699-4863-AAEC-0F304BB3255C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*\",\"versionEndExcluding\":\"10.0.26100.2605\",\"matchCriteriaId\":\"8F34994C-CF51-49A4-8985-9B0C6EF1C3A2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*\",\"versionEndExcluding\":\"10.0.26100.2605\",\"matchCriteriaId\":\"40E04CC5-22CA-4D16-9B1F-695277A5D83E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*\",\"matchCriteriaId\":\"AB425562-C0A0-452E-AABE-F70522F15E1A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*\",\"matchCriteriaId\":\"AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2008:sp2:*:*:*:*:*:x64:*\",\"matchCriteriaId\":\"C0DC57FA-88F8-4D5C-94BD-3A8B1FB8C047\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A7DF96F8-BA6A-4780-9CA3-F719B3F81074\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB18C4CE-5917-401E-ACF7-2747084FD36E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.14393.7606\",\"matchCriteriaId\":\"361D1B8E-6E56-4B5F-85D1-D47114A10A81\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.17763.6659\",\"matchCriteriaId\":\"11517523-F822-45BC-B347-C65F00B45202\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.20348.2966\",\"matchCriteriaId\":\"AECABB2C-DACB-4BBD-8739-DDB00285B0A7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.25398.1308\",\"matchCriteriaId\":\"37977CFB-B259-49B8-B0C5-85ECB40FE429\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.26100.2605\",\"matchCriteriaId\":\"E013EA3C-6F18-4CA4-AF5B-664F869B9A6D\"}]}]}],\"references\":[{\"url\":\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49138\",\"source\":\"secure@microsoft.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://packetstorm.news/files/id/190585/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"VDB Entry\"]},{\"url\":\"https://www.exploit-db.com/exploits/52270\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"VDB Entry\"]}]}}",
    "vulnrichment": {
      "containers": "{\"cna\": {\"title\": \"Windows Common Log File System Driver Elevation of Privilege Vulnerability\", \"datePublic\": \"2024-12-10T08:00:00.000Z\", \"cpeApplicability\": [{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*\", \"versionStartIncluding\": \"10.0.17763.0\", \"versionEndExcluding\": \"10.0.17763.6659\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.0.17763.0\", \"versionEndExcluding\": \"10.0.17763.6659\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.0.17763.0\", \"versionEndExcluding\": \"10.0.17763.6659\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.0.20348.0\", \"versionEndExcluding\": \"10.0.20348.2966\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*\", \"versionStartIncluding\": \"10.0.19043.0\", \"versionEndExcluding\": \"10.0.19044.5247\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_11_22H2:*:*:*:*:*:*:arm64:*\", \"versionStartIncluding\": \"10.0.22621.0\", \"versionEndExcluding\": \"10.0.22621.4602\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*\", \"versionStartIncluding\": \"10.0.19045.0\", \"versionEndExcluding\": \"10.0.19045.5247\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.0.26100.0\", \"versionEndExcluding\": \"10.0.26100.2605\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*\", \"versionStartIncluding\": \"10.0.22631.0\", \"versionEndExcluding\": \"10.0.22631.4602\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*\", \"versionStartIncluding\": \"10.0.22631.0\", \"versionEndExcluding\": \"10.0.22631.4602\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_23h2:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.0.25398.0\", \"versionEndExcluding\": \"10.0.25398.1308\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*\", \"versionStartIncluding\": \"10.0.26100.0\", \"versionEndExcluding\": \"10.0.26100.2605\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.0.26100.0\", \"versionEndExcluding\": \"10.0.26100.2605\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*\", \"versionStartIncluding\": \"10.0.10240.0\", \"versionEndExcluding\": \"10.0.10240.20857\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*\", \"versionStartIncluding\": \"10.0.14393.0\", \"versionEndExcluding\": \"10.0.14393.7606\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.0.14393.0\", \"versionEndExcluding\": \"10.0.14393.7606\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.0.14393.0\", \"versionEndExcluding\": \"10.0.14393.7606\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*\", \"versionStartIncluding\": \"6.0.6003.0\", \"versionEndExcluding\": \"6.0.6003.23016\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*\", \"versionStartIncluding\": \"6.0.6003.0\", \"versionEndExcluding\": \"6.0.6003.23016\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x86:*\", \"versionStartIncluding\": \"6.0.6003.0\", \"versionEndExcluding\": \"6.0.6003.23016\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*\", \"versionStartIncluding\": \"6.1.7601.0\", \"versionEndExcluding\": \"6.1.7601.27467\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*\", \"versionStartIncluding\": \"6.1.7601.0\", \"versionEndExcluding\": \"6.1.7601.27467\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*\", \"versionStartIncluding\": \"6.2.9200.0\", \"versionEndExcluding\": \"6.2.9200.25222\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*\", \"versionStartIncluding\": \"6.2.9200.0\", \"versionEndExcluding\": \"6.2.9200.25222\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*\", \"versionStartIncluding\": \"6.3.9600.0\", \"versionEndExcluding\": \"6.3.9600.22318\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*\", \"versionStartIncluding\": \"6.3.9600.0\", \"versionEndExcluding\": \"6.3.9600.22318\"}]}]}], \"affected\": [{\"vendor\": \"Microsoft\", \"product\": \"Windows 10 Version 1809\", \"platforms\": [\"32-bit Systems\", \"x64-based Systems\"], \"versions\": [{\"version\": \"10.0.17763.0\", \"lessThan\": \"10.0.17763.6659\", \"versionType\": \"custom\", \"status\": \"affected\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2019\", \"platforms\": [\"x64-based Systems\"], \"versions\": [{\"version\": \"10.0.17763.0\", \"lessThan\": \"10.0.17763.6659\", \"versionType\": \"custom\", \"status\": \"affected\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2019 (Server Core installation)\", \"platforms\": [\"x64-based Systems\"], \"versions\": [{\"version\": \"10.0.17763.0\", \"lessThan\": \"10.0.17763.6659\", \"versionType\": \"custom\", \"status\": \"affected\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2022\", \"platforms\": [\"x64-based Systems\"], \"versions\": [{\"version\": \"10.0.20348.0\", \"lessThan\": \"10.0.20348.2966\", \"versionType\": \"custom\", \"status\": \"affected\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 10 Version 21H2\", \"platforms\": [\"32-bit Systems\", \"ARM64-based Systems\", \"x64-based Systems\"], \"versions\": [{\"version\": \"10.0.19043.0\", \"lessThan\": \"10.0.19044.5247\", \"versionType\": \"custom\", \"status\": \"affected\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 11 version 22H2\", \"platforms\": [\"ARM64-based Systems\", \"x64-based Systems\"], \"versions\": [{\"version\": \"10.0.22621.0\", \"lessThan\": \"10.0.22621.4602\", \"versionType\": \"custom\", \"status\": \"affected\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 10 Version 22H2\", \"platforms\": [\"x64-based Systems\", \"ARM64-based Systems\", \"32-bit Systems\"], \"versions\": [{\"version\": \"10.0.19045.0\", \"lessThan\": \"10.0.19045.5247\", \"versionType\": \"custom\", \"status\": \"affected\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2025 (Server Core installation)\", \"platforms\": [\"x64-based Systems\"], \"versions\": [{\"version\": \"10.0.26100.0\", \"lessThan\": \"10.0.26100.2605\", \"versionType\": \"custom\", \"status\": \"affected\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 11 version 22H3\", \"platforms\": [\"ARM64-based Systems\"], \"versions\": [{\"version\": \"10.0.22631.0\", \"lessThan\": \"10.0.22631.4602\", \"versionType\": \"custom\", \"status\": \"affected\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 11 Version 23H2\", \"platforms\": [\"x64-based Systems\"], \"versions\": [{\"version\": \"10.0.22631.0\", \"lessThan\": \"10.0.22631.4602\", \"versionType\": \"custom\", \"status\": \"affected\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2022, 23H2 Edition (Server Core installation)\", \"platforms\": [\"x64-based Systems\"], \"versions\": [{\"version\": \"10.0.25398.0\", \"lessThan\": \"10.0.25398.1308\", \"versionType\": \"custom\", \"status\": \"affected\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 11 Version 24H2\", \"platforms\": [\"ARM64-based Systems\", \"x64-based Systems\"], \"versions\": [{\"version\": \"10.0.26100.0\", \"lessThan\": \"10.0.26100.2605\", \"versionType\": \"custom\", \"status\": \"affected\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2025\", \"platforms\": [\"x64-based Systems\"], \"versions\": [{\"version\": \"10.0.26100.0\", \"lessThan\": \"10.0.26100.2605\", \"versionType\": \"custom\", \"status\": \"affected\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 10 Version 1507\", \"platforms\": [\"32-bit Systems\", \"x64-based Systems\"], \"versions\": [{\"version\": \"10.0.10240.0\", \"lessThan\": \"10.0.10240.20857\", \"versionType\": \"custom\", \"status\": \"affected\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 10 Version 1607\", \"platforms\": [\"32-bit Systems\", \"x64-based Systems\"], \"versions\": [{\"version\": \"10.0.14393.0\", \"lessThan\": \"10.0.14393.7606\", \"versionType\": \"custom\", \"status\": \"affected\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2016\", \"platforms\": [\"x64-based Systems\"], \"versions\": [{\"version\": \"10.0.14393.0\", \"lessThan\": \"10.0.14393.7606\", \"versionType\": \"custom\", \"status\": \"affected\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2016 (Server Core installation)\", \"platforms\": [\"x64-based Systems\"], \"versions\": [{\"version\": \"10.0.14393.0\", \"lessThan\": \"10.0.14393.7606\", \"versionType\": \"custom\", \"status\": \"affected\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2008 Service Pack 2\", \"platforms\": [\"32-bit Systems\"], \"versions\": [{\"version\": \"6.0.6003.0\", \"lessThan\": \"6.0.6003.23016\", \"versionType\": \"custom\", \"status\": \"affected\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2008 Service Pack 2 (Server Core installation)\", \"platforms\": [\"32-bit Systems\", \"x64-based Systems\"], \"versions\": [{\"version\": \"6.0.6003.0\", \"lessThan\": \"6.0.6003.23016\", \"versionType\": \"custom\", \"status\": \"affected\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2008  Service Pack 2\", \"platforms\": [\"x64-based Systems\"], \"versions\": [{\"version\": \"6.0.6003.0\", \"lessThan\": \"6.0.6003.23016\", \"versionType\": \"custom\", \"status\": \"affected\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2008 R2 Service Pack 1\", \"platforms\": [\"x64-based Systems\"], \"versions\": [{\"version\": \"6.1.7601.0\", \"lessThan\": \"6.1.7601.27467\", \"versionType\": \"custom\", \"status\": \"affected\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2008 R2 Service Pack 1 (Server Core installation)\", \"platforms\": [\"x64-based Systems\"], \"versions\": [{\"version\": \"6.1.7601.0\", \"lessThan\": \"6.1.7601.27467\", \"versionType\": \"custom\", \"status\": \"affected\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2012\", \"platforms\": [\"x64-based Systems\"], \"versions\": [{\"version\": \"6.2.9200.0\", \"lessThan\": \"6.2.9200.25222\", \"versionType\": \"custom\", \"status\": \"affected\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2012 (Server Core installation)\", \"platforms\": [\"x64-based Systems\"], \"versions\": [{\"version\": \"6.2.9200.0\", \"lessThan\": \"6.2.9200.25222\", \"versionType\": \"custom\", \"status\": \"affected\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2012 R2\", \"platforms\": [\"x64-based Systems\"], \"versions\": [{\"version\": \"6.3.9600.0\", \"lessThan\": \"6.3.9600.22318\", \"versionType\": \"custom\", \"status\": \"affected\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2012 R2 (Server Core installation)\", \"platforms\": [\"x64-based Systems\"], \"versions\": [{\"version\": \"6.3.9600.0\", \"lessThan\": \"6.3.9600.22318\", \"versionType\": \"custom\", \"status\": \"affected\"}]}], \"descriptions\": [{\"value\": \"Windows Common Log File System Driver Elevation of Privilege Vulnerability\", \"lang\": \"en-US\"}], \"problemTypes\": [{\"descriptions\": [{\"description\": \"CWE-122: Heap-based Buffer Overflow\", \"lang\": \"en-US\", \"type\": \"CWE\", \"cweId\": \"CWE-122\"}]}], \"providerMetadata\": {\"orgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"shortName\": \"microsoft\", \"dateUpdated\": \"2025-05-13T15:25:46.585Z\"}, \"references\": [{\"name\": \"Windows Common Log File System Driver Elevation of Privilege Vulnerability\", \"tags\": [\"vendor-advisory\"], \"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49138\"}], \"metrics\": [{\"format\": \"CVSS\", \"scenarios\": [{\"lang\": \"en-US\", \"value\": \"GENERAL\"}], \"cvssV3_1\": {\"version\": \"3.1\", \"baseSeverity\": \"HIGH\", \"baseScore\": 7.8, \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C\"}}]}, \"adp\": [{\"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2025-04-24T18:26:15.535Z\"}, \"references\": [{\"url\": \"https://www.exploit-db.com/exploits/52270\"}, {\"url\": \"https://packetstorm.news/files/id/190585/\"}], \"title\": \"CVE Program Container\", \"x_generator\": {\"engine\": \"ADPogram 0.0.1\"}}, {\"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-49138\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-12-19T04:55:27.058430Z\"}}}, {\"other\": {\"type\": \"kev\", \"content\": {\"dateAdded\": \"2024-12-10\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-49138\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-12-10T18:39:12.625Z\"}, \"timeline\": [{\"time\": \"2024-12-10T00:00:00+00:00\", \"lang\": \"en\", \"value\": \"CVE-2024-49138 added to CISA KEV\"}], \"title\": \"CISA ADP Vulnrichment\"}]}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-49138\", \"assignerOrgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"state\": \"PUBLISHED\", \"assignerShortName\": \"microsoft\", \"dateReserved\": \"2024-10-11T20:57:49.210Z\", \"datePublished\": \"2024-12-10T17:49:48.419Z\", \"dateUpdated\": \"2025-07-30T01:25:40.388Z\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

ncsc-2024-0470

Vulnerability from csaf_ncscnl

Published

2024-12-10 19:32

Modified

2025-01-06 07:30

Summary

Kwetsbaarheden verholpen in Microsoft Windows

Notes

The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions: NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein. NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory. This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.

Feiten

Microsoft heeft kwetsbaarheden verholpen in Windows.

Interpretaties

UPDATE: Onderzoekers hebben proof of concept (PoC) code gepubliceerd, waarmee de kwetsbaarheid met kenmerk CVE-2024-49113 kan worden aangetoond. Succesvol misbruik vereist dat de kwaadwillende toegang heeft tot zowel een DC met LDAP en een malafide server onder eigen controle. Hierdoor is misbruik niet eenvoudig te realiseren, maar neemt de kans erop wel toe. Succesvol misbruik resulteert in een Denial-of-Service van het kwetsbare systeem. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade: - Denial-of-Service (DoS) - Uitvoer van willekeurige code (Gebruikersrechten) - Uitvoer van willekeurige code (Systeemrechten) - Verkrijgen van verhoogde rechten - Toegang tot gevoelige gegevens De ernstigste kwetsbaarheid heeft kenmerk CVE-2024-49112 toegewezen gekregen en bevindt zich in de LDAP-component van de Domain Controller. Een kwaadwillende kan de kwetsbaarheid misbruiken om zonder voorafgaande authenticatie uitvoer van willekeurige code mogelijk te maken middels een malafide LDAP-call. Succesvol misbruik vereist wel dat de kwaadwillende LAN-toegang tot de Domain Controller heeft. ``` Windows Kernel-Mode Drivers: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49074 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Remote Desktop Client: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49105 | 8.40 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Windows Mobile Broadband: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49073 | 6.80 | Verkrijgen van verhoogde rechten | | CVE-2024-49087 | 4.60 | Toegang tot gevoelige gegevens | | CVE-2024-49092 | 6.80 | Verkrijgen van verhoogde rechten | | CVE-2024-49077 | 6.80 | Verkrijgen van verhoogde rechten | | CVE-2024-49078 | 6.80 | Verkrijgen van verhoogde rechten | | CVE-2024-49083 | 6.80 | Verkrijgen van verhoogde rechten | | CVE-2024-49110 | 6.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows PrintWorkflowUserSvc: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49097 | 7.00 | Verkrijgen van verhoogde rechten | | CVE-2024-49095 | 7.00 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Kernel: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49084 | 7.00 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Remote Desktop: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49132 | 8.10 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Windows Routing and Remote Access Service (RRAS): |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49085 | 8.80 | Uitvoeren van willekeurige code | | CVE-2024-49086 | 8.80 | Uitvoeren van willekeurige code | | CVE-2024-49089 | 7.20 | Uitvoeren van willekeurige code | | CVE-2024-49102 | 8.80 | Uitvoeren van willekeurige code | | CVE-2024-49104 | 8.80 | Uitvoeren van willekeurige code | | CVE-2024-49125 | 8.80 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Role: DNS Server: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49091 | 7.20 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Role: Windows Hyper-V: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49117 | 8.80 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Windows LDAP - Lightweight Directory Access Protocol: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49121 | 7.50 | Denial-of-Service | | CVE-2024-49124 | 8.10 | Uitvoeren van willekeurige code | | CVE-2024-49112 | 9.80 | Uitvoeren van willekeurige code | | CVE-2024-49113 | 7.50 | Denial-of-Service | | CVE-2024-49127 | 8.10 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Microsoft Office Publisher: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49079 | 7.80 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Windows IP Routing Management Snapin: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49080 | 8.80 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Windows Resilient File System (ReFS): |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49093 | 8.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Task Scheduler: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49072 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Remote Desktop Services: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49106 | 8.10 | Uitvoeren van willekeurige code | | CVE-2024-49108 | 8.10 | Uitvoeren van willekeurige code | | CVE-2024-49115 | 8.10 | Uitvoeren van willekeurige code | | CVE-2024-49119 | 8.10 | Uitvoeren van willekeurige code | | CVE-2024-49120 | 8.10 | Uitvoeren van willekeurige code | | CVE-2024-49123 | 8.10 | Uitvoeren van willekeurige code | | CVE-2024-49129 | 7.50 | Denial-of-Service | | CVE-2024-49075 | 7.50 | Denial-of-Service | | CVE-2024-49116 | 8.10 | Uitvoeren van willekeurige code | | CVE-2024-49128 | 8.10 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Windows Wireless Wide Area Network Service: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49094 | 6.60 | Verkrijgen van verhoogde rechten | | CVE-2024-49098 | 4.30 | Toegang tot gevoelige gegevens | | CVE-2024-49099 | 4.30 | Toegang tot gevoelige gegevens | | CVE-2024-49101 | 6.60 | Verkrijgen van verhoogde rechten | | CVE-2024-49103 | 4.30 | Toegang tot gevoelige gegevens | | CVE-2024-49111 | 6.60 | Verkrijgen van verhoogde rechten | | CVE-2024-49081 | 6.60 | Verkrijgen van verhoogde rechten | | CVE-2024-49109 | 6.60 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| WmsRepair Service: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49107 | 7.30 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Local Security Authority Subsystem Service (LSASS): |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49126 | 8.10 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Windows Message Queuing: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49096 | 7.50 | Denial-of-Service | | CVE-2024-49122 | 8.10 | Uitvoeren van willekeurige code | | CVE-2024-49118 | 8.10 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Windows Common Log File System Driver: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49088 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2024-49090 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2024-49138 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Cloud Files Mini Filter Driver: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49114 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Virtualization-Based Security (VBS) Enclave: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49076 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows File Explorer: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49082 | 6.80 | Toegang tot gevoelige gegevens | |----------------|------|-------------------------------------| System Center Operations Manager: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-43594 | 7.30 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| ```

Oplossingen

Microsoft heeft updates beschikbaar gesteld waarmee de beschreven kwetsbaarheden worden verholpen. We raden u aan om deze updates te installeren. Meer informatie over de kwetsbaarheden, de installatie van de updates en eventuele work-arounds vindt u op: https://portal.msrc.microsoft.com/en-us/security-guidance

Kans

medium

Schade

high

CWE-591

Sensitive Data Storage in Improperly Locked Memory

CWE-393

Return of Wrong Status Code

CWE-453

Insecure Default Variable Initialization

CWE-820

Missing Synchronization

CWE-59

Improper Link Resolution Before File Access ('Link Following')

CWE-191

Integer Underflow (Wrap or Wraparound)

CWE-822

Untrusted Pointer Dereference

CWE-126

Buffer Over-read

CWE-415

Double Free

CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CWE-190

Integer Overflow or Wraparound

CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CWE-125

Out-of-bounds Read

CWE-284

Improper Access Control

CWE-416

Use After Free

CWE-476

NULL Pointer Dereference

CWE-400

Uncontrolled Resource Consumption

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CWE-122

Heap-based Buffer Overflow

CWE-681

Incorrect Conversion between Numeric Types

CWE-20

Improper Input Validation

CWE-287

Improper Authentication

JSON

To clipboard

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "nl",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
      },
      {
        "category": "description",
        "text": "Microsoft heeft kwetsbaarheden verholpen in Windows.",
        "title": "Feiten"
      },
      {
        "category": "description",
        "text": "UPDATE: \nOnderzoekers hebben proof of concept (PoC) code gepubliceerd, waarmee de kwetsbaarheid met kenmerk CVE-2024-49113 kan worden aangetoond. Succesvol misbruik vereist dat de kwaadwillende toegang heeft tot zowel een DC met LDAP en een malafide server onder eigen controle. Hierdoor is misbruik niet eenvoudig te realiseren, maar neemt de kans erop wel toe. Succesvol misbruik resulteert in een Denial-of-Service van het kwetsbare systeem.\n\n\nEen kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorie\u00ebn schade:\n\n- Denial-of-Service (DoS)\n- Uitvoer van willekeurige code (Gebruikersrechten)\n- Uitvoer van willekeurige code (Systeemrechten)\n- Verkrijgen van verhoogde rechten\n- Toegang tot gevoelige gegevens\n\nDe ernstigste kwetsbaarheid heeft kenmerk CVE-2024-49112 toegewezen gekregen en bevindt zich in de LDAP-component van de Domain Controller. Een kwaadwillende kan de kwetsbaarheid misbruiken om zonder voorafgaande authenticatie uitvoer van willekeurige code mogelijk te maken middels een malafide LDAP-call. Succesvol misbruik vereist wel dat de kwaadwillende LAN-toegang tot de Domain Controller heeft.\n\n```\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49074 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49105 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Mobile Broadband: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49073 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2024-49087 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2024-49092 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2024-49077 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2024-49078 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2024-49083 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2024-49110 | 6.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PrintWorkflowUserSvc: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49097 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2024-49095 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49084 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49132 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49085 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2024-49086 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2024-49089 | 7.20 | Uitvoeren van willekeurige code     | \n| CVE-2024-49102 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2024-49104 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2024-49125 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49091 | 7.20 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRole: Windows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49117 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49121 | 7.50 | Denial-of-Service                   | \n| CVE-2024-49124 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2024-49112 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2024-49113 | 7.50 | Denial-of-Service                   | \n| CVE-2024-49127 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Publisher: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49079 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows IP Routing Management Snapin: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49080 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49093 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Task Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49072 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49106 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2024-49108 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2024-49115 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2024-49119 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2024-49120 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2024-49123 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2024-49129 | 7.50 | Denial-of-Service                   | \n| CVE-2024-49075 | 7.50 | Denial-of-Service                   | \n| CVE-2024-49116 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2024-49128 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49094 | 6.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2024-49098 | 4.30 | Toegang tot gevoelige gegevens      | \n| CVE-2024-49099 | 4.30 | Toegang tot gevoelige gegevens      | \n| CVE-2024-49101 | 6.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2024-49103 | 4.30 | Toegang tot gevoelige gegevens      | \n| CVE-2024-49111 | 6.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2024-49081 | 6.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2024-49109 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWmsRepair Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49107 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49126 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49096 | 7.50 | Denial-of-Service                   | \n| CVE-2024-49122 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2024-49118 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49088 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2024-49090 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2024-49138 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49114 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtualization-Based Security (VBS) Enclave: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49076 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49082 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nSystem Center Operations Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-43594 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n```",
        "title": "Interpretaties"
      },
      {
        "category": "description",
        "text": "Microsoft heeft updates beschikbaar gesteld waarmee de beschreven kwetsbaarheden worden verholpen. We raden u aan om deze updates te installeren. Meer informatie over de kwetsbaarheden, de installatie van de updates en eventuele work-arounds vindt u op:\n\nhttps://portal.msrc.microsoft.com/en-us/security-guidance",
        "title": "Oplossingen"
      },
      {
        "category": "general",
        "text": "medium",
        "title": "Kans"
      },
      {
        "category": "general",
        "text": "high",
        "title": "Schade"
      },
      {
        "category": "general",
        "text": "Sensitive Data Storage in Improperly Locked Memory",
        "title": "CWE-591"
      },
      {
        "category": "general",
        "text": "Return of Wrong Status Code",
        "title": "CWE-393"
      },
      {
        "category": "general",
        "text": "Insecure Default Variable Initialization",
        "title": "CWE-453"
      },
      {
        "category": "general",
        "text": "Missing Synchronization",
        "title": "CWE-820"
      },
      {
        "category": "general",
        "text": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
        "title": "CWE-59"
      },
      {
        "category": "general",
        "text": "Integer Underflow (Wrap or Wraparound)",
        "title": "CWE-191"
      },
      {
        "category": "general",
        "text": "Untrusted Pointer Dereference",
        "title": "CWE-822"
      },
      {
        "category": "general",
        "text": "Buffer Over-read",
        "title": "CWE-126"
      },
      {
        "category": "general",
        "text": "Double Free",
        "title": "CWE-415"
      },
      {
        "category": "general",
        "text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
        "title": "CWE-843"
      },
      {
        "category": "general",
        "text": "Integer Overflow or Wraparound",
        "title": "CWE-190"
      },
      {
        "category": "general",
        "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
        "title": "CWE-362"
      },
      {
        "category": "general",
        "text": "Out-of-bounds Read",
        "title": "CWE-125"
      },
      {
        "category": "general",
        "text": "Improper Access Control",
        "title": "CWE-284"
      },
      {
        "category": "general",
        "text": "Use After Free",
        "title": "CWE-416"
      },
      {
        "category": "general",
        "text": "NULL Pointer Dereference",
        "title": "CWE-476"
      },
      {
        "category": "general",
        "text": "Uncontrolled Resource Consumption",
        "title": "CWE-400"
      },
      {
        "category": "general",
        "text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
        "title": "CWE-22"
      },
      {
        "category": "general",
        "text": "Heap-based Buffer Overflow",
        "title": "CWE-122"
      },
      {
        "category": "general",
        "text": "Incorrect Conversion between Numeric Types",
        "title": "CWE-681"
      },
      {
        "category": "general",
        "text": "Improper Input Validation",
        "title": "CWE-20"
      },
      {
        "category": "general",
        "text": "Improper Authentication",
        "title": "CWE-287"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "cert@ncsc.nl",
      "name": "Nationaal Cyber Security Centrum",
      "namespace": "https://www.ncsc.nl/"
    },
    "title": "Kwetsbaarheden verholpen in Microsoft Windows",
    "tracking": {
      "current_release_date": "2025-01-06T07:30:29.655717Z",
      "id": "NCSC-2024-0470",
      "initial_release_date": "2024-12-10T19:32:38.846024Z",
      "revision_history": [
        {
          "date": "2024-12-10T19:32:38.846024Z",
          "number": "0",
          "summary": "Initiele versie"
        },
        {
          "date": "2025-01-06T07:30:29.655717Z",
          "number": "1",
          "summary": "Onderzoekers hebben proof of concept (PoC) code gepubliceerd, waarmee de kwetsbaarheid met kenmerk CVE-2024-49113 kan worden aangetoond."
        }
      ],
      "status": "final",
      "version": "1.0.1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "windows_11_22h2",
            "product": {
              "name": "windows_11_22h2",
              "product_id": "CSAFPID-1741412",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:microsoft:windows_11_22h2:10.0.22621.4602:*:*:*:*:*:x64:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_11_23h2",
            "product": {
              "name": "windows_11_23h2",
              "product_id": "CSAFPID-1741417",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:microsoft:windows_11_23h2:10.0.22631.4602:*:*:*:*:*:arm64:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_11_23h2",
            "product": {
              "name": "windows_11_23h2",
              "product_id": "CSAFPID-1741418",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:microsoft:windows_11_23h2:10.0.22631.4602:*:*:*:*:*:x64:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_11_24h2",
            "product": {
              "name": "windows_11_24h2",
              "product_id": "CSAFPID-1741420",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:microsoft:windows_11_24h2:10.0.26100.2605:*:*:*:*:*:arm64:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_11_24h2",
            "product": {
              "name": "windows_11_24h2",
              "product_id": "CSAFPID-1741421",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:microsoft:windows_11_24h2:10.0.26100.2605:*:*:*:*:*:x64:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_server_2008_r2",
            "product": {
              "name": "windows_server_2008_r2",
              "product_id": "CSAFPID-1741430",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:microsoft:windows_server_2008_r2:6.1.7601.27467:*:*:*:*:*:x64:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_server_2008_sp2",
            "product": {
              "name": "windows_server_2008_sp2",
              "product_id": "CSAFPID-1741428",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.23016:*:*:*:*:*:x64:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_server_2008_sp2",
            "product": {
              "name": "windows_server_2008_sp2",
              "product_id": "CSAFPID-1741429",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.23016:*:*:*:*:*:x86:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_server_2012",
            "product": {
              "name": "windows_server_2012",
              "product_id": "CSAFPID-1741431",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:microsoft:windows_server_2012:6.2.9200.25222:*:*:*:*:*:x64:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_server_2012_r2",
            "product": {
              "name": "windows_server_2012_r2",
              "product_id": "CSAFPID-1741432",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:microsoft:windows_server_2012_r2:6.3.9600.22318:*:*:*:*:*:x64:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_server_2016",
            "product": {
              "name": "windows_server_2016",
              "product_id": "CSAFPID-1741427",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.7606:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_server_2019",
            "product": {
              "name": "windows_server_2019",
              "product_id": "CSAFPID-1741407",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:microsoft:windows_server_2019:10.0.17763.6659:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_server_2022",
            "product": {
              "name": "windows_server_2022",
              "product_id": "CSAFPID-1741422",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:microsoft:windows_server_2022:10.0.20348.2966:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_server_2025",
            "product": {
              "name": "windows_server_2025",
              "product_id": "CSAFPID-1741416",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:microsoft:windows_server_2025:10.0.26100.2528:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_server_23h2",
            "product": {
              "name": "windows_server_23h2",
              "product_id": "CSAFPID-1741419",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:microsoft:windows_server_23h2:10.0.25398.1308:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "system_center_operations_manager",
            "product": {
              "name": "system_center_operations_manager",
              "product_id": "CSAFPID-618487",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:microsoft:system_center_operations_manager:2019:-:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "system_center_operations_manager",
            "product": {
              "name": "system_center_operations_manager",
              "product_id": "CSAFPID-634172",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:microsoft:system_center_operations_manager:2022:-:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "system_center_operations_manager",
            "product": {
              "name": "system_center_operations_manager",
              "product_id": "CSAFPID-1741404",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:microsoft:system_center_operations_manager:2025:-:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "system_center_operations_manager__scom__2019",
            "product": {
              "name": "system_center_operations_manager__scom__2019",
              "product_id": "CSAFPID-1718165",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:microsoft:system_center_operations_manager__scom__2019:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "system_center_operations_manager__scom__2022",
            "product": {
              "name": "system_center_operations_manager__scom__2022",
              "product_id": "CSAFPID-1718167",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:microsoft:system_center_operations_manager__scom__2022:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "system_center_operations_manager__scom__2025",
            "product": {
              "name": "system_center_operations_manager__scom__2025",
              "product_id": "CSAFPID-1741485",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:microsoft:system_center_operations_manager__scom__2025:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows",
            "product": {
              "name": "windows",
              "product_id": "CSAFPID-549001",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:microsoft:windows:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_10_version_1507",
            "product": {
              "name": "windows_10_version_1507",
              "product_id": "CSAFPID-1723936",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:microsoft:windows_10_version_1507:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_10_version_1607",
            "product": {
              "name": "windows_10_version_1607",
              "product_id": "CSAFPID-1723937",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:microsoft:windows_10_version_1607:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_10_version_1809",
            "product": {
              "name": "windows_10_version_1809",
              "product_id": "CSAFPID-1720442",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:microsoft:windows_10_version_1809:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_10_version_21h2",
            "product": {
              "name": "windows_10_version_21h2",
              "product_id": "CSAFPID-1741366",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:microsoft:windows_10_version_21h2:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_10_version_22h2",
            "product": {
              "name": "windows_10_version_22h2",
              "product_id": "CSAFPID-1741368",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:microsoft:windows_10_version_22h2:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_11_version_22h2",
            "product": {
              "name": "windows_11_version_22h2",
              "product_id": "CSAFPID-1741367",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:microsoft:windows_11_version_22h2:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_11_version_22h3",
            "product": {
              "name": "windows_11_version_22h3",
              "product_id": "CSAFPID-1741369",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:microsoft:windows_11_version_22h3:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_11_version_23h2",
            "product": {
              "name": "windows_11_version_23h2",
              "product_id": "CSAFPID-1741370",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:microsoft:windows_11_version_23h2:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_11_version_24h2",
            "product": {
              "name": "windows_11_version_24h2",
              "product_id": "CSAFPID-1741371",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:microsoft:windows_11_version_24h2:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_server_2008__service_pack_2",
            "product": {
              "name": "windows_server_2008__service_pack_2",
              "product_id": "CSAFPID-1723943",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:microsoft:windows_server_2008__service_pack_2:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_server_2008_r2_service_pack_1",
            "product": {
              "name": "windows_server_2008_r2_service_pack_1",
              "product_id": "CSAFPID-1723944",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:microsoft:windows_server_2008_r2_service_pack_1:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_server_2008_r2_service_pack_1__server_core_installation_",
            "product": {
              "name": "windows_server_2008_r2_service_pack_1__server_core_installation_",
              "product_id": "CSAFPID-1723945",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:microsoft:windows_server_2008_r2_service_pack_1__server_core_installation_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_server_2008_service_pack_2",
            "product": {
              "name": "windows_server_2008_service_pack_2",
              "product_id": "CSAFPID-1723941",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:microsoft:windows_server_2008_service_pack_2:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_server_2008_service_pack_2__server_core_installation_",
            "product": {
              "name": "windows_server_2008_service_pack_2__server_core_installation_",
              "product_id": "CSAFPID-1723942",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:microsoft:windows_server_2008_service_pack_2__server_core_installation_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_server_2012",
            "product": {
              "name": "windows_server_2012",
              "product_id": "CSAFPID-1717820",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:microsoft:windows_server_2012:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_server_2012__server_core_installation_",
            "product": {
              "name": "windows_server_2012__server_core_installation_",
              "product_id": "CSAFPID-1717821",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:microsoft:windows_server_2012__server_core_installation_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_server_2012_r2",
            "product": {
              "name": "windows_server_2012_r2",
              "product_id": "CSAFPID-1717822",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:microsoft:windows_server_2012_r2:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_server_2012_r2__server_core_installation_",
            "product": {
              "name": "windows_server_2012_r2__server_core_installation_",
              "product_id": "CSAFPID-1717823",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:microsoft:windows_server_2012_r2__server_core_installation_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_server_2016",
            "product": {
              "name": "windows_server_2016",
              "product_id": "CSAFPID-1717812",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:microsoft:windows_server_2016:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_server_2016__server_core_installation_",
            "product": {
              "name": "windows_server_2016__server_core_installation_",
              "product_id": "CSAFPID-1717813",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:microsoft:windows_server_2016__server_core_installation_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_server_2019",
            "product": {
              "name": "windows_server_2019",
              "product_id": "CSAFPID-1717808",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:microsoft:windows_server_2019:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_server_2019__server_core_installation_",
            "product": {
              "name": "windows_server_2019__server_core_installation_",
              "product_id": "CSAFPID-1717809",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:microsoft:windows_server_2019__server_core_installation_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_server_2022",
            "product": {
              "name": "windows_server_2022",
              "product_id": "CSAFPID-1717810",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:microsoft:windows_server_2022:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_server_2022__23h2_edition__server_core_installation_",
            "product": {
              "name": "windows_server_2022__23h2_edition__server_core_installation_",
              "product_id": "CSAFPID-1741352",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:microsoft:windows_server_2022__23h2_edition__server_core_installation_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_server_2025",
            "product": {
              "name": "windows_server_2025",
              "product_id": "CSAFPID-1741353",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:microsoft:windows_server_2025:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_server_2025__server_core_installation_",
            "product": {
              "name": "windows_server_2025__server_core_installation_",
              "product_id": "CSAFPID-1741354",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:microsoft:windows_server_2025__server_core_installation_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_10_1507",
            "product": {
              "name": "windows_10_1507",
              "product_id": "CSAFPID-1741424",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.20857:*:*:*:*:*:x64:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_10_1507",
            "product": {
              "name": "windows_10_1507",
              "product_id": "CSAFPID-1741423",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.20857:*:*:*:*:*:x86:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_10_1607",
            "product": {
              "name": "windows_10_1607",
              "product_id": "CSAFPID-1741426",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.7606:*:*:*:*:*:x64:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_10_1607",
            "product": {
              "name": "windows_10_1607",
              "product_id": "CSAFPID-1741425",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.7606:*:*:*:*:*:x86:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_10_1809",
            "product": {
              "name": "windows_10_1809",
              "product_id": "CSAFPID-1741406",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.6659:*:*:*:*:*:x64:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_10_1809",
            "product": {
              "name": "windows_10_1809",
              "product_id": "CSAFPID-1741405",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.6659:*:*:*:*:*:x86:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_10_21h2",
            "product": {
              "name": "windows_10_21h2",
              "product_id": "CSAFPID-1741409",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:microsoft:windows_10_21h2:10.0.19044.5247:*:*:*:*:*:arm64:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_10_21h2",
            "product": {
              "name": "windows_10_21h2",
              "product_id": "CSAFPID-1741410",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:microsoft:windows_10_21h2:10.0.19044.5247:*:*:*:*:*:x64:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_10_21h2",
            "product": {
              "name": "windows_10_21h2",
              "product_id": "CSAFPID-1741408",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:microsoft:windows_10_21h2:10.0.19044.5247:*:*:*:*:*:x86:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_10_22h2",
            "product": {
              "name": "windows_10_22h2",
              "product_id": "CSAFPID-1741414",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:microsoft:windows_10_22h2:10.0.19045.5247:*:*:*:*:*:arm64:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_10_22h2",
            "product": {
              "name": "windows_10_22h2",
              "product_id": "CSAFPID-1741413",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:microsoft:windows_10_22h2:10.0.19045.5247:*:*:*:*:*:x64:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_10_22h2",
            "product": {
              "name": "windows_10_22h2",
              "product_id": "CSAFPID-1741415",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:microsoft:windows_10_22h2:10.0.19045.5247:*:*:*:*:*:x86:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "windows_11_22h2",
            "product": {
              "name": "windows_11_22h2",
              "product_id": "CSAFPID-1741411",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:microsoft:windows_11_22h2:10.0.22621.4602:*:*:*:*:*:arm64:*"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "microsoft"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-49123",
      "cwe": {
        "id": "CWE-591",
        "name": "Sensitive Data Storage in Improperly Locked Memory"
      },
      "notes": [
        {
          "category": "other",
          "text": "Sensitive Data Storage in Improperly Locked Memory",
          "title": "CWE-591"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1741405",
          "CSAFPID-1741406",
          "CSAFPID-1741407",
          "CSAFPID-1741422",
          "CSAFPID-1741408",
          "CSAFPID-1741409",
          "CSAFPID-1741410",
          "CSAFPID-1741411",
          "CSAFPID-1741412",
          "CSAFPID-1741413",
          "CSAFPID-1741414",
          "CSAFPID-1741415",
          "CSAFPID-1741416",
          "CSAFPID-1741417",
          "CSAFPID-1741418",
          "CSAFPID-1741419",
          "CSAFPID-1741420",
          "CSAFPID-1741421",
          "CSAFPID-1720442",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1717810",
          "CSAFPID-1741366",
          "CSAFPID-1741367",
          "CSAFPID-1741368",
          "CSAFPID-1741354",
          "CSAFPID-1741369",
          "CSAFPID-1741370",
          "CSAFPID-1741352",
          "CSAFPID-1741371",
          "CSAFPID-1741353"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49123",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49123.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1741405",
            "CSAFPID-1741406",
            "CSAFPID-1741407",
            "CSAFPID-1741422",
            "CSAFPID-1741408",
            "CSAFPID-1741409",
            "CSAFPID-1741410",
            "CSAFPID-1741411",
            "CSAFPID-1741412",
            "CSAFPID-1741413",
            "CSAFPID-1741414",
            "CSAFPID-1741415",
            "CSAFPID-1741416",
            "CSAFPID-1741417",
            "CSAFPID-1741418",
            "CSAFPID-1741419",
            "CSAFPID-1741420",
            "CSAFPID-1741421",
            "CSAFPID-1720442",
            "CSAFPID-1717808",
            "CSAFPID-1717809",
            "CSAFPID-1717810",
            "CSAFPID-1741366",
            "CSAFPID-1741367",
            "CSAFPID-1741368",
            "CSAFPID-1741354",
            "CSAFPID-1741369",
            "CSAFPID-1741370",
            "CSAFPID-1741352",
            "CSAFPID-1741371",
            "CSAFPID-1741353"
          ]
        }
      ],
      "title": "CVE-2024-49123"
    },
    {
      "cve": "CVE-2024-49124",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
          "title": "CWE-362"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1741405",
          "CSAFPID-1741406",
          "CSAFPID-1741407",
          "CSAFPID-1741422",
          "CSAFPID-1741408",
          "CSAFPID-1741409",
          "CSAFPID-1741410",
          "CSAFPID-1741411",
          "CSAFPID-1741412",
          "CSAFPID-1741413",
          "CSAFPID-1741414",
          "CSAFPID-1741415",
          "CSAFPID-1741416",
          "CSAFPID-1741417",
          "CSAFPID-1741418",
          "CSAFPID-1741419",
          "CSAFPID-1741420",
          "CSAFPID-1741421",
          "CSAFPID-1741423",
          "CSAFPID-1741424",
          "CSAFPID-1741425",
          "CSAFPID-1741426",
          "CSAFPID-1741427",
          "CSAFPID-1741428",
          "CSAFPID-1741429",
          "CSAFPID-1741430",
          "CSAFPID-1741431",
          "CSAFPID-1741432",
          "CSAFPID-1720442",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1717810",
          "CSAFPID-1741366",
          "CSAFPID-1741367",
          "CSAFPID-1741368",
          "CSAFPID-1741354",
          "CSAFPID-1741369",
          "CSAFPID-1741370",
          "CSAFPID-1741352",
          "CSAFPID-1741371",
          "CSAFPID-1741353",
          "CSAFPID-1723936",
          "CSAFPID-1723937",
          "CSAFPID-1717812",
          "CSAFPID-1717813",
          "CSAFPID-1723941",
          "CSAFPID-1723942",
          "CSAFPID-1723943",
          "CSAFPID-1723944",
          "CSAFPID-1723945",
          "CSAFPID-1717820",
          "CSAFPID-1717821",
          "CSAFPID-1717822",
          "CSAFPID-1717823"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49124",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49124.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1741405",
            "CSAFPID-1741406",
            "CSAFPID-1741407",
            "CSAFPID-1741422",
            "CSAFPID-1741408",
            "CSAFPID-1741409",
            "CSAFPID-1741410",
            "CSAFPID-1741411",
            "CSAFPID-1741412",
            "CSAFPID-1741413",
            "CSAFPID-1741414",
            "CSAFPID-1741415",
            "CSAFPID-1741416",
            "CSAFPID-1741417",
            "CSAFPID-1741418",
            "CSAFPID-1741419",
            "CSAFPID-1741420",
            "CSAFPID-1741421",
            "CSAFPID-1741423",
            "CSAFPID-1741424",
            "CSAFPID-1741425",
            "CSAFPID-1741426",
            "CSAFPID-1741427",
            "CSAFPID-1741428",
            "CSAFPID-1741429",
            "CSAFPID-1741430",
            "CSAFPID-1741431",
            "CSAFPID-1741432",
            "CSAFPID-1720442",
            "CSAFPID-1717808",
            "CSAFPID-1717809",
            "CSAFPID-1717810",
            "CSAFPID-1741366",
            "CSAFPID-1741367",
            "CSAFPID-1741368",
            "CSAFPID-1741354",
            "CSAFPID-1741369",
            "CSAFPID-1741370",
            "CSAFPID-1741352",
            "CSAFPID-1741371",
            "CSAFPID-1741353",
            "CSAFPID-1723936",
            "CSAFPID-1723937",
            "CSAFPID-1717812",
            "CSAFPID-1717813",
            "CSAFPID-1723941",
            "CSAFPID-1723942",
            "CSAFPID-1723943",
            "CSAFPID-1723944",
            "CSAFPID-1723945",
            "CSAFPID-1717820",
            "CSAFPID-1717821",
            "CSAFPID-1717822",
            "CSAFPID-1717823"
          ]
        }
      ],
      "title": "CVE-2024-49124"
    },
    {
      "cve": "CVE-2024-49126",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "other",
          "text": "Sensitive Data Storage in Improperly Locked Memory",
          "title": "CWE-591"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1741405",
          "CSAFPID-1741406",
          "CSAFPID-1741407",
          "CSAFPID-1741422",
          "CSAFPID-1741408",
          "CSAFPID-1741409",
          "CSAFPID-1741410",
          "CSAFPID-1741411",
          "CSAFPID-1741412",
          "CSAFPID-1741413",
          "CSAFPID-1741414",
          "CSAFPID-1741415",
          "CSAFPID-1741416",
          "CSAFPID-1741417",
          "CSAFPID-1741418",
          "CSAFPID-1741419",
          "CSAFPID-1741420",
          "CSAFPID-1741421",
          "CSAFPID-1741423",
          "CSAFPID-1741424",
          "CSAFPID-1741425",
          "CSAFPID-1741426",
          "CSAFPID-1741427",
          "CSAFPID-1741428",
          "CSAFPID-1741429",
          "CSAFPID-1741430",
          "CSAFPID-1741431",
          "CSAFPID-1741432",
          "CSAFPID-1720442",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1717810",
          "CSAFPID-1741366",
          "CSAFPID-1741367",
          "CSAFPID-1741368",
          "CSAFPID-1741354",
          "CSAFPID-1741369",
          "CSAFPID-1741370",
          "CSAFPID-1741352",
          "CSAFPID-1741371",
          "CSAFPID-1741353",
          "CSAFPID-1723936",
          "CSAFPID-1723937",
          "CSAFPID-1717812",
          "CSAFPID-1717813",
          "CSAFPID-1723941",
          "CSAFPID-1723942",
          "CSAFPID-1723943",
          "CSAFPID-1723944",
          "CSAFPID-1723945",
          "CSAFPID-1717820",
          "CSAFPID-1717821",
          "CSAFPID-1717822",
          "CSAFPID-1717823"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49126",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49126.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1741405",
            "CSAFPID-1741406",
            "CSAFPID-1741407",
            "CSAFPID-1741422",
            "CSAFPID-1741408",
            "CSAFPID-1741409",
            "CSAFPID-1741410",
            "CSAFPID-1741411",
            "CSAFPID-1741412",
            "CSAFPID-1741413",
            "CSAFPID-1741414",
            "CSAFPID-1741415",
            "CSAFPID-1741416",
            "CSAFPID-1741417",
            "CSAFPID-1741418",
            "CSAFPID-1741419",
            "CSAFPID-1741420",
            "CSAFPID-1741421",
            "CSAFPID-1741423",
            "CSAFPID-1741424",
            "CSAFPID-1741425",
            "CSAFPID-1741426",
            "CSAFPID-1741427",
            "CSAFPID-1741428",
            "CSAFPID-1741429",
            "CSAFPID-1741430",
            "CSAFPID-1741431",
            "CSAFPID-1741432",
            "CSAFPID-1720442",
            "CSAFPID-1717808",
            "CSAFPID-1717809",
            "CSAFPID-1717810",
            "CSAFPID-1741366",
            "CSAFPID-1741367",
            "CSAFPID-1741368",
            "CSAFPID-1741354",
            "CSAFPID-1741369",
            "CSAFPID-1741370",
            "CSAFPID-1741352",
            "CSAFPID-1741371",
            "CSAFPID-1741353",
            "CSAFPID-1723936",
            "CSAFPID-1723937",
            "CSAFPID-1717812",
            "CSAFPID-1717813",
            "CSAFPID-1723941",
            "CSAFPID-1723942",
            "CSAFPID-1723943",
            "CSAFPID-1723944",
            "CSAFPID-1723945",
            "CSAFPID-1717820",
            "CSAFPID-1717821",
            "CSAFPID-1717822",
            "CSAFPID-1717823"
          ]
        }
      ],
      "title": "CVE-2024-49126"
    },
    {
      "cve": "CVE-2024-49132",
      "cwe": {
        "id": "CWE-591",
        "name": "Sensitive Data Storage in Improperly Locked Memory"
      },
      "notes": [
        {
          "category": "other",
          "text": "Sensitive Data Storage in Improperly Locked Memory",
          "title": "CWE-591"
        },
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1741405",
          "CSAFPID-1741406",
          "CSAFPID-1741407",
          "CSAFPID-1741422",
          "CSAFPID-1741408",
          "CSAFPID-1741409",
          "CSAFPID-1741410",
          "CSAFPID-1741411",
          "CSAFPID-1741412",
          "CSAFPID-1741413",
          "CSAFPID-1741414",
          "CSAFPID-1741415",
          "CSAFPID-1741416",
          "CSAFPID-1741417",
          "CSAFPID-1741418",
          "CSAFPID-1741419",
          "CSAFPID-1741420",
          "CSAFPID-1741421",
          "CSAFPID-1720442",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1717810",
          "CSAFPID-1741366",
          "CSAFPID-1741367",
          "CSAFPID-1741368",
          "CSAFPID-1741354",
          "CSAFPID-1741369",
          "CSAFPID-1741370",
          "CSAFPID-1741352",
          "CSAFPID-1741371",
          "CSAFPID-1741353"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49132",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49132.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1741405",
            "CSAFPID-1741406",
            "CSAFPID-1741407",
            "CSAFPID-1741422",
            "CSAFPID-1741408",
            "CSAFPID-1741409",
            "CSAFPID-1741410",
            "CSAFPID-1741411",
            "CSAFPID-1741412",
            "CSAFPID-1741413",
            "CSAFPID-1741414",
            "CSAFPID-1741415",
            "CSAFPID-1741416",
            "CSAFPID-1741417",
            "CSAFPID-1741418",
            "CSAFPID-1741419",
            "CSAFPID-1741420",
            "CSAFPID-1741421",
            "CSAFPID-1720442",
            "CSAFPID-1717808",
            "CSAFPID-1717809",
            "CSAFPID-1717810",
            "CSAFPID-1741366",
            "CSAFPID-1741367",
            "CSAFPID-1741368",
            "CSAFPID-1741354",
            "CSAFPID-1741369",
            "CSAFPID-1741370",
            "CSAFPID-1741352",
            "CSAFPID-1741371",
            "CSAFPID-1741353"
          ]
        }
      ],
      "title": "CVE-2024-49132"
    },
    {
      "cve": "CVE-2024-49072",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1741419",
          "CSAFPID-1741408",
          "CSAFPID-1741409",
          "CSAFPID-1741422",
          "CSAFPID-1741428",
          "CSAFPID-1741415",
          "CSAFPID-1741420",
          "CSAFPID-1741424",
          "CSAFPID-1741427",
          "CSAFPID-1741413",
          "CSAFPID-1741405",
          "CSAFPID-1741407",
          "CSAFPID-1741414",
          "CSAFPID-1741421",
          "CSAFPID-1741430",
          "CSAFPID-1741432",
          "CSAFPID-1741423",
          "CSAFPID-1741416",
          "CSAFPID-1741410",
          "CSAFPID-1741406",
          "CSAFPID-1741426",
          "CSAFPID-1741418",
          "CSAFPID-1741412",
          "CSAFPID-1741429",
          "CSAFPID-1741431",
          "CSAFPID-1741417",
          "CSAFPID-1741425",
          "CSAFPID-1741411",
          "CSAFPID-1720442",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1717810",
          "CSAFPID-1741366",
          "CSAFPID-1741367",
          "CSAFPID-1741368",
          "CSAFPID-1741354",
          "CSAFPID-1741369",
          "CSAFPID-1741370",
          "CSAFPID-1741352",
          "CSAFPID-1741371",
          "CSAFPID-1741353",
          "CSAFPID-1723936",
          "CSAFPID-1723937",
          "CSAFPID-1717812",
          "CSAFPID-1717813",
          "CSAFPID-1723941",
          "CSAFPID-1723942",
          "CSAFPID-1723943",
          "CSAFPID-1723944",
          "CSAFPID-1723945",
          "CSAFPID-1717820",
          "CSAFPID-1717821",
          "CSAFPID-1717822",
          "CSAFPID-1717823"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49072",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49072.json"
        }
      ],
      "title": "CVE-2024-49072"
    },
    {
      "cve": "CVE-2024-49075",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "other",
          "text": "Uncontrolled Resource Consumption",
          "title": "CWE-400"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1741411",
          "CSAFPID-1741416",
          "CSAFPID-1741410",
          "CSAFPID-1741418",
          "CSAFPID-1741417",
          "CSAFPID-1741406",
          "CSAFPID-1741409",
          "CSAFPID-1741419",
          "CSAFPID-1741407",
          "CSAFPID-1741405",
          "CSAFPID-1741414",
          "CSAFPID-1741420",
          "CSAFPID-1741415",
          "CSAFPID-1741421",
          "CSAFPID-1741408",
          "CSAFPID-1741413",
          "CSAFPID-1741412",
          "CSAFPID-1741422",
          "CSAFPID-1720442",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1717810",
          "CSAFPID-1741366",
          "CSAFPID-1741367",
          "CSAFPID-1741368",
          "CSAFPID-1741354",
          "CSAFPID-1741369",
          "CSAFPID-1741370",
          "CSAFPID-1741352",
          "CSAFPID-1741371",
          "CSAFPID-1741353"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49075",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49075.json"
        }
      ],
      "title": "CVE-2024-49075"
    },
    {
      "cve": "CVE-2024-49076",
      "cwe": {
        "id": "CWE-287",
        "name": "Improper Authentication"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Authentication",
          "title": "CWE-287"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1741418",
          "CSAFPID-1741406",
          "CSAFPID-1741407",
          "CSAFPID-1741422",
          "CSAFPID-1741417",
          "CSAFPID-1741420",
          "CSAFPID-1741405",
          "CSAFPID-1741415",
          "CSAFPID-1741419",
          "CSAFPID-1741413",
          "CSAFPID-1741416",
          "CSAFPID-1741421",
          "CSAFPID-1741410",
          "CSAFPID-1741409",
          "CSAFPID-1741408",
          "CSAFPID-1741411",
          "CSAFPID-1741414",
          "CSAFPID-1741412",
          "CSAFPID-1720442",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1717810",
          "CSAFPID-1741366",
          "CSAFPID-1741367",
          "CSAFPID-1741368",
          "CSAFPID-1741354",
          "CSAFPID-1741369",
          "CSAFPID-1741370",
          "CSAFPID-1741352",
          "CSAFPID-1741371",
          "CSAFPID-1741353"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49076",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49076.json"
        }
      ],
      "title": "CVE-2024-49076"
    },
    {
      "cve": "CVE-2024-49077",
      "cwe": {
        "id": "CWE-191",
        "name": "Integer Underflow (Wrap or Wraparound)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Integer Underflow (Wrap or Wraparound)",
          "title": "CWE-191"
        },
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1720442",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1741366",
          "CSAFPID-1741367",
          "CSAFPID-1741368",
          "CSAFPID-1741354",
          "CSAFPID-1741369",
          "CSAFPID-1741370",
          "CSAFPID-1741352",
          "CSAFPID-1741371",
          "CSAFPID-1741353",
          "CSAFPID-1741411",
          "CSAFPID-1741417",
          "CSAFPID-1741405",
          "CSAFPID-1741407",
          "CSAFPID-1741421",
          "CSAFPID-1741416",
          "CSAFPID-1741418",
          "CSAFPID-1741419",
          "CSAFPID-1741420",
          "CSAFPID-1741414",
          "CSAFPID-1741406",
          "CSAFPID-1741415",
          "CSAFPID-1741409",
          "CSAFPID-1741410",
          "CSAFPID-1741412",
          "CSAFPID-1741413",
          "CSAFPID-1741408"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49077",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49077.json"
        }
      ],
      "title": "CVE-2024-49077"
    },
    {
      "cve": "CVE-2024-49078",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "other",
          "text": "Integer Overflow or Wraparound",
          "title": "CWE-190"
        },
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1720442",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1741366",
          "CSAFPID-1741367",
          "CSAFPID-1741368",
          "CSAFPID-1741354",
          "CSAFPID-1741369",
          "CSAFPID-1741370",
          "CSAFPID-1741352",
          "CSAFPID-1741371",
          "CSAFPID-1741353",
          "CSAFPID-1741412",
          "CSAFPID-1741408",
          "CSAFPID-1741416",
          "CSAFPID-1741418",
          "CSAFPID-1741417",
          "CSAFPID-1741414",
          "CSAFPID-1741405",
          "CSAFPID-1741411",
          "CSAFPID-1741421",
          "CSAFPID-1741419",
          "CSAFPID-1741413",
          "CSAFPID-1741406",
          "CSAFPID-1741410",
          "CSAFPID-1741407",
          "CSAFPID-1741409",
          "CSAFPID-1741420",
          "CSAFPID-1741415"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49078",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49078.json"
        }
      ],
      "title": "CVE-2024-49078"
    },
    {
      "cve": "CVE-2024-49079",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1720442",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1717810",
          "CSAFPID-1741366",
          "CSAFPID-1741367",
          "CSAFPID-1741368",
          "CSAFPID-1741354",
          "CSAFPID-1741369",
          "CSAFPID-1741370",
          "CSAFPID-1741352",
          "CSAFPID-1741371",
          "CSAFPID-1741353",
          "CSAFPID-1723936",
          "CSAFPID-1723937",
          "CSAFPID-1717812",
          "CSAFPID-1717813",
          "CSAFPID-1717820",
          "CSAFPID-1717821",
          "CSAFPID-1717822",
          "CSAFPID-1717823",
          "CSAFPID-1741418",
          "CSAFPID-1741411",
          "CSAFPID-1741409",
          "CSAFPID-1741423",
          "CSAFPID-1741412",
          "CSAFPID-1741424",
          "CSAFPID-1741422",
          "CSAFPID-1741425",
          "CSAFPID-1741406",
          "CSAFPID-1741427",
          "CSAFPID-1741426",
          "CSAFPID-1741410",
          "CSAFPID-1741405",
          "CSAFPID-1741416",
          "CSAFPID-1741417",
          "CSAFPID-1741408",
          "CSAFPID-1741419",
          "CSAFPID-1741407",
          "CSAFPID-1741413",
          "CSAFPID-1741414",
          "CSAFPID-1741415",
          "CSAFPID-1741421",
          "CSAFPID-1741420",
          "CSAFPID-1741432",
          "CSAFPID-1741431"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49079",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49079.json"
        }
      ],
      "title": "CVE-2024-49079"
    },
    {
      "cve": "CVE-2024-49080",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1720442",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1717810",
          "CSAFPID-1741366",
          "CSAFPID-1741367",
          "CSAFPID-1741368",
          "CSAFPID-1741354",
          "CSAFPID-1741369",
          "CSAFPID-1741370",
          "CSAFPID-1741352",
          "CSAFPID-1741371",
          "CSAFPID-1741353",
          "CSAFPID-1723936",
          "CSAFPID-1723937",
          "CSAFPID-1717812",
          "CSAFPID-1717813",
          "CSAFPID-1723941",
          "CSAFPID-1723942",
          "CSAFPID-1723943",
          "CSAFPID-1723944",
          "CSAFPID-1723945",
          "CSAFPID-1717820",
          "CSAFPID-1717821",
          "CSAFPID-1717822",
          "CSAFPID-1717823",
          "CSAFPID-1741416",
          "CSAFPID-1741430",
          "CSAFPID-1741409",
          "CSAFPID-1741426",
          "CSAFPID-1741417",
          "CSAFPID-1741431",
          "CSAFPID-1741424",
          "CSAFPID-1741407",
          "CSAFPID-1741413",
          "CSAFPID-1741406",
          "CSAFPID-1741427",
          "CSAFPID-1741412",
          "CSAFPID-1741420",
          "CSAFPID-1741415",
          "CSAFPID-1741425",
          "CSAFPID-1741414",
          "CSAFPID-1741428",
          "CSAFPID-1741419",
          "CSAFPID-1741411",
          "CSAFPID-1741422",
          "CSAFPID-1741418",
          "CSAFPID-1741405",
          "CSAFPID-1741421",
          "CSAFPID-1741432",
          "CSAFPID-1741429",
          "CSAFPID-1741410",
          "CSAFPID-1741408",
          "CSAFPID-1741423"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49080",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49080.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1720442",
            "CSAFPID-1717808",
            "CSAFPID-1717809",
            "CSAFPID-1717810",
            "CSAFPID-1741366",
            "CSAFPID-1741367",
            "CSAFPID-1741368",
            "CSAFPID-1741354",
            "CSAFPID-1741369",
            "CSAFPID-1741370",
            "CSAFPID-1741352",
            "CSAFPID-1741371",
            "CSAFPID-1741353",
            "CSAFPID-1723936",
            "CSAFPID-1723937",
            "CSAFPID-1717812",
            "CSAFPID-1717813",
            "CSAFPID-1723941",
            "CSAFPID-1723942",
            "CSAFPID-1723943",
            "CSAFPID-1723944",
            "CSAFPID-1723945",
            "CSAFPID-1717820",
            "CSAFPID-1717821",
            "CSAFPID-1717822",
            "CSAFPID-1717823",
            "CSAFPID-1741416",
            "CSAFPID-1741430",
            "CSAFPID-1741409",
            "CSAFPID-1741426",
            "CSAFPID-1741417",
            "CSAFPID-1741431",
            "CSAFPID-1741424",
            "CSAFPID-1741407",
            "CSAFPID-1741413",
            "CSAFPID-1741406",
            "CSAFPID-1741427",
            "CSAFPID-1741412",
            "CSAFPID-1741420",
            "CSAFPID-1741415",
            "CSAFPID-1741425",
            "CSAFPID-1741414",
            "CSAFPID-1741428",
            "CSAFPID-1741419",
            "CSAFPID-1741411",
            "CSAFPID-1741422",
            "CSAFPID-1741418",
            "CSAFPID-1741405",
            "CSAFPID-1741421",
            "CSAFPID-1741432",
            "CSAFPID-1741429",
            "CSAFPID-1741410",
            "CSAFPID-1741408",
            "CSAFPID-1741423"
          ]
        }
      ],
      "title": "CVE-2024-49080"
    },
    {
      "cve": "CVE-2024-49081",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1720442",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1741366",
          "CSAFPID-1741367",
          "CSAFPID-1741368",
          "CSAFPID-1741354",
          "CSAFPID-1741369",
          "CSAFPID-1741370",
          "CSAFPID-1741352",
          "CSAFPID-1741371",
          "CSAFPID-1741353",
          "CSAFPID-1741408",
          "CSAFPID-1741415",
          "CSAFPID-1741409",
          "CSAFPID-1741411",
          "CSAFPID-1741418",
          "CSAFPID-1741417",
          "CSAFPID-1741406",
          "CSAFPID-1741419",
          "CSAFPID-1741416",
          "CSAFPID-1741410",
          "CSAFPID-1741407",
          "CSAFPID-1741420",
          "CSAFPID-1741414",
          "CSAFPID-1741405",
          "CSAFPID-1741412",
          "CSAFPID-1741421",
          "CSAFPID-1741413"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49081",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49081.json"
        }
      ],
      "title": "CVE-2024-49081"
    },
    {
      "cve": "CVE-2024-49082",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
          "title": "CWE-22"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1720442",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1717810",
          "CSAFPID-1741366",
          "CSAFPID-1741367",
          "CSAFPID-1741368",
          "CSAFPID-1741354",
          "CSAFPID-1741369",
          "CSAFPID-1741370",
          "CSAFPID-1741352",
          "CSAFPID-1741371",
          "CSAFPID-1741353",
          "CSAFPID-1723936",
          "CSAFPID-1723937",
          "CSAFPID-1717812",
          "CSAFPID-1717813",
          "CSAFPID-1723941",
          "CSAFPID-1723942",
          "CSAFPID-1723943",
          "CSAFPID-1723944",
          "CSAFPID-1723945",
          "CSAFPID-1717820",
          "CSAFPID-1717821",
          "CSAFPID-1717822",
          "CSAFPID-1717823",
          "CSAFPID-1741419",
          "CSAFPID-1741411",
          "CSAFPID-1741420",
          "CSAFPID-1741407",
          "CSAFPID-1741417",
          "CSAFPID-1741430",
          "CSAFPID-1741415",
          "CSAFPID-1741422",
          "CSAFPID-1741406",
          "CSAFPID-1741416",
          "CSAFPID-1741423",
          "CSAFPID-1741414",
          "CSAFPID-1741429",
          "CSAFPID-1741410",
          "CSAFPID-1741427",
          "CSAFPID-1741424",
          "CSAFPID-1741421",
          "CSAFPID-1741431",
          "CSAFPID-1741412",
          "CSAFPID-1741426",
          "CSAFPID-1741413",
          "CSAFPID-1741432",
          "CSAFPID-1741418",
          "CSAFPID-1741405",
          "CSAFPID-1741408",
          "CSAFPID-1741409",
          "CSAFPID-1741425",
          "CSAFPID-1741428"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49082",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49082.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1720442",
            "CSAFPID-1717808",
            "CSAFPID-1717809",
            "CSAFPID-1717810",
            "CSAFPID-1741366",
            "CSAFPID-1741367",
            "CSAFPID-1741368",
            "CSAFPID-1741354",
            "CSAFPID-1741369",
            "CSAFPID-1741370",
            "CSAFPID-1741352",
            "CSAFPID-1741371",
            "CSAFPID-1741353",
            "CSAFPID-1723936",
            "CSAFPID-1723937",
            "CSAFPID-1717812",
            "CSAFPID-1717813",
            "CSAFPID-1723941",
            "CSAFPID-1723942",
            "CSAFPID-1723943",
            "CSAFPID-1723944",
            "CSAFPID-1723945",
            "CSAFPID-1717820",
            "CSAFPID-1717821",
            "CSAFPID-1717822",
            "CSAFPID-1717823",
            "CSAFPID-1741419",
            "CSAFPID-1741411",
            "CSAFPID-1741420",
            "CSAFPID-1741407",
            "CSAFPID-1741417",
            "CSAFPID-1741430",
            "CSAFPID-1741415",
            "CSAFPID-1741422",
            "CSAFPID-1741406",
            "CSAFPID-1741416",
            "CSAFPID-1741423",
            "CSAFPID-1741414",
            "CSAFPID-1741429",
            "CSAFPID-1741410",
            "CSAFPID-1741427",
            "CSAFPID-1741424",
            "CSAFPID-1741421",
            "CSAFPID-1741431",
            "CSAFPID-1741412",
            "CSAFPID-1741426",
            "CSAFPID-1741413",
            "CSAFPID-1741432",
            "CSAFPID-1741418",
            "CSAFPID-1741405",
            "CSAFPID-1741408",
            "CSAFPID-1741409",
            "CSAFPID-1741425",
            "CSAFPID-1741428"
          ]
        }
      ],
      "title": "CVE-2024-49082"
    },
    {
      "cve": "CVE-2024-49083",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1720442",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1741366",
          "CSAFPID-1741367",
          "CSAFPID-1741368",
          "CSAFPID-1741354",
          "CSAFPID-1741369",
          "CSAFPID-1741370",
          "CSAFPID-1741352",
          "CSAFPID-1741371",
          "CSAFPID-1741353",
          "CSAFPID-1741421",
          "CSAFPID-1741414",
          "CSAFPID-1741419",
          "CSAFPID-1741416",
          "CSAFPID-1741405",
          "CSAFPID-1741417",
          "CSAFPID-1741406",
          "CSAFPID-1741407",
          "CSAFPID-1741420",
          "CSAFPID-1741411",
          "CSAFPID-1741413",
          "CSAFPID-1741408",
          "CSAFPID-1741409",
          "CSAFPID-1741410",
          "CSAFPID-1741415",
          "CSAFPID-1741412",
          "CSAFPID-1741418"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49083",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49083.json"
        }
      ],
      "title": "CVE-2024-49083"
    },
    {
      "cve": "CVE-2024-49088",
      "cwe": {
        "id": "CWE-126",
        "name": "Buffer Over-read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Buffer Over-read",
          "title": "CWE-126"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1741414",
          "CSAFPID-1741430",
          "CSAFPID-1741412",
          "CSAFPID-1741417",
          "CSAFPID-1741432",
          "CSAFPID-1741406",
          "CSAFPID-1741413",
          "CSAFPID-1741423",
          "CSAFPID-1741428",
          "CSAFPID-1741422",
          "CSAFPID-1741415",
          "CSAFPID-1741407",
          "CSAFPID-1741426",
          "CSAFPID-1741424",
          "CSAFPID-1741427",
          "CSAFPID-1741405",
          "CSAFPID-1741411",
          "CSAFPID-1741420",
          "CSAFPID-1741429",
          "CSAFPID-1741431",
          "CSAFPID-1741418",
          "CSAFPID-1741425",
          "CSAFPID-1741419",
          "CSAFPID-1741410",
          "CSAFPID-1741416",
          "CSAFPID-1741408",
          "CSAFPID-1741421",
          "CSAFPID-1741409",
          "CSAFPID-1720442",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1717810",
          "CSAFPID-1741366",
          "CSAFPID-1741367",
          "CSAFPID-1741368",
          "CSAFPID-1741369",
          "CSAFPID-1741370",
          "CSAFPID-1741352",
          "CSAFPID-1741371",
          "CSAFPID-1723936",
          "CSAFPID-1723937",
          "CSAFPID-1717812",
          "CSAFPID-1717813",
          "CSAFPID-1723941",
          "CSAFPID-1723942",
          "CSAFPID-1723943",
          "CSAFPID-1723944",
          "CSAFPID-1723945",
          "CSAFPID-1717820",
          "CSAFPID-1717821",
          "CSAFPID-1717822",
          "CSAFPID-1717823",
          "CSAFPID-1741353",
          "CSAFPID-1741354"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49088",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49088.json"
        }
      ],
      "title": "CVE-2024-49088"
    },
    {
      "cve": "CVE-2024-49090",
      "cwe": {
        "id": "CWE-822",
        "name": "Untrusted Pointer Dereference"
      },
      "notes": [
        {
          "category": "other",
          "text": "Untrusted Pointer Dereference",
          "title": "CWE-822"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1741428",
          "CSAFPID-1741418",
          "CSAFPID-1741424",
          "CSAFPID-1741411",
          "CSAFPID-1741427",
          "CSAFPID-1741416",
          "CSAFPID-1741421",
          "CSAFPID-1741409",
          "CSAFPID-1741413",
          "CSAFPID-1741408",
          "CSAFPID-1741406",
          "CSAFPID-1741423",
          "CSAFPID-1741430",
          "CSAFPID-1741417",
          "CSAFPID-1741407",
          "CSAFPID-1741429",
          "CSAFPID-1741412",
          "CSAFPID-1741425",
          "CSAFPID-1741405",
          "CSAFPID-1741422",
          "CSAFPID-1741415",
          "CSAFPID-1741432",
          "CSAFPID-1741419",
          "CSAFPID-1741426",
          "CSAFPID-1741414",
          "CSAFPID-1741410",
          "CSAFPID-1741420",
          "CSAFPID-1741431",
          "CSAFPID-1741353",
          "CSAFPID-1741354",
          "CSAFPID-1720442",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1717810",
          "CSAFPID-1741366",
          "CSAFPID-1741367",
          "CSAFPID-1741368",
          "CSAFPID-1741369",
          "CSAFPID-1741370",
          "CSAFPID-1741352",
          "CSAFPID-1741371",
          "CSAFPID-1723936",
          "CSAFPID-1723937",
          "CSAFPID-1717812",
          "CSAFPID-1717813",
          "CSAFPID-1723941",
          "CSAFPID-1723942",
          "CSAFPID-1723943",
          "CSAFPID-1723944",
          "CSAFPID-1723945",
          "CSAFPID-1717820",
          "CSAFPID-1717821",
          "CSAFPID-1717822",
          "CSAFPID-1717823"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49090",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49090.json"
        }
      ],
      "title": "CVE-2024-49090"
    },
    {
      "cve": "CVE-2024-49095",
      "cwe": {
        "id": "CWE-591",
        "name": "Sensitive Data Storage in Improperly Locked Memory"
      },
      "notes": [
        {
          "category": "other",
          "text": "Sensitive Data Storage in Improperly Locked Memory",
          "title": "CWE-591"
        },
        {
          "category": "other",
          "text": "Double Free",
          "title": "CWE-415"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1741413",
          "CSAFPID-1741407",
          "CSAFPID-1741418",
          "CSAFPID-1741412",
          "CSAFPID-1741409",
          "CSAFPID-1741415",
          "CSAFPID-1741406",
          "CSAFPID-1741411",
          "CSAFPID-1741410",
          "CSAFPID-1741422",
          "CSAFPID-1741405",
          "CSAFPID-1741414",
          "CSAFPID-1741416",
          "CSAFPID-1741417",
          "CSAFPID-1741408",
          "CSAFPID-1741421",
          "CSAFPID-1741419",
          "CSAFPID-1741420",
          "CSAFPID-1720442",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1717810",
          "CSAFPID-1741366",
          "CSAFPID-1741367",
          "CSAFPID-1741368",
          "CSAFPID-1741354",
          "CSAFPID-1741369",
          "CSAFPID-1741370",
          "CSAFPID-1741352",
          "CSAFPID-1741371",
          "CSAFPID-1741353"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49095",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49095.json"
        }
      ],
      "title": "CVE-2024-49095"
    },
    {
      "cve": "CVE-2024-49109",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1741406",
          "CSAFPID-1741411",
          "CSAFPID-1741415",
          "CSAFPID-1741420",
          "CSAFPID-1741408",
          "CSAFPID-1741412",
          "CSAFPID-1741409",
          "CSAFPID-1741413",
          "CSAFPID-1741416",
          "CSAFPID-1741414",
          "CSAFPID-1741421",
          "CSAFPID-1741417",
          "CSAFPID-1741407",
          "CSAFPID-1741410",
          "CSAFPID-1741405",
          "CSAFPID-1741418",
          "CSAFPID-1741419",
          "CSAFPID-1720442",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1741366",
          "CSAFPID-1741367",
          "CSAFPID-1741368",
          "CSAFPID-1741354",
          "CSAFPID-1741369",
          "CSAFPID-1741370",
          "CSAFPID-1741352",
          "CSAFPID-1741371",
          "CSAFPID-1741353"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49109",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49109.json"
        }
      ],
      "title": "CVE-2024-49109"
    },
    {
      "cve": "CVE-2024-49110",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1720442",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1741366",
          "CSAFPID-1741367",
          "CSAFPID-1741368",
          "CSAFPID-1741354",
          "CSAFPID-1741369",
          "CSAFPID-1741370",
          "CSAFPID-1741352",
          "CSAFPID-1741371",
          "CSAFPID-1741353",
          "CSAFPID-1741419",
          "CSAFPID-1741416",
          "CSAFPID-1741410",
          "CSAFPID-1741415",
          "CSAFPID-1741406",
          "CSAFPID-1741412",
          "CSAFPID-1741417",
          "CSAFPID-1741411",
          "CSAFPID-1741408",
          "CSAFPID-1741407",
          "CSAFPID-1741405",
          "CSAFPID-1741421",
          "CSAFPID-1741409",
          "CSAFPID-1741414",
          "CSAFPID-1741413",
          "CSAFPID-1741418",
          "CSAFPID-1741420"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49110",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49110.json"
        }
      ],
      "title": "CVE-2024-49110"
    },
    {
      "cve": "CVE-2024-49112",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "other",
          "text": "Integer Overflow or Wraparound",
          "title": "CWE-190"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1720442",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1717810",
          "CSAFPID-1741366",
          "CSAFPID-1741367",
          "CSAFPID-1741368",
          "CSAFPID-1741354",
          "CSAFPID-1741369",
          "CSAFPID-1741370",
          "CSAFPID-1741352",
          "CSAFPID-1741371",
          "CSAFPID-1741353",
          "CSAFPID-1723936",
          "CSAFPID-1723937",
          "CSAFPID-1717812",
          "CSAFPID-1717813",
          "CSAFPID-1723941",
          "CSAFPID-1723942",
          "CSAFPID-1723943",
          "CSAFPID-1723944",
          "CSAFPID-1723945",
          "CSAFPID-1717820",
          "CSAFPID-1717821",
          "CSAFPID-1717822",
          "CSAFPID-1717823",
          "CSAFPID-1741431",
          "CSAFPID-1741406",
          "CSAFPID-1741432",
          "CSAFPID-1741408",
          "CSAFPID-1741422",
          "CSAFPID-1741423",
          "CSAFPID-1741412",
          "CSAFPID-1741427",
          "CSAFPID-1741418",
          "CSAFPID-1741407",
          "CSAFPID-1741405",
          "CSAFPID-1741429",
          "CSAFPID-1741409",
          "CSAFPID-1741428",
          "CSAFPID-1741410",
          "CSAFPID-1741416",
          "CSAFPID-1741417",
          "CSAFPID-1741426",
          "CSAFPID-1741424",
          "CSAFPID-1741415",
          "CSAFPID-1741421",
          "CSAFPID-1741411",
          "CSAFPID-1741430",
          "CSAFPID-1741420",
          "CSAFPID-1741413",
          "CSAFPID-1741419",
          "CSAFPID-1741414",
          "CSAFPID-1741425"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49112",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49112.json"
        }
      ],
      "title": "CVE-2024-49112"
    },
    {
      "cve": "CVE-2024-49113",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1720442",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1717810",
          "CSAFPID-1741366",
          "CSAFPID-1741367",
          "CSAFPID-1741368",
          "CSAFPID-1741354",
          "CSAFPID-1741369",
          "CSAFPID-1741370",
          "CSAFPID-1741352",
          "CSAFPID-1741371",
          "CSAFPID-1741353",
          "CSAFPID-1723936",
          "CSAFPID-1723937",
          "CSAFPID-1717812",
          "CSAFPID-1717813",
          "CSAFPID-1723941",
          "CSAFPID-1723942",
          "CSAFPID-1723943",
          "CSAFPID-1723944",
          "CSAFPID-1723945",
          "CSAFPID-1717820",
          "CSAFPID-1717821",
          "CSAFPID-1717822",
          "CSAFPID-1717823",
          "CSAFPID-1741423",
          "CSAFPID-1741426",
          "CSAFPID-1741416",
          "CSAFPID-1741409",
          "CSAFPID-1741418",
          "CSAFPID-1741427",
          "CSAFPID-1741432",
          "CSAFPID-1741414",
          "CSAFPID-1741420",
          "CSAFPID-1741411",
          "CSAFPID-1741410",
          "CSAFPID-1741405",
          "CSAFPID-1741415",
          "CSAFPID-1741428",
          "CSAFPID-1741429",
          "CSAFPID-1741425",
          "CSAFPID-1741412",
          "CSAFPID-1741422",
          "CSAFPID-1741424",
          "CSAFPID-1741406",
          "CSAFPID-1741430",
          "CSAFPID-1741413",
          "CSAFPID-1741407",
          "CSAFPID-1741417",
          "CSAFPID-1741419",
          "CSAFPID-1741431",
          "CSAFPID-1741408",
          "CSAFPID-1741421"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49113",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49113.json"
        }
      ],
      "title": "CVE-2024-49113"
    },
    {
      "cve": "CVE-2024-49114",
      "cwe": {
        "id": "CWE-820",
        "name": "Missing Synchronization"
      },
      "notes": [
        {
          "category": "other",
          "text": "Missing Synchronization",
          "title": "CWE-820"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1720442",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1717810",
          "CSAFPID-1741366",
          "CSAFPID-1741367",
          "CSAFPID-1741368",
          "CSAFPID-1741369",
          "CSAFPID-1741370",
          "CSAFPID-1741352",
          "CSAFPID-1741371",
          "CSAFPID-1741353",
          "CSAFPID-1741354",
          "CSAFPID-1741421",
          "CSAFPID-1741416",
          "CSAFPID-1741408",
          "CSAFPID-1741419",
          "CSAFPID-1741409",
          "CSAFPID-1741412",
          "CSAFPID-1741407",
          "CSAFPID-1741415",
          "CSAFPID-1741406",
          "CSAFPID-1741418",
          "CSAFPID-1741417",
          "CSAFPID-1741422",
          "CSAFPID-1741420",
          "CSAFPID-1741414",
          "CSAFPID-1741413",
          "CSAFPID-1741410",
          "CSAFPID-1741411",
          "CSAFPID-1741405"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49114",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49114.json"
        }
      ],
      "title": "CVE-2024-49114"
    },
    {
      "cve": "CVE-2024-49118",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1741429",
          "CSAFPID-1741426",
          "CSAFPID-1741405",
          "CSAFPID-1741418",
          "CSAFPID-1741421",
          "CSAFPID-1741432",
          "CSAFPID-1741427",
          "CSAFPID-1741416",
          "CSAFPID-1741406",
          "CSAFPID-1741409",
          "CSAFPID-1741420",
          "CSAFPID-1741424",
          "CSAFPID-1741415",
          "CSAFPID-1741412",
          "CSAFPID-1741422",
          "CSAFPID-1741431",
          "CSAFPID-1741430",
          "CSAFPID-1741414",
          "CSAFPID-1741411",
          "CSAFPID-1741408",
          "CSAFPID-1741417",
          "CSAFPID-1741413",
          "CSAFPID-1741423",
          "CSAFPID-1741407",
          "CSAFPID-1741410",
          "CSAFPID-1741428",
          "CSAFPID-1741425",
          "CSAFPID-1741419",
          "CSAFPID-1720442",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1717810",
          "CSAFPID-1741366",
          "CSAFPID-1741367",
          "CSAFPID-1741368",
          "CSAFPID-1741354",
          "CSAFPID-1741369",
          "CSAFPID-1741370",
          "CSAFPID-1741352",
          "CSAFPID-1741371",
          "CSAFPID-1741353",
          "CSAFPID-1723936",
          "CSAFPID-1723937",
          "CSAFPID-1717812",
          "CSAFPID-1717813",
          "CSAFPID-1723941",
          "CSAFPID-1723942",
          "CSAFPID-1723943",
          "CSAFPID-1723944",
          "CSAFPID-1723945",
          "CSAFPID-1717820",
          "CSAFPID-1717821",
          "CSAFPID-1717822",
          "CSAFPID-1717823"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49118",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49118.json"
        }
      ],
      "title": "CVE-2024-49118"
    },
    {
      "cve": "CVE-2024-49127",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1741420",
          "CSAFPID-1741408",
          "CSAFPID-1741426",
          "CSAFPID-1741416",
          "CSAFPID-1741410",
          "CSAFPID-1741430",
          "CSAFPID-1741406",
          "CSAFPID-1741423",
          "CSAFPID-1741432",
          "CSAFPID-1741418",
          "CSAFPID-1741405",
          "CSAFPID-1741407",
          "CSAFPID-1741429",
          "CSAFPID-1741415",
          "CSAFPID-1741431",
          "CSAFPID-1741427",
          "CSAFPID-1741424",
          "CSAFPID-1741421",
          "CSAFPID-1741411",
          "CSAFPID-1741412",
          "CSAFPID-1741417",
          "CSAFPID-1741419",
          "CSAFPID-1741414",
          "CSAFPID-1741428",
          "CSAFPID-1741425",
          "CSAFPID-1741413",
          "CSAFPID-1741409",
          "CSAFPID-1741422",
          "CSAFPID-1720442",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1717810",
          "CSAFPID-1741366",
          "CSAFPID-1741367",
          "CSAFPID-1741368",
          "CSAFPID-1741354",
          "CSAFPID-1741369",
          "CSAFPID-1741370",
          "CSAFPID-1741352",
          "CSAFPID-1741371",
          "CSAFPID-1741353",
          "CSAFPID-1723936",
          "CSAFPID-1723937",
          "CSAFPID-1717812",
          "CSAFPID-1717813",
          "CSAFPID-1723941",
          "CSAFPID-1723942",
          "CSAFPID-1723943",
          "CSAFPID-1723944",
          "CSAFPID-1723945",
          "CSAFPID-1717820",
          "CSAFPID-1717821",
          "CSAFPID-1717822",
          "CSAFPID-1717823"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49127",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49127.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1741420",
            "CSAFPID-1741408",
            "CSAFPID-1741426",
            "CSAFPID-1741416",
            "CSAFPID-1741410",
            "CSAFPID-1741430",
            "CSAFPID-1741406",
            "CSAFPID-1741423",
            "CSAFPID-1741432",
            "CSAFPID-1741418",
            "CSAFPID-1741405",
            "CSAFPID-1741407",
            "CSAFPID-1741429",
            "CSAFPID-1741415",
            "CSAFPID-1741431",
            "CSAFPID-1741427",
            "CSAFPID-1741424",
            "CSAFPID-1741421",
            "CSAFPID-1741411",
            "CSAFPID-1741412",
            "CSAFPID-1741417",
            "CSAFPID-1741419",
            "CSAFPID-1741414",
            "CSAFPID-1741428",
            "CSAFPID-1741425",
            "CSAFPID-1741413",
            "CSAFPID-1741409",
            "CSAFPID-1741422",
            "CSAFPID-1720442",
            "CSAFPID-1717808",
            "CSAFPID-1717809",
            "CSAFPID-1717810",
            "CSAFPID-1741366",
            "CSAFPID-1741367",
            "CSAFPID-1741368",
            "CSAFPID-1741354",
            "CSAFPID-1741369",
            "CSAFPID-1741370",
            "CSAFPID-1741352",
            "CSAFPID-1741371",
            "CSAFPID-1741353",
            "CSAFPID-1723936",
            "CSAFPID-1723937",
            "CSAFPID-1717812",
            "CSAFPID-1717813",
            "CSAFPID-1723941",
            "CSAFPID-1723942",
            "CSAFPID-1723943",
            "CSAFPID-1723944",
            "CSAFPID-1723945",
            "CSAFPID-1717820",
            "CSAFPID-1717821",
            "CSAFPID-1717822",
            "CSAFPID-1717823"
          ]
        }
      ],
      "title": "CVE-2024-49127"
    },
    {
      "cve": "CVE-2024-49138",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1720442",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1717810",
          "CSAFPID-1741366",
          "CSAFPID-1741367",
          "CSAFPID-1741368",
          "CSAFPID-1741354",
          "CSAFPID-1741369",
          "CSAFPID-1741370",
          "CSAFPID-1741352",
          "CSAFPID-1741371",
          "CSAFPID-1741353",
          "CSAFPID-1723936",
          "CSAFPID-1723937",
          "CSAFPID-1717812",
          "CSAFPID-1717813",
          "CSAFPID-1723941",
          "CSAFPID-1723942",
          "CSAFPID-1723943",
          "CSAFPID-1723944",
          "CSAFPID-1723945",
          "CSAFPID-1717820",
          "CSAFPID-1717821",
          "CSAFPID-1717822",
          "CSAFPID-1717823",
          "CSAFPID-549001",
          "CSAFPID-1741424",
          "CSAFPID-1741422",
          "CSAFPID-1741414",
          "CSAFPID-1741431",
          "CSAFPID-1741412",
          "CSAFPID-1741432",
          "CSAFPID-1741425",
          "CSAFPID-1741417",
          "CSAFPID-1741423",
          "CSAFPID-1741409",
          "CSAFPID-1741410",
          "CSAFPID-1741413",
          "CSAFPID-1741411",
          "CSAFPID-1741405",
          "CSAFPID-1741427",
          "CSAFPID-1741416",
          "CSAFPID-1741418",
          "CSAFPID-1741407",
          "CSAFPID-1741429",
          "CSAFPID-1741420",
          "CSAFPID-1741406",
          "CSAFPID-1741421",
          "CSAFPID-1741419",
          "CSAFPID-1741415",
          "CSAFPID-1741426",
          "CSAFPID-1741430",
          "CSAFPID-1741408",
          "CSAFPID-1741428"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49138",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49138.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1720442",
            "CSAFPID-1717808",
            "CSAFPID-1717809",
            "CSAFPID-1717810",
            "CSAFPID-1741366",
            "CSAFPID-1741367",
            "CSAFPID-1741368",
            "CSAFPID-1741354",
            "CSAFPID-1741369",
            "CSAFPID-1741370",
            "CSAFPID-1741352",
            "CSAFPID-1741371",
            "CSAFPID-1741353",
            "CSAFPID-1723936",
            "CSAFPID-1723937",
            "CSAFPID-1717812",
            "CSAFPID-1717813",
            "CSAFPID-1723941",
            "CSAFPID-1723942",
            "CSAFPID-1723943",
            "CSAFPID-1723944",
            "CSAFPID-1723945",
            "CSAFPID-1717820",
            "CSAFPID-1717821",
            "CSAFPID-1717822",
            "CSAFPID-1717823",
            "CSAFPID-549001",
            "CSAFPID-1741424",
            "CSAFPID-1741422",
            "CSAFPID-1741414",
            "CSAFPID-1741431",
            "CSAFPID-1741412",
            "CSAFPID-1741432",
            "CSAFPID-1741425",
            "CSAFPID-1741417",
            "CSAFPID-1741423",
            "CSAFPID-1741409",
            "CSAFPID-1741410",
            "CSAFPID-1741413",
            "CSAFPID-1741411",
            "CSAFPID-1741405",
            "CSAFPID-1741427",
            "CSAFPID-1741416",
            "CSAFPID-1741418",
            "CSAFPID-1741407",
            "CSAFPID-1741429",
            "CSAFPID-1741420",
            "CSAFPID-1741406",
            "CSAFPID-1741421",
            "CSAFPID-1741419",
            "CSAFPID-1741415",
            "CSAFPID-1741426",
            "CSAFPID-1741430",
            "CSAFPID-1741408",
            "CSAFPID-1741428"
          ]
        }
      ],
      "title": "CVE-2024-49138"
    },
    {
      "cve": "CVE-2024-49085",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "other",
          "text": "Integer Overflow or Wraparound",
          "title": "CWE-190"
        },
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1741407",
          "CSAFPID-1741422",
          "CSAFPID-1741416",
          "CSAFPID-1741419",
          "CSAFPID-1741427",
          "CSAFPID-1741428",
          "CSAFPID-1741429",
          "CSAFPID-1741430",
          "CSAFPID-1741431",
          "CSAFPID-1741432",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1717810",
          "CSAFPID-1741354",
          "CSAFPID-1741352",
          "CSAFPID-1741353",
          "CSAFPID-1717812",
          "CSAFPID-1717813",
          "CSAFPID-1723941",
          "CSAFPID-1723942",
          "CSAFPID-1723943",
          "CSAFPID-1723944",
          "CSAFPID-1723945",
          "CSAFPID-1717820",
          "CSAFPID-1717821",
          "CSAFPID-1717822",
          "CSAFPID-1717823"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49085",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49085.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1741407",
            "CSAFPID-1741422",
            "CSAFPID-1741416",
            "CSAFPID-1741419",
            "CSAFPID-1741427",
            "CSAFPID-1741428",
            "CSAFPID-1741429",
            "CSAFPID-1741430",
            "CSAFPID-1741431",
            "CSAFPID-1741432",
            "CSAFPID-1717808",
            "CSAFPID-1717809",
            "CSAFPID-1717810",
            "CSAFPID-1741354",
            "CSAFPID-1741352",
            "CSAFPID-1741353",
            "CSAFPID-1717812",
            "CSAFPID-1717813",
            "CSAFPID-1723941",
            "CSAFPID-1723942",
            "CSAFPID-1723943",
            "CSAFPID-1723944",
            "CSAFPID-1723945",
            "CSAFPID-1717820",
            "CSAFPID-1717821",
            "CSAFPID-1717822",
            "CSAFPID-1717823"
          ]
        }
      ],
      "title": "CVE-2024-49085"
    },
    {
      "cve": "CVE-2024-49086",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1741407",
          "CSAFPID-1741422",
          "CSAFPID-1741416",
          "CSAFPID-1741419",
          "CSAFPID-1741427",
          "CSAFPID-1741428",
          "CSAFPID-1741429",
          "CSAFPID-1741430",
          "CSAFPID-1741431",
          "CSAFPID-1741432",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1717810",
          "CSAFPID-1741354",
          "CSAFPID-1741352",
          "CSAFPID-1741353",
          "CSAFPID-1717812",
          "CSAFPID-1717813",
          "CSAFPID-1723941",
          "CSAFPID-1723942",
          "CSAFPID-1723943",
          "CSAFPID-1723944",
          "CSAFPID-1723945",
          "CSAFPID-1717820",
          "CSAFPID-1717821",
          "CSAFPID-1717822",
          "CSAFPID-1717823"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49086",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49086.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1741407",
            "CSAFPID-1741422",
            "CSAFPID-1741416",
            "CSAFPID-1741419",
            "CSAFPID-1741427",
            "CSAFPID-1741428",
            "CSAFPID-1741429",
            "CSAFPID-1741430",
            "CSAFPID-1741431",
            "CSAFPID-1741432",
            "CSAFPID-1717808",
            "CSAFPID-1717809",
            "CSAFPID-1717810",
            "CSAFPID-1741354",
            "CSAFPID-1741352",
            "CSAFPID-1741353",
            "CSAFPID-1717812",
            "CSAFPID-1717813",
            "CSAFPID-1723941",
            "CSAFPID-1723942",
            "CSAFPID-1723943",
            "CSAFPID-1723944",
            "CSAFPID-1723945",
            "CSAFPID-1717820",
            "CSAFPID-1717821",
            "CSAFPID-1717822",
            "CSAFPID-1717823"
          ]
        }
      ],
      "title": "CVE-2024-49086"
    },
    {
      "cve": "CVE-2024-49091",
      "cwe": {
        "id": "CWE-591",
        "name": "Sensitive Data Storage in Improperly Locked Memory"
      },
      "notes": [
        {
          "category": "other",
          "text": "Sensitive Data Storage in Improperly Locked Memory",
          "title": "CWE-591"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1741407",
          "CSAFPID-1741422",
          "CSAFPID-1741416",
          "CSAFPID-1741419",
          "CSAFPID-1741427",
          "CSAFPID-1741431",
          "CSAFPID-1741432",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1717810",
          "CSAFPID-1741354",
          "CSAFPID-1741352",
          "CSAFPID-1741353",
          "CSAFPID-1717812",
          "CSAFPID-1717813",
          "CSAFPID-1717820",
          "CSAFPID-1717821",
          "CSAFPID-1717822",
          "CSAFPID-1717823"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49091",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49091.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1741407",
            "CSAFPID-1741422",
            "CSAFPID-1741416",
            "CSAFPID-1741419",
            "CSAFPID-1741427",
            "CSAFPID-1741431",
            "CSAFPID-1741432",
            "CSAFPID-1717808",
            "CSAFPID-1717809",
            "CSAFPID-1717810",
            "CSAFPID-1741354",
            "CSAFPID-1741352",
            "CSAFPID-1741353",
            "CSAFPID-1717812",
            "CSAFPID-1717813",
            "CSAFPID-1717820",
            "CSAFPID-1717821",
            "CSAFPID-1717822",
            "CSAFPID-1717823"
          ]
        }
      ],
      "title": "CVE-2024-49091"
    },
    {
      "cve": "CVE-2024-49106",
      "cwe": {
        "id": "CWE-591",
        "name": "Sensitive Data Storage in Improperly Locked Memory"
      },
      "notes": [
        {
          "category": "other",
          "text": "Sensitive Data Storage in Improperly Locked Memory",
          "title": "CWE-591"
        },
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1741407",
          "CSAFPID-1741422",
          "CSAFPID-1741416",
          "CSAFPID-1741419",
          "CSAFPID-1741427",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1717810",
          "CSAFPID-1741354",
          "CSAFPID-1741352",
          "CSAFPID-1741353",
          "CSAFPID-1717812",
          "CSAFPID-1717813"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49106",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49106.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1741407",
            "CSAFPID-1741422",
            "CSAFPID-1741416",
            "CSAFPID-1741419",
            "CSAFPID-1741427",
            "CSAFPID-1717808",
            "CSAFPID-1717809",
            "CSAFPID-1717810",
            "CSAFPID-1741354",
            "CSAFPID-1741352",
            "CSAFPID-1741353",
            "CSAFPID-1717812",
            "CSAFPID-1717813"
          ]
        }
      ],
      "title": "CVE-2024-49106"
    },
    {
      "cve": "CVE-2024-49108",
      "cwe": {
        "id": "CWE-591",
        "name": "Sensitive Data Storage in Improperly Locked Memory"
      },
      "notes": [
        {
          "category": "other",
          "text": "Sensitive Data Storage in Improperly Locked Memory",
          "title": "CWE-591"
        },
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1741407",
          "CSAFPID-1741422",
          "CSAFPID-1741416",
          "CSAFPID-1741419",
          "CSAFPID-1741427",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1717810",
          "CSAFPID-1741354",
          "CSAFPID-1741352",
          "CSAFPID-1741353",
          "CSAFPID-1717812",
          "CSAFPID-1717813"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49108",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49108.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1741407",
            "CSAFPID-1741422",
            "CSAFPID-1741416",
            "CSAFPID-1741419",
            "CSAFPID-1741427",
            "CSAFPID-1717808",
            "CSAFPID-1717809",
            "CSAFPID-1717810",
            "CSAFPID-1741354",
            "CSAFPID-1741352",
            "CSAFPID-1741353",
            "CSAFPID-1717812",
            "CSAFPID-1717813"
          ]
        }
      ],
      "title": "CVE-2024-49108"
    },
    {
      "cve": "CVE-2024-49115",
      "cwe": {
        "id": "CWE-591",
        "name": "Sensitive Data Storage in Improperly Locked Memory"
      },
      "notes": [
        {
          "category": "other",
          "text": "Sensitive Data Storage in Improperly Locked Memory",
          "title": "CWE-591"
        },
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1741407",
          "CSAFPID-1741422",
          "CSAFPID-1741416",
          "CSAFPID-1741419",
          "CSAFPID-1741427",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1717810",
          "CSAFPID-1741354",
          "CSAFPID-1741352",
          "CSAFPID-1741353",
          "CSAFPID-1717812",
          "CSAFPID-1717813"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49115",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49115.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1741407",
            "CSAFPID-1741422",
            "CSAFPID-1741416",
            "CSAFPID-1741419",
            "CSAFPID-1741427",
            "CSAFPID-1717808",
            "CSAFPID-1717809",
            "CSAFPID-1717810",
            "CSAFPID-1741354",
            "CSAFPID-1741352",
            "CSAFPID-1741353",
            "CSAFPID-1717812",
            "CSAFPID-1717813"
          ]
        }
      ],
      "title": "CVE-2024-49115"
    },
    {
      "cve": "CVE-2024-49119",
      "cwe": {
        "id": "CWE-843",
        "name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
          "title": "CWE-843"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1741407",
          "CSAFPID-1741422",
          "CSAFPID-1741416",
          "CSAFPID-1741419",
          "CSAFPID-1741427",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1717810",
          "CSAFPID-1741354",
          "CSAFPID-1741352",
          "CSAFPID-1741353",
          "CSAFPID-1717812",
          "CSAFPID-1717813"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49119",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49119.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1741407",
            "CSAFPID-1741422",
            "CSAFPID-1741416",
            "CSAFPID-1741419",
            "CSAFPID-1741427",
            "CSAFPID-1717808",
            "CSAFPID-1717809",
            "CSAFPID-1717810",
            "CSAFPID-1741354",
            "CSAFPID-1741352",
            "CSAFPID-1741353",
            "CSAFPID-1717812",
            "CSAFPID-1717813"
          ]
        }
      ],
      "title": "CVE-2024-49119"
    },
    {
      "cve": "CVE-2024-49120",
      "cwe": {
        "id": "CWE-453",
        "name": "Insecure Default Variable Initialization"
      },
      "notes": [
        {
          "category": "other",
          "text": "Insecure Default Variable Initialization",
          "title": "CWE-453"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1741407",
          "CSAFPID-1741422",
          "CSAFPID-1741416",
          "CSAFPID-1741419",
          "CSAFPID-1741427",
          "CSAFPID-1741431",
          "CSAFPID-1741432",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1717810",
          "CSAFPID-1741354",
          "CSAFPID-1741352",
          "CSAFPID-1741353",
          "CSAFPID-1717812",
          "CSAFPID-1717813",
          "CSAFPID-1717820",
          "CSAFPID-1717821",
          "CSAFPID-1717822",
          "CSAFPID-1717823"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49120",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49120.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1741407",
            "CSAFPID-1741422",
            "CSAFPID-1741416",
            "CSAFPID-1741419",
            "CSAFPID-1741427",
            "CSAFPID-1741431",
            "CSAFPID-1741432",
            "CSAFPID-1717808",
            "CSAFPID-1717809",
            "CSAFPID-1717810",
            "CSAFPID-1741354",
            "CSAFPID-1741352",
            "CSAFPID-1741353",
            "CSAFPID-1717812",
            "CSAFPID-1717813",
            "CSAFPID-1717820",
            "CSAFPID-1717821",
            "CSAFPID-1717822",
            "CSAFPID-1717823"
          ]
        }
      ],
      "title": "CVE-2024-49120"
    },
    {
      "cve": "CVE-2024-49125",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1741407",
          "CSAFPID-1741422",
          "CSAFPID-1741416",
          "CSAFPID-1741419",
          "CSAFPID-1741427",
          "CSAFPID-1741428",
          "CSAFPID-1741429",
          "CSAFPID-1741430",
          "CSAFPID-1741431",
          "CSAFPID-1741432",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1717810",
          "CSAFPID-1741354",
          "CSAFPID-1741352",
          "CSAFPID-1741353",
          "CSAFPID-1717812",
          "CSAFPID-1717813",
          "CSAFPID-1723941",
          "CSAFPID-1723942",
          "CSAFPID-1723943",
          "CSAFPID-1723944",
          "CSAFPID-1723945",
          "CSAFPID-1717820",
          "CSAFPID-1717821",
          "CSAFPID-1717822",
          "CSAFPID-1717823"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49125",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49125.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1741407",
            "CSAFPID-1741422",
            "CSAFPID-1741416",
            "CSAFPID-1741419",
            "CSAFPID-1741427",
            "CSAFPID-1741428",
            "CSAFPID-1741429",
            "CSAFPID-1741430",
            "CSAFPID-1741431",
            "CSAFPID-1741432",
            "CSAFPID-1717808",
            "CSAFPID-1717809",
            "CSAFPID-1717810",
            "CSAFPID-1741354",
            "CSAFPID-1741352",
            "CSAFPID-1741353",
            "CSAFPID-1717812",
            "CSAFPID-1717813",
            "CSAFPID-1723941",
            "CSAFPID-1723942",
            "CSAFPID-1723943",
            "CSAFPID-1723944",
            "CSAFPID-1723945",
            "CSAFPID-1717820",
            "CSAFPID-1717821",
            "CSAFPID-1717822",
            "CSAFPID-1717823"
          ]
        }
      ],
      "title": "CVE-2024-49125"
    },
    {
      "cve": "CVE-2024-49129",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "other",
          "text": "Uncontrolled Resource Consumption",
          "title": "CWE-400"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1741407",
          "CSAFPID-1741422",
          "CSAFPID-1741416",
          "CSAFPID-1741419",
          "CSAFPID-1741427",
          "CSAFPID-1741431",
          "CSAFPID-1741432",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1717810",
          "CSAFPID-1741354",
          "CSAFPID-1741352",
          "CSAFPID-1741353",
          "CSAFPID-1717812",
          "CSAFPID-1717813",
          "CSAFPID-1717820",
          "CSAFPID-1717821",
          "CSAFPID-1717822",
          "CSAFPID-1717823"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49129",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49129.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1741407",
            "CSAFPID-1741422",
            "CSAFPID-1741416",
            "CSAFPID-1741419",
            "CSAFPID-1741427",
            "CSAFPID-1741431",
            "CSAFPID-1741432",
            "CSAFPID-1717808",
            "CSAFPID-1717809",
            "CSAFPID-1717810",
            "CSAFPID-1741354",
            "CSAFPID-1741352",
            "CSAFPID-1741353",
            "CSAFPID-1717812",
            "CSAFPID-1717813",
            "CSAFPID-1717820",
            "CSAFPID-1717821",
            "CSAFPID-1717822",
            "CSAFPID-1717823"
          ]
        }
      ],
      "title": "CVE-2024-49129"
    },
    {
      "cve": "CVE-2024-49116",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1717810",
          "CSAFPID-1741354",
          "CSAFPID-1741352",
          "CSAFPID-1741353",
          "CSAFPID-1717812",
          "CSAFPID-1717813",
          "CSAFPID-1741407",
          "CSAFPID-1741416",
          "CSAFPID-1741427",
          "CSAFPID-1741422",
          "CSAFPID-1741419"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49116",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49116.json"
        }
      ],
      "title": "CVE-2024-49116"
    },
    {
      "cve": "CVE-2024-49128",
      "cwe": {
        "id": "CWE-591",
        "name": "Sensitive Data Storage in Improperly Locked Memory"
      },
      "notes": [
        {
          "category": "other",
          "text": "Sensitive Data Storage in Improperly Locked Memory",
          "title": "CWE-591"
        },
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1741432",
          "CSAFPID-1741416",
          "CSAFPID-1741407",
          "CSAFPID-1741427",
          "CSAFPID-1741431",
          "CSAFPID-1741419",
          "CSAFPID-1741422",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1717810",
          "CSAFPID-1741354",
          "CSAFPID-1741352",
          "CSAFPID-1741353",
          "CSAFPID-1717812",
          "CSAFPID-1717813",
          "CSAFPID-1717820",
          "CSAFPID-1717821",
          "CSAFPID-1717822",
          "CSAFPID-1717823"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49128",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49128.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1741432",
            "CSAFPID-1741416",
            "CSAFPID-1741407",
            "CSAFPID-1741427",
            "CSAFPID-1741431",
            "CSAFPID-1741419",
            "CSAFPID-1741422",
            "CSAFPID-1717808",
            "CSAFPID-1717809",
            "CSAFPID-1717810",
            "CSAFPID-1741354",
            "CSAFPID-1741352",
            "CSAFPID-1741353",
            "CSAFPID-1717812",
            "CSAFPID-1717813",
            "CSAFPID-1717820",
            "CSAFPID-1717821",
            "CSAFPID-1717822",
            "CSAFPID-1717823"
          ]
        }
      ],
      "title": "CVE-2024-49128"
    },
    {
      "cve": "CVE-2024-49117",
      "cwe": {
        "id": "CWE-393",
        "name": "Return of Wrong Status Code"
      },
      "notes": [
        {
          "category": "other",
          "text": "Return of Wrong Status Code",
          "title": "CWE-393"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1741422",
          "CSAFPID-1741411",
          "CSAFPID-1741412",
          "CSAFPID-1741416",
          "CSAFPID-1741417",
          "CSAFPID-1741418",
          "CSAFPID-1741419",
          "CSAFPID-1741420",
          "CSAFPID-1741421",
          "CSAFPID-1717810",
          "CSAFPID-1741367",
          "CSAFPID-1741354",
          "CSAFPID-1741369",
          "CSAFPID-1741370",
          "CSAFPID-1741352",
          "CSAFPID-1741371",
          "CSAFPID-1741353"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49117",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49117.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1741422",
            "CSAFPID-1741411",
            "CSAFPID-1741412",
            "CSAFPID-1741416",
            "CSAFPID-1741417",
            "CSAFPID-1741418",
            "CSAFPID-1741419",
            "CSAFPID-1741420",
            "CSAFPID-1741421",
            "CSAFPID-1717810",
            "CSAFPID-1741367",
            "CSAFPID-1741354",
            "CSAFPID-1741369",
            "CSAFPID-1741370",
            "CSAFPID-1741352",
            "CSAFPID-1741371",
            "CSAFPID-1741353"
          ]
        }
      ],
      "title": "CVE-2024-49117"
    },
    {
      "cve": "CVE-2024-49093",
      "cwe": {
        "id": "CWE-681",
        "name": "Incorrect Conversion between Numeric Types"
      },
      "notes": [
        {
          "category": "other",
          "text": "Incorrect Conversion between Numeric Types",
          "title": "CWE-681"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1741416",
          "CSAFPID-1741420",
          "CSAFPID-1741421",
          "CSAFPID-1741353",
          "CSAFPID-1741354",
          "CSAFPID-1741371"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49093",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49093.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1741416",
            "CSAFPID-1741420",
            "CSAFPID-1741421",
            "CSAFPID-1741353",
            "CSAFPID-1741354",
            "CSAFPID-1741371"
          ]
        }
      ],
      "title": "CVE-2024-49093"
    },
    {
      "cve": "CVE-2024-43594",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Access Control",
          "title": "CWE-284"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-618487",
          "CSAFPID-634172",
          "CSAFPID-1741404",
          "CSAFPID-1718165",
          "CSAFPID-1718167",
          "CSAFPID-1741485"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-43594",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-43594.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-618487",
            "CSAFPID-634172",
            "CSAFPID-1741404",
            "CSAFPID-1718165",
            "CSAFPID-1718167",
            "CSAFPID-1741485"
          ]
        }
      ],
      "title": "CVE-2024-43594"
    },
    {
      "cve": "CVE-2024-49073",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Input Validation",
          "title": "CWE-20"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1741405",
          "CSAFPID-1741406",
          "CSAFPID-1741407",
          "CSAFPID-1741408",
          "CSAFPID-1741409",
          "CSAFPID-1741410",
          "CSAFPID-1741411",
          "CSAFPID-1741412",
          "CSAFPID-1741413",
          "CSAFPID-1741414",
          "CSAFPID-1741415",
          "CSAFPID-1741416",
          "CSAFPID-1741417",
          "CSAFPID-1741418",
          "CSAFPID-1741419",
          "CSAFPID-1741420",
          "CSAFPID-1741421",
          "CSAFPID-1720442",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1741366",
          "CSAFPID-1741367",
          "CSAFPID-1741368",
          "CSAFPID-1741354",
          "CSAFPID-1741369",
          "CSAFPID-1741370",
          "CSAFPID-1741352",
          "CSAFPID-1741371",
          "CSAFPID-1741353"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49073",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49073.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1741405",
            "CSAFPID-1741406",
            "CSAFPID-1741407",
            "CSAFPID-1741408",
            "CSAFPID-1741409",
            "CSAFPID-1741410",
            "CSAFPID-1741411",
            "CSAFPID-1741412",
            "CSAFPID-1741413",
            "CSAFPID-1741414",
            "CSAFPID-1741415",
            "CSAFPID-1741416",
            "CSAFPID-1741417",
            "CSAFPID-1741418",
            "CSAFPID-1741419",
            "CSAFPID-1741420",
            "CSAFPID-1741421",
            "CSAFPID-1720442",
            "CSAFPID-1717808",
            "CSAFPID-1717809",
            "CSAFPID-1741366",
            "CSAFPID-1741367",
            "CSAFPID-1741368",
            "CSAFPID-1741354",
            "CSAFPID-1741369",
            "CSAFPID-1741370",
            "CSAFPID-1741352",
            "CSAFPID-1741371",
            "CSAFPID-1741353"
          ]
        }
      ],
      "title": "CVE-2024-49073"
    },
    {
      "cve": "CVE-2024-49074",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1741405",
          "CSAFPID-1741406",
          "CSAFPID-1741407",
          "CSAFPID-1741408",
          "CSAFPID-1741409",
          "CSAFPID-1741410",
          "CSAFPID-1741413",
          "CSAFPID-1741414",
          "CSAFPID-1741415",
          "CSAFPID-1720442",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1741366",
          "CSAFPID-1741368"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49074",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49074.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1741405",
            "CSAFPID-1741406",
            "CSAFPID-1741407",
            "CSAFPID-1741408",
            "CSAFPID-1741409",
            "CSAFPID-1741410",
            "CSAFPID-1741413",
            "CSAFPID-1741414",
            "CSAFPID-1741415",
            "CSAFPID-1720442",
            "CSAFPID-1717808",
            "CSAFPID-1717809",
            "CSAFPID-1741366",
            "CSAFPID-1741368"
          ]
        }
      ],
      "title": "CVE-2024-49074"
    },
    {
      "cve": "CVE-2024-49084",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
          "title": "CWE-362"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1741405",
          "CSAFPID-1741406",
          "CSAFPID-1741407",
          "CSAFPID-1741422",
          "CSAFPID-1741408",
          "CSAFPID-1741409",
          "CSAFPID-1741410",
          "CSAFPID-1741411",
          "CSAFPID-1741412",
          "CSAFPID-1741413",
          "CSAFPID-1741414",
          "CSAFPID-1741415",
          "CSAFPID-1741416",
          "CSAFPID-1741417",
          "CSAFPID-1741418",
          "CSAFPID-1741419",
          "CSAFPID-1741420",
          "CSAFPID-1741421",
          "CSAFPID-1741423",
          "CSAFPID-1741424",
          "CSAFPID-1741425",
          "CSAFPID-1741426",
          "CSAFPID-1741427",
          "CSAFPID-1741428",
          "CSAFPID-1741429",
          "CSAFPID-1741430",
          "CSAFPID-1741431",
          "CSAFPID-1741432",
          "CSAFPID-1720442",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1717810",
          "CSAFPID-1741366",
          "CSAFPID-1741367",
          "CSAFPID-1741368",
          "CSAFPID-1741354",
          "CSAFPID-1741369",
          "CSAFPID-1741370",
          "CSAFPID-1741352",
          "CSAFPID-1741371",
          "CSAFPID-1741353",
          "CSAFPID-1723936",
          "CSAFPID-1723937",
          "CSAFPID-1717812",
          "CSAFPID-1717813",
          "CSAFPID-1723941",
          "CSAFPID-1723942",
          "CSAFPID-1723943",
          "CSAFPID-1723944",
          "CSAFPID-1723945",
          "CSAFPID-1717820",
          "CSAFPID-1717821",
          "CSAFPID-1717822",
          "CSAFPID-1717823"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49084",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49084.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1741405",
            "CSAFPID-1741406",
            "CSAFPID-1741407",
            "CSAFPID-1741422",
            "CSAFPID-1741408",
            "CSAFPID-1741409",
            "CSAFPID-1741410",
            "CSAFPID-1741411",
            "CSAFPID-1741412",
            "CSAFPID-1741413",
            "CSAFPID-1741414",
            "CSAFPID-1741415",
            "CSAFPID-1741416",
            "CSAFPID-1741417",
            "CSAFPID-1741418",
            "CSAFPID-1741419",
            "CSAFPID-1741420",
            "CSAFPID-1741421",
            "CSAFPID-1741423",
            "CSAFPID-1741424",
            "CSAFPID-1741425",
            "CSAFPID-1741426",
            "CSAFPID-1741427",
            "CSAFPID-1741428",
            "CSAFPID-1741429",
            "CSAFPID-1741430",
            "CSAFPID-1741431",
            "CSAFPID-1741432",
            "CSAFPID-1720442",
            "CSAFPID-1717808",
            "CSAFPID-1717809",
            "CSAFPID-1717810",
            "CSAFPID-1741366",
            "CSAFPID-1741367",
            "CSAFPID-1741368",
            "CSAFPID-1741354",
            "CSAFPID-1741369",
            "CSAFPID-1741370",
            "CSAFPID-1741352",
            "CSAFPID-1741371",
            "CSAFPID-1741353",
            "CSAFPID-1723936",
            "CSAFPID-1723937",
            "CSAFPID-1717812",
            "CSAFPID-1717813",
            "CSAFPID-1723941",
            "CSAFPID-1723942",
            "CSAFPID-1723943",
            "CSAFPID-1723944",
            "CSAFPID-1723945",
            "CSAFPID-1717820",
            "CSAFPID-1717821",
            "CSAFPID-1717822",
            "CSAFPID-1717823"
          ]
        }
      ],
      "title": "CVE-2024-49084"
    },
    {
      "cve": "CVE-2024-49087",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Input Validation",
          "title": "CWE-20"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1741405",
          "CSAFPID-1741406",
          "CSAFPID-1741407",
          "CSAFPID-1741408",
          "CSAFPID-1741409",
          "CSAFPID-1741410",
          "CSAFPID-1741411",
          "CSAFPID-1741412",
          "CSAFPID-1741413",
          "CSAFPID-1741414",
          "CSAFPID-1741415",
          "CSAFPID-1741416",
          "CSAFPID-1741417",
          "CSAFPID-1741418",
          "CSAFPID-1741419",
          "CSAFPID-1741420",
          "CSAFPID-1741421",
          "CSAFPID-1720442",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1741366",
          "CSAFPID-1741367",
          "CSAFPID-1741368",
          "CSAFPID-1741354",
          "CSAFPID-1741369",
          "CSAFPID-1741370",
          "CSAFPID-1741352",
          "CSAFPID-1741371",
          "CSAFPID-1741353"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49087",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49087.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1741405",
            "CSAFPID-1741406",
            "CSAFPID-1741407",
            "CSAFPID-1741408",
            "CSAFPID-1741409",
            "CSAFPID-1741410",
            "CSAFPID-1741411",
            "CSAFPID-1741412",
            "CSAFPID-1741413",
            "CSAFPID-1741414",
            "CSAFPID-1741415",
            "CSAFPID-1741416",
            "CSAFPID-1741417",
            "CSAFPID-1741418",
            "CSAFPID-1741419",
            "CSAFPID-1741420",
            "CSAFPID-1741421",
            "CSAFPID-1720442",
            "CSAFPID-1717808",
            "CSAFPID-1717809",
            "CSAFPID-1741366",
            "CSAFPID-1741367",
            "CSAFPID-1741368",
            "CSAFPID-1741354",
            "CSAFPID-1741369",
            "CSAFPID-1741370",
            "CSAFPID-1741352",
            "CSAFPID-1741371",
            "CSAFPID-1741353"
          ]
        }
      ],
      "title": "CVE-2024-49087"
    },
    {
      "cve": "CVE-2024-49089",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "other",
          "text": "Integer Overflow or Wraparound",
          "title": "CWE-190"
        },
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1741405",
          "CSAFPID-1741406",
          "CSAFPID-1741407",
          "CSAFPID-1741422",
          "CSAFPID-1741408",
          "CSAFPID-1741409",
          "CSAFPID-1741410",
          "CSAFPID-1741411",
          "CSAFPID-1741412",
          "CSAFPID-1741413",
          "CSAFPID-1741414",
          "CSAFPID-1741415",
          "CSAFPID-1741416",
          "CSAFPID-1741417",
          "CSAFPID-1741418",
          "CSAFPID-1741419",
          "CSAFPID-1741420",
          "CSAFPID-1741421",
          "CSAFPID-1741423",
          "CSAFPID-1741424",
          "CSAFPID-1741425",
          "CSAFPID-1741426",
          "CSAFPID-1741427",
          "CSAFPID-1741428",
          "CSAFPID-1741429",
          "CSAFPID-1741430",
          "CSAFPID-1741431",
          "CSAFPID-1741432",
          "CSAFPID-1720442",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1717810",
          "CSAFPID-1741366",
          "CSAFPID-1741367",
          "CSAFPID-1741368",
          "CSAFPID-1741354",
          "CSAFPID-1741369",
          "CSAFPID-1741370",
          "CSAFPID-1741352",
          "CSAFPID-1741371",
          "CSAFPID-1741353",
          "CSAFPID-1723936",
          "CSAFPID-1723937",
          "CSAFPID-1717812",
          "CSAFPID-1717813",
          "CSAFPID-1723941",
          "CSAFPID-1723942",
          "CSAFPID-1723943",
          "CSAFPID-1723944",
          "CSAFPID-1723945",
          "CSAFPID-1717820",
          "CSAFPID-1717821",
          "CSAFPID-1717822",
          "CSAFPID-1717823"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49089",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49089.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1741405",
            "CSAFPID-1741406",
            "CSAFPID-1741407",
            "CSAFPID-1741422",
            "CSAFPID-1741408",
            "CSAFPID-1741409",
            "CSAFPID-1741410",
            "CSAFPID-1741411",
            "CSAFPID-1741412",
            "CSAFPID-1741413",
            "CSAFPID-1741414",
            "CSAFPID-1741415",
            "CSAFPID-1741416",
            "CSAFPID-1741417",
            "CSAFPID-1741418",
            "CSAFPID-1741419",
            "CSAFPID-1741420",
            "CSAFPID-1741421",
            "CSAFPID-1741423",
            "CSAFPID-1741424",
            "CSAFPID-1741425",
            "CSAFPID-1741426",
            "CSAFPID-1741427",
            "CSAFPID-1741428",
            "CSAFPID-1741429",
            "CSAFPID-1741430",
            "CSAFPID-1741431",
            "CSAFPID-1741432",
            "CSAFPID-1720442",
            "CSAFPID-1717808",
            "CSAFPID-1717809",
            "CSAFPID-1717810",
            "CSAFPID-1741366",
            "CSAFPID-1741367",
            "CSAFPID-1741368",
            "CSAFPID-1741354",
            "CSAFPID-1741369",
            "CSAFPID-1741370",
            "CSAFPID-1741352",
            "CSAFPID-1741371",
            "CSAFPID-1741353",
            "CSAFPID-1723936",
            "CSAFPID-1723937",
            "CSAFPID-1717812",
            "CSAFPID-1717813",
            "CSAFPID-1723941",
            "CSAFPID-1723942",
            "CSAFPID-1723943",
            "CSAFPID-1723944",
            "CSAFPID-1723945",
            "CSAFPID-1717820",
            "CSAFPID-1717821",
            "CSAFPID-1717822",
            "CSAFPID-1717823"
          ]
        }
      ],
      "title": "CVE-2024-49089"
    },
    {
      "cve": "CVE-2024-49092",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1741405",
          "CSAFPID-1741406",
          "CSAFPID-1741407",
          "CSAFPID-1741408",
          "CSAFPID-1741409",
          "CSAFPID-1741410",
          "CSAFPID-1741411",
          "CSAFPID-1741412",
          "CSAFPID-1741413",
          "CSAFPID-1741414",
          "CSAFPID-1741415",
          "CSAFPID-1741416",
          "CSAFPID-1741417",
          "CSAFPID-1741418",
          "CSAFPID-1741419",
          "CSAFPID-1741420",
          "CSAFPID-1741421",
          "CSAFPID-1720442",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1741366",
          "CSAFPID-1741367",
          "CSAFPID-1741368",
          "CSAFPID-1741354",
          "CSAFPID-1741369",
          "CSAFPID-1741370",
          "CSAFPID-1741352",
          "CSAFPID-1741371",
          "CSAFPID-1741353"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49092",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49092.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1741405",
            "CSAFPID-1741406",
            "CSAFPID-1741407",
            "CSAFPID-1741408",
            "CSAFPID-1741409",
            "CSAFPID-1741410",
            "CSAFPID-1741411",
            "CSAFPID-1741412",
            "CSAFPID-1741413",
            "CSAFPID-1741414",
            "CSAFPID-1741415",
            "CSAFPID-1741416",
            "CSAFPID-1741417",
            "CSAFPID-1741418",
            "CSAFPID-1741419",
            "CSAFPID-1741420",
            "CSAFPID-1741421",
            "CSAFPID-1720442",
            "CSAFPID-1717808",
            "CSAFPID-1717809",
            "CSAFPID-1741366",
            "CSAFPID-1741367",
            "CSAFPID-1741368",
            "CSAFPID-1741354",
            "CSAFPID-1741369",
            "CSAFPID-1741370",
            "CSAFPID-1741352",
            "CSAFPID-1741371",
            "CSAFPID-1741353"
          ]
        }
      ],
      "title": "CVE-2024-49092"
    },
    {
      "cve": "CVE-2024-49094",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1741405",
          "CSAFPID-1741406",
          "CSAFPID-1741407",
          "CSAFPID-1741408",
          "CSAFPID-1741409",
          "CSAFPID-1741410",
          "CSAFPID-1741411",
          "CSAFPID-1741412",
          "CSAFPID-1741413",
          "CSAFPID-1741414",
          "CSAFPID-1741415",
          "CSAFPID-1741416",
          "CSAFPID-1741417",
          "CSAFPID-1741418",
          "CSAFPID-1741419",
          "CSAFPID-1741420",
          "CSAFPID-1741421",
          "CSAFPID-1720442",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1741366",
          "CSAFPID-1741367",
          "CSAFPID-1741368",
          "CSAFPID-1741354",
          "CSAFPID-1741369",
          "CSAFPID-1741370",
          "CSAFPID-1741352",
          "CSAFPID-1741371",
          "CSAFPID-1741353"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49094",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49094.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1741405",
            "CSAFPID-1741406",
            "CSAFPID-1741407",
            "CSAFPID-1741408",
            "CSAFPID-1741409",
            "CSAFPID-1741410",
            "CSAFPID-1741411",
            "CSAFPID-1741412",
            "CSAFPID-1741413",
            "CSAFPID-1741414",
            "CSAFPID-1741415",
            "CSAFPID-1741416",
            "CSAFPID-1741417",
            "CSAFPID-1741418",
            "CSAFPID-1741419",
            "CSAFPID-1741420",
            "CSAFPID-1741421",
            "CSAFPID-1720442",
            "CSAFPID-1717808",
            "CSAFPID-1717809",
            "CSAFPID-1741366",
            "CSAFPID-1741367",
            "CSAFPID-1741368",
            "CSAFPID-1741354",
            "CSAFPID-1741369",
            "CSAFPID-1741370",
            "CSAFPID-1741352",
            "CSAFPID-1741371",
            "CSAFPID-1741353"
          ]
        }
      ],
      "title": "CVE-2024-49094"
    },
    {
      "cve": "CVE-2024-49096",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "other",
          "text": "Uncontrolled Resource Consumption",
          "title": "CWE-400"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1741405",
          "CSAFPID-1741406",
          "CSAFPID-1741407",
          "CSAFPID-1741422",
          "CSAFPID-1741408",
          "CSAFPID-1741409",
          "CSAFPID-1741410",
          "CSAFPID-1741411",
          "CSAFPID-1741412",
          "CSAFPID-1741413",
          "CSAFPID-1741414",
          "CSAFPID-1741415",
          "CSAFPID-1741416",
          "CSAFPID-1741417",
          "CSAFPID-1741418",
          "CSAFPID-1741419",
          "CSAFPID-1741420",
          "CSAFPID-1741421",
          "CSAFPID-1741423",
          "CSAFPID-1741424",
          "CSAFPID-1741425",
          "CSAFPID-1741426",
          "CSAFPID-1741427",
          "CSAFPID-1741428",
          "CSAFPID-1741429",
          "CSAFPID-1741430",
          "CSAFPID-1741431",
          "CSAFPID-1741432",
          "CSAFPID-1720442",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1717810",
          "CSAFPID-1741366",
          "CSAFPID-1741367",
          "CSAFPID-1741368",
          "CSAFPID-1741354",
          "CSAFPID-1741369",
          "CSAFPID-1741370",
          "CSAFPID-1741352",
          "CSAFPID-1741371",
          "CSAFPID-1741353",
          "CSAFPID-1723936",
          "CSAFPID-1723937",
          "CSAFPID-1717812",
          "CSAFPID-1717813",
          "CSAFPID-1723941",
          "CSAFPID-1723942",
          "CSAFPID-1723943",
          "CSAFPID-1723944",
          "CSAFPID-1723945",
          "CSAFPID-1717820",
          "CSAFPID-1717821",
          "CSAFPID-1717822",
          "CSAFPID-1717823"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49096",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49096.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1741405",
            "CSAFPID-1741406",
            "CSAFPID-1741407",
            "CSAFPID-1741422",
            "CSAFPID-1741408",
            "CSAFPID-1741409",
            "CSAFPID-1741410",
            "CSAFPID-1741411",
            "CSAFPID-1741412",
            "CSAFPID-1741413",
            "CSAFPID-1741414",
            "CSAFPID-1741415",
            "CSAFPID-1741416",
            "CSAFPID-1741417",
            "CSAFPID-1741418",
            "CSAFPID-1741419",
            "CSAFPID-1741420",
            "CSAFPID-1741421",
            "CSAFPID-1741423",
            "CSAFPID-1741424",
            "CSAFPID-1741425",
            "CSAFPID-1741426",
            "CSAFPID-1741427",
            "CSAFPID-1741428",
            "CSAFPID-1741429",
            "CSAFPID-1741430",
            "CSAFPID-1741431",
            "CSAFPID-1741432",
            "CSAFPID-1720442",
            "CSAFPID-1717808",
            "CSAFPID-1717809",
            "CSAFPID-1717810",
            "CSAFPID-1741366",
            "CSAFPID-1741367",
            "CSAFPID-1741368",
            "CSAFPID-1741354",
            "CSAFPID-1741369",
            "CSAFPID-1741370",
            "CSAFPID-1741352",
            "CSAFPID-1741371",
            "CSAFPID-1741353",
            "CSAFPID-1723936",
            "CSAFPID-1723937",
            "CSAFPID-1717812",
            "CSAFPID-1717813",
            "CSAFPID-1723941",
            "CSAFPID-1723942",
            "CSAFPID-1723943",
            "CSAFPID-1723944",
            "CSAFPID-1723945",
            "CSAFPID-1717820",
            "CSAFPID-1717821",
            "CSAFPID-1717822",
            "CSAFPID-1717823"
          ]
        }
      ],
      "title": "CVE-2024-49096"
    },
    {
      "cve": "CVE-2024-49097",
      "cwe": {
        "id": "CWE-591",
        "name": "Sensitive Data Storage in Improperly Locked Memory"
      },
      "notes": [
        {
          "category": "other",
          "text": "Sensitive Data Storage in Improperly Locked Memory",
          "title": "CWE-591"
        },
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1741405",
          "CSAFPID-1741406",
          "CSAFPID-1741407",
          "CSAFPID-1741422",
          "CSAFPID-1741408",
          "CSAFPID-1741409",
          "CSAFPID-1741410",
          "CSAFPID-1741411",
          "CSAFPID-1741412",
          "CSAFPID-1741413",
          "CSAFPID-1741414",
          "CSAFPID-1741415",
          "CSAFPID-1741416",
          "CSAFPID-1741417",
          "CSAFPID-1741418",
          "CSAFPID-1741419",
          "CSAFPID-1741420",
          "CSAFPID-1741421",
          "CSAFPID-1720442",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1717810",
          "CSAFPID-1741366",
          "CSAFPID-1741367",
          "CSAFPID-1741368",
          "CSAFPID-1741354",
          "CSAFPID-1741369",
          "CSAFPID-1741370",
          "CSAFPID-1741352",
          "CSAFPID-1741371",
          "CSAFPID-1741353"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49097",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49097.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1741405",
            "CSAFPID-1741406",
            "CSAFPID-1741407",
            "CSAFPID-1741422",
            "CSAFPID-1741408",
            "CSAFPID-1741409",
            "CSAFPID-1741410",
            "CSAFPID-1741411",
            "CSAFPID-1741412",
            "CSAFPID-1741413",
            "CSAFPID-1741414",
            "CSAFPID-1741415",
            "CSAFPID-1741416",
            "CSAFPID-1741417",
            "CSAFPID-1741418",
            "CSAFPID-1741419",
            "CSAFPID-1741420",
            "CSAFPID-1741421",
            "CSAFPID-1720442",
            "CSAFPID-1717808",
            "CSAFPID-1717809",
            "CSAFPID-1717810",
            "CSAFPID-1741366",
            "CSAFPID-1741367",
            "CSAFPID-1741368",
            "CSAFPID-1741354",
            "CSAFPID-1741369",
            "CSAFPID-1741370",
            "CSAFPID-1741352",
            "CSAFPID-1741371",
            "CSAFPID-1741353"
          ]
        }
      ],
      "title": "CVE-2024-49097"
    },
    {
      "cve": "CVE-2024-49098",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1741405",
          "CSAFPID-1741406",
          "CSAFPID-1741407",
          "CSAFPID-1741408",
          "CSAFPID-1741409",
          "CSAFPID-1741410",
          "CSAFPID-1741411",
          "CSAFPID-1741412",
          "CSAFPID-1741413",
          "CSAFPID-1741414",
          "CSAFPID-1741415",
          "CSAFPID-1741416",
          "CSAFPID-1741417",
          "CSAFPID-1741418",
          "CSAFPID-1741419",
          "CSAFPID-1741420",
          "CSAFPID-1741421",
          "CSAFPID-1720442",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1741366",
          "CSAFPID-1741367",
          "CSAFPID-1741368",
          "CSAFPID-1741354",
          "CSAFPID-1741369",
          "CSAFPID-1741370",
          "CSAFPID-1741352",
          "CSAFPID-1741371",
          "CSAFPID-1741353"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49098",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49098.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1741405",
            "CSAFPID-1741406",
            "CSAFPID-1741407",
            "CSAFPID-1741408",
            "CSAFPID-1741409",
            "CSAFPID-1741410",
            "CSAFPID-1741411",
            "CSAFPID-1741412",
            "CSAFPID-1741413",
            "CSAFPID-1741414",
            "CSAFPID-1741415",
            "CSAFPID-1741416",
            "CSAFPID-1741417",
            "CSAFPID-1741418",
            "CSAFPID-1741419",
            "CSAFPID-1741420",
            "CSAFPID-1741421",
            "CSAFPID-1720442",
            "CSAFPID-1717808",
            "CSAFPID-1717809",
            "CSAFPID-1741366",
            "CSAFPID-1741367",
            "CSAFPID-1741368",
            "CSAFPID-1741354",
            "CSAFPID-1741369",
            "CSAFPID-1741370",
            "CSAFPID-1741352",
            "CSAFPID-1741371",
            "CSAFPID-1741353"
          ]
        }
      ],
      "title": "CVE-2024-49098"
    },
    {
      "cve": "CVE-2024-49099",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1741405",
          "CSAFPID-1741406",
          "CSAFPID-1741407",
          "CSAFPID-1741408",
          "CSAFPID-1741409",
          "CSAFPID-1741410",
          "CSAFPID-1741411",
          "CSAFPID-1741412",
          "CSAFPID-1741413",
          "CSAFPID-1741414",
          "CSAFPID-1741415",
          "CSAFPID-1741416",
          "CSAFPID-1741417",
          "CSAFPID-1741418",
          "CSAFPID-1741419",
          "CSAFPID-1741420",
          "CSAFPID-1741421",
          "CSAFPID-1720442",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1741366",
          "CSAFPID-1741367",
          "CSAFPID-1741368",
          "CSAFPID-1741354",
          "CSAFPID-1741369",
          "CSAFPID-1741370",
          "CSAFPID-1741352",
          "CSAFPID-1741371",
          "CSAFPID-1741353"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49099",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49099.json"
        }
      ],
      "title": "CVE-2024-49099"
    },
    {
      "cve": "CVE-2024-49101",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1741405",
          "CSAFPID-1741406",
          "CSAFPID-1741407",
          "CSAFPID-1741408",
          "CSAFPID-1741409",
          "CSAFPID-1741410",
          "CSAFPID-1741411",
          "CSAFPID-1741412",
          "CSAFPID-1741413",
          "CSAFPID-1741414",
          "CSAFPID-1741415",
          "CSAFPID-1741416",
          "CSAFPID-1741417",
          "CSAFPID-1741418",
          "CSAFPID-1741419",
          "CSAFPID-1741420",
          "CSAFPID-1741421",
          "CSAFPID-1720442",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1741366",
          "CSAFPID-1741367",
          "CSAFPID-1741368",
          "CSAFPID-1741354",
          "CSAFPID-1741369",
          "CSAFPID-1741370",
          "CSAFPID-1741352",
          "CSAFPID-1741371",
          "CSAFPID-1741353"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49101",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49101.json"
        }
      ],
      "title": "CVE-2024-49101"
    },
    {
      "cve": "CVE-2024-49102",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1741405",
          "CSAFPID-1741406",
          "CSAFPID-1741407",
          "CSAFPID-1741422",
          "CSAFPID-1741408",
          "CSAFPID-1741409",
          "CSAFPID-1741410",
          "CSAFPID-1741411",
          "CSAFPID-1741412",
          "CSAFPID-1741413",
          "CSAFPID-1741414",
          "CSAFPID-1741415",
          "CSAFPID-1741416",
          "CSAFPID-1741417",
          "CSAFPID-1741418",
          "CSAFPID-1741419",
          "CSAFPID-1741420",
          "CSAFPID-1741421",
          "CSAFPID-1741423",
          "CSAFPID-1741424",
          "CSAFPID-1741425",
          "CSAFPID-1741426",
          "CSAFPID-1741427",
          "CSAFPID-1741428",
          "CSAFPID-1741429",
          "CSAFPID-1741430",
          "CSAFPID-1741431",
          "CSAFPID-1741432",
          "CSAFPID-1720442",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1717810",
          "CSAFPID-1741366",
          "CSAFPID-1741367",
          "CSAFPID-1741368",
          "CSAFPID-1741354",
          "CSAFPID-1741369",
          "CSAFPID-1741370",
          "CSAFPID-1741352",
          "CSAFPID-1741371",
          "CSAFPID-1741353",
          "CSAFPID-1723936",
          "CSAFPID-1723937",
          "CSAFPID-1717812",
          "CSAFPID-1717813",
          "CSAFPID-1723941",
          "CSAFPID-1723942",
          "CSAFPID-1723943",
          "CSAFPID-1723944",
          "CSAFPID-1723945",
          "CSAFPID-1717820",
          "CSAFPID-1717821",
          "CSAFPID-1717822",
          "CSAFPID-1717823"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49102",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49102.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1741405",
            "CSAFPID-1741406",
            "CSAFPID-1741407",
            "CSAFPID-1741422",
            "CSAFPID-1741408",
            "CSAFPID-1741409",
            "CSAFPID-1741410",
            "CSAFPID-1741411",
            "CSAFPID-1741412",
            "CSAFPID-1741413",
            "CSAFPID-1741414",
            "CSAFPID-1741415",
            "CSAFPID-1741416",
            "CSAFPID-1741417",
            "CSAFPID-1741418",
            "CSAFPID-1741419",
            "CSAFPID-1741420",
            "CSAFPID-1741421",
            "CSAFPID-1741423",
            "CSAFPID-1741424",
            "CSAFPID-1741425",
            "CSAFPID-1741426",
            "CSAFPID-1741427",
            "CSAFPID-1741428",
            "CSAFPID-1741429",
            "CSAFPID-1741430",
            "CSAFPID-1741431",
            "CSAFPID-1741432",
            "CSAFPID-1720442",
            "CSAFPID-1717808",
            "CSAFPID-1717809",
            "CSAFPID-1717810",
            "CSAFPID-1741366",
            "CSAFPID-1741367",
            "CSAFPID-1741368",
            "CSAFPID-1741354",
            "CSAFPID-1741369",
            "CSAFPID-1741370",
            "CSAFPID-1741352",
            "CSAFPID-1741371",
            "CSAFPID-1741353",
            "CSAFPID-1723936",
            "CSAFPID-1723937",
            "CSAFPID-1717812",
            "CSAFPID-1717813",
            "CSAFPID-1723941",
            "CSAFPID-1723942",
            "CSAFPID-1723943",
            "CSAFPID-1723944",
            "CSAFPID-1723945",
            "CSAFPID-1717820",
            "CSAFPID-1717821",
            "CSAFPID-1717822",
            "CSAFPID-1717823"
          ]
        }
      ],
      "title": "CVE-2024-49102"
    },
    {
      "cve": "CVE-2024-49103",
      "cwe": {
        "id": "CWE-191",
        "name": "Integer Underflow (Wrap or Wraparound)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Integer Underflow (Wrap or Wraparound)",
          "title": "CWE-191"
        },
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1741405",
          "CSAFPID-1741406",
          "CSAFPID-1741407",
          "CSAFPID-1741408",
          "CSAFPID-1741409",
          "CSAFPID-1741410",
          "CSAFPID-1741411",
          "CSAFPID-1741412",
          "CSAFPID-1741413",
          "CSAFPID-1741414",
          "CSAFPID-1741415",
          "CSAFPID-1741416",
          "CSAFPID-1741417",
          "CSAFPID-1741418",
          "CSAFPID-1741419",
          "CSAFPID-1741420",
          "CSAFPID-1741421",
          "CSAFPID-1720442",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1741366",
          "CSAFPID-1741367",
          "CSAFPID-1741368",
          "CSAFPID-1741354",
          "CSAFPID-1741369",
          "CSAFPID-1741370",
          "CSAFPID-1741352",
          "CSAFPID-1741371",
          "CSAFPID-1741353"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49103",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49103.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1741405",
            "CSAFPID-1741406",
            "CSAFPID-1741407",
            "CSAFPID-1741408",
            "CSAFPID-1741409",
            "CSAFPID-1741410",
            "CSAFPID-1741411",
            "CSAFPID-1741412",
            "CSAFPID-1741413",
            "CSAFPID-1741414",
            "CSAFPID-1741415",
            "CSAFPID-1741416",
            "CSAFPID-1741417",
            "CSAFPID-1741418",
            "CSAFPID-1741419",
            "CSAFPID-1741420",
            "CSAFPID-1741421",
            "CSAFPID-1720442",
            "CSAFPID-1717808",
            "CSAFPID-1717809",
            "CSAFPID-1741366",
            "CSAFPID-1741367",
            "CSAFPID-1741368",
            "CSAFPID-1741354",
            "CSAFPID-1741369",
            "CSAFPID-1741370",
            "CSAFPID-1741352",
            "CSAFPID-1741371",
            "CSAFPID-1741353"
          ]
        }
      ],
      "title": "CVE-2024-49103"
    },
    {
      "cve": "CVE-2024-49104",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1741405",
          "CSAFPID-1741406",
          "CSAFPID-1741407",
          "CSAFPID-1741422",
          "CSAFPID-1741408",
          "CSAFPID-1741409",
          "CSAFPID-1741410",
          "CSAFPID-1741411",
          "CSAFPID-1741412",
          "CSAFPID-1741413",
          "CSAFPID-1741414",
          "CSAFPID-1741415",
          "CSAFPID-1741416",
          "CSAFPID-1741417",
          "CSAFPID-1741418",
          "CSAFPID-1741419",
          "CSAFPID-1741420",
          "CSAFPID-1741421",
          "CSAFPID-1741423",
          "CSAFPID-1741424",
          "CSAFPID-1741425",
          "CSAFPID-1741426",
          "CSAFPID-1741427",
          "CSAFPID-1741428",
          "CSAFPID-1741429",
          "CSAFPID-1741430",
          "CSAFPID-1741431",
          "CSAFPID-1741432",
          "CSAFPID-1720442",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1717810",
          "CSAFPID-1741366",
          "CSAFPID-1741367",
          "CSAFPID-1741368",
          "CSAFPID-1741354",
          "CSAFPID-1741369",
          "CSAFPID-1741370",
          "CSAFPID-1741352",
          "CSAFPID-1741371",
          "CSAFPID-1741353",
          "CSAFPID-1723936",
          "CSAFPID-1723937",
          "CSAFPID-1717812",
          "CSAFPID-1717813",
          "CSAFPID-1723941",
          "CSAFPID-1723942",
          "CSAFPID-1723943",
          "CSAFPID-1723944",
          "CSAFPID-1723945",
          "CSAFPID-1717820",
          "CSAFPID-1717821",
          "CSAFPID-1717822",
          "CSAFPID-1717823"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49104",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49104.json"
        }
      ],
      "title": "CVE-2024-49104"
    },
    {
      "cve": "CVE-2024-49105",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Access Control",
          "title": "CWE-284"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1720442",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1717810",
          "CSAFPID-1741366",
          "CSAFPID-1741367",
          "CSAFPID-1741368",
          "CSAFPID-1741354",
          "CSAFPID-1741369",
          "CSAFPID-1741370",
          "CSAFPID-1741352",
          "CSAFPID-1741371",
          "CSAFPID-1741353",
          "CSAFPID-1723936",
          "CSAFPID-1723937",
          "CSAFPID-1717812",
          "CSAFPID-1717813",
          "CSAFPID-1723944",
          "CSAFPID-1723945",
          "CSAFPID-1717820",
          "CSAFPID-1717821",
          "CSAFPID-1717822",
          "CSAFPID-1717823",
          "CSAFPID-1741419",
          "CSAFPID-1741423",
          "CSAFPID-1741408",
          "CSAFPID-1741411",
          "CSAFPID-1741430",
          "CSAFPID-1741426",
          "CSAFPID-1741432",
          "CSAFPID-1741413",
          "CSAFPID-1741415",
          "CSAFPID-1741410",
          "CSAFPID-1741406",
          "CSAFPID-1741424",
          "CSAFPID-1741409",
          "CSAFPID-1741421",
          "CSAFPID-1741417",
          "CSAFPID-1741407",
          "CSAFPID-1741427",
          "CSAFPID-1741412",
          "CSAFPID-1741416",
          "CSAFPID-1741418",
          "CSAFPID-1741431",
          "CSAFPID-1741405",
          "CSAFPID-1741422",
          "CSAFPID-1741420",
          "CSAFPID-1741414",
          "CSAFPID-1741425"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49105",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49105.json"
        }
      ],
      "title": "CVE-2024-49105"
    },
    {
      "cve": "CVE-2024-49107",
      "cwe": {
        "id": "CWE-59",
        "name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
          "title": "CWE-59"
        },
        {
          "category": "other",
          "text": "Improper Access Control",
          "title": "CWE-284"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1741405",
          "CSAFPID-1741406",
          "CSAFPID-1741407",
          "CSAFPID-1741422",
          "CSAFPID-1741408",
          "CSAFPID-1741409",
          "CSAFPID-1741410",
          "CSAFPID-1741411",
          "CSAFPID-1741412",
          "CSAFPID-1741413",
          "CSAFPID-1741414",
          "CSAFPID-1741415",
          "CSAFPID-1741416",
          "CSAFPID-1741417",
          "CSAFPID-1741418",
          "CSAFPID-1741419",
          "CSAFPID-1741420",
          "CSAFPID-1741421",
          "CSAFPID-1741423",
          "CSAFPID-1741424",
          "CSAFPID-1741425",
          "CSAFPID-1741426",
          "CSAFPID-1741427",
          "CSAFPID-1720442",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1717810",
          "CSAFPID-1741366",
          "CSAFPID-1741367",
          "CSAFPID-1741368",
          "CSAFPID-1741354",
          "CSAFPID-1741369",
          "CSAFPID-1741370",
          "CSAFPID-1741352",
          "CSAFPID-1741371",
          "CSAFPID-1741353",
          "CSAFPID-1723936",
          "CSAFPID-1723937",
          "CSAFPID-1717812",
          "CSAFPID-1717813"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49107",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49107.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1741405",
            "CSAFPID-1741406",
            "CSAFPID-1741407",
            "CSAFPID-1741422",
            "CSAFPID-1741408",
            "CSAFPID-1741409",
            "CSAFPID-1741410",
            "CSAFPID-1741411",
            "CSAFPID-1741412",
            "CSAFPID-1741413",
            "CSAFPID-1741414",
            "CSAFPID-1741415",
            "CSAFPID-1741416",
            "CSAFPID-1741417",
            "CSAFPID-1741418",
            "CSAFPID-1741419",
            "CSAFPID-1741420",
            "CSAFPID-1741421",
            "CSAFPID-1741423",
            "CSAFPID-1741424",
            "CSAFPID-1741425",
            "CSAFPID-1741426",
            "CSAFPID-1741427",
            "CSAFPID-1720442",
            "CSAFPID-1717808",
            "CSAFPID-1717809",
            "CSAFPID-1717810",
            "CSAFPID-1741366",
            "CSAFPID-1741367",
            "CSAFPID-1741368",
            "CSAFPID-1741354",
            "CSAFPID-1741369",
            "CSAFPID-1741370",
            "CSAFPID-1741352",
            "CSAFPID-1741371",
            "CSAFPID-1741353",
            "CSAFPID-1723936",
            "CSAFPID-1723937",
            "CSAFPID-1717812",
            "CSAFPID-1717813"
          ]
        }
      ],
      "title": "CVE-2024-49107"
    },
    {
      "cve": "CVE-2024-49111",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1741405",
          "CSAFPID-1741406",
          "CSAFPID-1741407",
          "CSAFPID-1741408",
          "CSAFPID-1741409",
          "CSAFPID-1741410",
          "CSAFPID-1741411",
          "CSAFPID-1741412",
          "CSAFPID-1741413",
          "CSAFPID-1741414",
          "CSAFPID-1741415",
          "CSAFPID-1741416",
          "CSAFPID-1741417",
          "CSAFPID-1741418",
          "CSAFPID-1741419",
          "CSAFPID-1741420",
          "CSAFPID-1741421",
          "CSAFPID-1720442",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1741366",
          "CSAFPID-1741367",
          "CSAFPID-1741368",
          "CSAFPID-1741354",
          "CSAFPID-1741369",
          "CSAFPID-1741370",
          "CSAFPID-1741352",
          "CSAFPID-1741371",
          "CSAFPID-1741353"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49111",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49111.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1741405",
            "CSAFPID-1741406",
            "CSAFPID-1741407",
            "CSAFPID-1741408",
            "CSAFPID-1741409",
            "CSAFPID-1741410",
            "CSAFPID-1741411",
            "CSAFPID-1741412",
            "CSAFPID-1741413",
            "CSAFPID-1741414",
            "CSAFPID-1741415",
            "CSAFPID-1741416",
            "CSAFPID-1741417",
            "CSAFPID-1741418",
            "CSAFPID-1741419",
            "CSAFPID-1741420",
            "CSAFPID-1741421",
            "CSAFPID-1720442",
            "CSAFPID-1717808",
            "CSAFPID-1717809",
            "CSAFPID-1741366",
            "CSAFPID-1741367",
            "CSAFPID-1741368",
            "CSAFPID-1741354",
            "CSAFPID-1741369",
            "CSAFPID-1741370",
            "CSAFPID-1741352",
            "CSAFPID-1741371",
            "CSAFPID-1741353"
          ]
        }
      ],
      "title": "CVE-2024-49111"
    },
    {
      "cve": "CVE-2024-49121",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "notes": [
        {
          "category": "other",
          "text": "NULL Pointer Dereference",
          "title": "CWE-476"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1741405",
          "CSAFPID-1741406",
          "CSAFPID-1741407",
          "CSAFPID-1741422",
          "CSAFPID-1741408",
          "CSAFPID-1741409",
          "CSAFPID-1741410",
          "CSAFPID-1741411",
          "CSAFPID-1741412",
          "CSAFPID-1741413",
          "CSAFPID-1741414",
          "CSAFPID-1741415",
          "CSAFPID-1741416",
          "CSAFPID-1741417",
          "CSAFPID-1741418",
          "CSAFPID-1741419",
          "CSAFPID-1741420",
          "CSAFPID-1741421",
          "CSAFPID-1741423",
          "CSAFPID-1741424",
          "CSAFPID-1741425",
          "CSAFPID-1741426",
          "CSAFPID-1741427",
          "CSAFPID-1741428",
          "CSAFPID-1741429",
          "CSAFPID-1741430",
          "CSAFPID-1741431",
          "CSAFPID-1741432",
          "CSAFPID-1720442",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1717810",
          "CSAFPID-1741366",
          "CSAFPID-1741367",
          "CSAFPID-1741368",
          "CSAFPID-1741354",
          "CSAFPID-1741369",
          "CSAFPID-1741370",
          "CSAFPID-1741352",
          "CSAFPID-1741371",
          "CSAFPID-1741353",
          "CSAFPID-1723936",
          "CSAFPID-1723937",
          "CSAFPID-1717812",
          "CSAFPID-1717813",
          "CSAFPID-1723941",
          "CSAFPID-1723942",
          "CSAFPID-1723943",
          "CSAFPID-1723944",
          "CSAFPID-1723945",
          "CSAFPID-1717820",
          "CSAFPID-1717821",
          "CSAFPID-1717822",
          "CSAFPID-1717823"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49121",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49121.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1741405",
            "CSAFPID-1741406",
            "CSAFPID-1741407",
            "CSAFPID-1741422",
            "CSAFPID-1741408",
            "CSAFPID-1741409",
            "CSAFPID-1741410",
            "CSAFPID-1741411",
            "CSAFPID-1741412",
            "CSAFPID-1741413",
            "CSAFPID-1741414",
            "CSAFPID-1741415",
            "CSAFPID-1741416",
            "CSAFPID-1741417",
            "CSAFPID-1741418",
            "CSAFPID-1741419",
            "CSAFPID-1741420",
            "CSAFPID-1741421",
            "CSAFPID-1741423",
            "CSAFPID-1741424",
            "CSAFPID-1741425",
            "CSAFPID-1741426",
            "CSAFPID-1741427",
            "CSAFPID-1741428",
            "CSAFPID-1741429",
            "CSAFPID-1741430",
            "CSAFPID-1741431",
            "CSAFPID-1741432",
            "CSAFPID-1720442",
            "CSAFPID-1717808",
            "CSAFPID-1717809",
            "CSAFPID-1717810",
            "CSAFPID-1741366",
            "CSAFPID-1741367",
            "CSAFPID-1741368",
            "CSAFPID-1741354",
            "CSAFPID-1741369",
            "CSAFPID-1741370",
            "CSAFPID-1741352",
            "CSAFPID-1741371",
            "CSAFPID-1741353",
            "CSAFPID-1723936",
            "CSAFPID-1723937",
            "CSAFPID-1717812",
            "CSAFPID-1717813",
            "CSAFPID-1723941",
            "CSAFPID-1723942",
            "CSAFPID-1723943",
            "CSAFPID-1723944",
            "CSAFPID-1723945",
            "CSAFPID-1717820",
            "CSAFPID-1717821",
            "CSAFPID-1717822",
            "CSAFPID-1717823"
          ]
        }
      ],
      "title": "CVE-2024-49121"
    },
    {
      "cve": "CVE-2024-49122",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1741405",
          "CSAFPID-1741406",
          "CSAFPID-1741407",
          "CSAFPID-1741422",
          "CSAFPID-1741408",
          "CSAFPID-1741409",
          "CSAFPID-1741410",
          "CSAFPID-1741411",
          "CSAFPID-1741412",
          "CSAFPID-1741413",
          "CSAFPID-1741414",
          "CSAFPID-1741415",
          "CSAFPID-1741416",
          "CSAFPID-1741417",
          "CSAFPID-1741418",
          "CSAFPID-1741419",
          "CSAFPID-1741420",
          "CSAFPID-1741421",
          "CSAFPID-1741423",
          "CSAFPID-1741424",
          "CSAFPID-1741425",
          "CSAFPID-1741426",
          "CSAFPID-1741427",
          "CSAFPID-1741428",
          "CSAFPID-1741429",
          "CSAFPID-1741430",
          "CSAFPID-1741431",
          "CSAFPID-1741432",
          "CSAFPID-1720442",
          "CSAFPID-1717808",
          "CSAFPID-1717809",
          "CSAFPID-1717810",
          "CSAFPID-1741366",
          "CSAFPID-1741367",
          "CSAFPID-1741368",
          "CSAFPID-1741354",
          "CSAFPID-1741369",
          "CSAFPID-1741370",
          "CSAFPID-1741352",
          "CSAFPID-1741371",
          "CSAFPID-1741353",
          "CSAFPID-1723936",
          "CSAFPID-1723937",
          "CSAFPID-1717812",
          "CSAFPID-1717813",
          "CSAFPID-1723941",
          "CSAFPID-1723942",
          "CSAFPID-1723943",
          "CSAFPID-1723944",
          "CSAFPID-1723945",
          "CSAFPID-1717820",
          "CSAFPID-1717821",
          "CSAFPID-1717822",
          "CSAFPID-1717823"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49122",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49122.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1741405",
            "CSAFPID-1741406",
            "CSAFPID-1741407",
            "CSAFPID-1741422",
            "CSAFPID-1741408",
            "CSAFPID-1741409",
            "CSAFPID-1741410",
            "CSAFPID-1741411",
            "CSAFPID-1741412",
            "CSAFPID-1741413",
            "CSAFPID-1741414",
            "CSAFPID-1741415",
            "CSAFPID-1741416",
            "CSAFPID-1741417",
            "CSAFPID-1741418",
            "CSAFPID-1741419",
            "CSAFPID-1741420",
            "CSAFPID-1741421",
            "CSAFPID-1741423",
            "CSAFPID-1741424",
            "CSAFPID-1741425",
            "CSAFPID-1741426",
            "CSAFPID-1741427",
            "CSAFPID-1741428",
            "CSAFPID-1741429",
            "CSAFPID-1741430",
            "CSAFPID-1741431",
            "CSAFPID-1741432",
            "CSAFPID-1720442",
            "CSAFPID-1717808",
            "CSAFPID-1717809",
            "CSAFPID-1717810",
            "CSAFPID-1741366",
            "CSAFPID-1741367",
            "CSAFPID-1741368",
            "CSAFPID-1741354",
            "CSAFPID-1741369",
            "CSAFPID-1741370",
            "CSAFPID-1741352",
            "CSAFPID-1741371",
            "CSAFPID-1741353",
            "CSAFPID-1723936",
            "CSAFPID-1723937",
            "CSAFPID-1717812",
            "CSAFPID-1717813",
            "CSAFPID-1723941",
            "CSAFPID-1723942",
            "CSAFPID-1723943",
            "CSAFPID-1723944",
            "CSAFPID-1723945",
            "CSAFPID-1717820",
            "CSAFPID-1717821",
            "CSAFPID-1717822",
            "CSAFPID-1717823"
          ]
        }
      ],
      "title": "CVE-2024-49122"
    }
  ]
}

wid-sec-w-2024-3657

Vulnerability from csaf_certbund

Published

2024-12-10 23:00

Modified

2025-01-28 23:00

Summary

Microsoft Windows: Mehrere Schwachstellen

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung

Windows ist ein Betriebssystem von Microsoft.

Angriff

Ein Angreifer kann mehrere Schwachstellen in verschiedenen Versionen von Microsoft Windows und Microsoft Windows Server ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Situation zu erzeugen.

Betroffene Betriebssysteme

- Windows

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "kritisch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Windows ist ein Betriebssystem von Microsoft.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann mehrere Schwachstellen in verschiedenen Versionen von Microsoft Windows und Microsoft Windows Server ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Situation zu erzeugen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2024-3657 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3657.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2024-3657 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3657"
      },
      {
        "category": "external",
        "summary": "Microsoft Leitfaden f\u00fcr Sicherheitsupdates",
        "url": "https://msrc.microsoft.com/update-guide/"
      },
      {
        "category": "external",
        "summary": "PoC CVE-2024-49112 vom 2025-01-01",
        "url": "https://github.com/SafeBreach-Labs/CVE-2024-49112"
      },
      {
        "category": "external",
        "summary": "PoC CVE-2024-49113 vom 2025-01-02",
        "url": "https://www.safebreach.com/blog/ldapnightmare-safebreach-labs-publishes-first-proof-of-concept-exploit-for-cve-2024-49113/"
      },
      {
        "category": "external",
        "summary": "Hitachi Vulnerability Information HITACHI-SEC-2024-312 vom 2025-01-29",
        "url": "https://www.hitachi.com/products/it/storage-solutions/sec_info/2024/12.html"
      }
    ],
    "source_lang": "en-US",
    "title": "Microsoft Windows: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2025-01-28T23:00:00.000+00:00",
      "generator": {
        "date": "2025-01-29T13:12:02.633+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.10"
        }
      },
      "id": "WID-SEC-W-2024-3657",
      "initial_release_date": "2024-12-10T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2024-12-10T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2025-01-01T23:00:00.000+00:00",
          "number": "2",
          "summary": "PoC f\u00fcr CVE-2024-49112 erg\u00e4nzt"
        },
        {
          "date": "2025-01-02T23:00:00.000+00:00",
          "number": "3",
          "summary": "PoC f\u00fcr CVE-2024-49113 erg\u00e4nzt"
        },
        {
          "date": "2025-01-28T23:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von HITACHI aufgenommen"
        }
      ],
      "status": "final",
      "version": "4"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Hitachi Storage",
            "product": {
              "name": "Hitachi Storage",
              "product_id": "T009295",
              "product_identification_helper": {
                "cpe": "cpe:/h:hitachi:storage:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Hitachi"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Microsoft Windows 10",
                "product": {
                  "name": "Microsoft Windows 10",
                  "product_id": "T039740",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:microsoft:windows_10:-"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Version 1607",
                "product": {
                  "name": "Microsoft Windows 10 Version 1607",
                  "product_id": "T039742",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:microsoft:windows_10:version_1607"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Version 1809",
                "product": {
                  "name": "Microsoft Windows 10 Version 1809",
                  "product_id": "T039743",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:microsoft:windows_10:version_1809"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Version 21H2",
                "product": {
                  "name": "Microsoft Windows 10 Version 21H2",
                  "product_id": "T039746",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:microsoft:windows_10:version_21h2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Version 22H2",
                "product": {
                  "name": "Microsoft Windows 10 Version 22H2",
                  "product_id": "T039748",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:microsoft:windows_10:version_22h2"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Windows 10"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Version 22H2",
                "product": {
                  "name": "Microsoft Windows 11 Version 22H2",
                  "product_id": "T039747",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:microsoft:windows_11:version_22h2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Version 23H2",
                "product": {
                  "name": "Microsoft Windows 11 Version 23H2",
                  "product_id": "T039749",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:microsoft:windows_11:version_23h2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Version 24H2",
                "product": {
                  "name": "Microsoft Windows 11 Version 24H2",
                  "product_id": "T039751",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:microsoft:windows_11:version_24h2"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Windows 11"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "2008 R2 SP1",
                "product": {
                  "name": "Microsoft Windows Server 2008 R2 SP1",
                  "product_id": "T039736",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:microsoft:windows_server:2008_r2_sp1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "2008 SP2",
                "product": {
                  "name": "Microsoft Windows Server 2008 SP2",
                  "product_id": "T039737",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:microsoft:windows_server:2008_sp2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "2025",
                "product": {
                  "name": "Microsoft Windows Server 2025",
                  "product_id": "T039752",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:microsoft:windows_server:2025"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Windows Server"
          },
          {
            "category": "product_name",
            "name": "Microsoft Windows Server 2012",
            "product": {
              "name": "Microsoft Windows Server 2012",
              "product_id": "T039738",
              "product_identification_helper": {
                "cpe": "cpe:/o:microsoft:windows_server_2012:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Microsoft Windows Server 2012 R2",
            "product": {
              "name": "Microsoft Windows Server 2012 R2",
              "product_id": "T039739",
              "product_identification_helper": {
                "cpe": "cpe:/o:microsoft:windows_server_2012_r2:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Microsoft Windows Server 2016",
            "product": {
              "name": "Microsoft Windows Server 2016",
              "product_id": "T039741",
              "product_identification_helper": {
                "cpe": "cpe:/o:microsoft:windows_server_2016:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Microsoft Windows Server 2019",
            "product": {
              "name": "Microsoft Windows Server 2019",
              "product_id": "T039744",
              "product_identification_helper": {
                "cpe": "cpe:/o:microsoft:windows_server_2019:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Microsoft Windows Server 2022",
                "product": {
                  "name": "Microsoft Windows Server 2022",
                  "product_id": "T039745",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:microsoft:windows_server_2022:-"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "23H2 Edition",
                "product": {
                  "name": "Microsoft Windows Server 2022 23H2 Edition",
                  "product_id": "T039750",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:microsoft:windows_server_2022:23h2_edition"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Windows Server 2022"
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-49072",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49072"
    },
    {
      "cve": "CVE-2024-49073",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49073"
    },
    {
      "cve": "CVE-2024-49074",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49074"
    },
    {
      "cve": "CVE-2024-49075",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49075"
    },
    {
      "cve": "CVE-2024-49076",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49076"
    },
    {
      "cve": "CVE-2024-49077",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49077"
    },
    {
      "cve": "CVE-2024-49078",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49078"
    },
    {
      "cve": "CVE-2024-49079",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49079"
    },
    {
      "cve": "CVE-2024-49080",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49080"
    },
    {
      "cve": "CVE-2024-49081",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49081"
    },
    {
      "cve": "CVE-2024-49082",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49082"
    },
    {
      "cve": "CVE-2024-49083",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49083"
    },
    {
      "cve": "CVE-2024-49084",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49084"
    },
    {
      "cve": "CVE-2024-49085",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49085"
    },
    {
      "cve": "CVE-2024-49086",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49086"
    },
    {
      "cve": "CVE-2024-49087",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49087"
    },
    {
      "cve": "CVE-2024-49088",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49088"
    },
    {
      "cve": "CVE-2024-49089",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49089"
    },
    {
      "cve": "CVE-2024-49090",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49090"
    },
    {
      "cve": "CVE-2024-49091",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49091"
    },
    {
      "cve": "CVE-2024-49092",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49092"
    },
    {
      "cve": "CVE-2024-49093",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49093"
    },
    {
      "cve": "CVE-2024-49094",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49094"
    },
    {
      "cve": "CVE-2024-49095",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49095"
    },
    {
      "cve": "CVE-2024-49096",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49096"
    },
    {
      "cve": "CVE-2024-49097",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49097"
    },
    {
      "cve": "CVE-2024-49098",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49098"
    },
    {
      "cve": "CVE-2024-49099",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49099"
    },
    {
      "cve": "CVE-2024-49101",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49101"
    },
    {
      "cve": "CVE-2024-49102",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49102"
    },
    {
      "cve": "CVE-2024-49103",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49103"
    },
    {
      "cve": "CVE-2024-49104",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49104"
    },
    {
      "cve": "CVE-2024-49105",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49105"
    },
    {
      "cve": "CVE-2024-49106",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49106"
    },
    {
      "cve": "CVE-2024-49107",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49107"
    },
    {
      "cve": "CVE-2024-49108",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49108"
    },
    {
      "cve": "CVE-2024-49109",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49109"
    },
    {
      "cve": "CVE-2024-49110",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49110"
    },
    {
      "cve": "CVE-2024-49111",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49111"
    },
    {
      "cve": "CVE-2024-49112",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49112"
    },
    {
      "cve": "CVE-2024-49113",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49113"
    },
    {
      "cve": "CVE-2024-49114",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49114"
    },
    {
      "cve": "CVE-2024-49115",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49115"
    },
    {
      "cve": "CVE-2024-49116",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49116"
    },
    {
      "cve": "CVE-2024-49117",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49117"
    },
    {
      "cve": "CVE-2024-49118",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49118"
    },
    {
      "cve": "CVE-2024-49119",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49119"
    },
    {
      "cve": "CVE-2024-49120",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49120"
    },
    {
      "cve": "CVE-2024-49121",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49121"
    },
    {
      "cve": "CVE-2024-49122",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49122"
    },
    {
      "cve": "CVE-2024-49123",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49123"
    },
    {
      "cve": "CVE-2024-49124",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49124"
    },
    {
      "cve": "CVE-2024-49125",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49125"
    },
    {
      "cve": "CVE-2024-49126",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49126"
    },
    {
      "cve": "CVE-2024-49127",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49127"
    },
    {
      "cve": "CVE-2024-49128",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49128"
    },
    {
      "cve": "CVE-2024-49129",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49129"
    },
    {
      "cve": "CVE-2024-49132",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49132"
    },
    {
      "cve": "CVE-2024-49138",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschlie\u00dflich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuf\u00fchren - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche pers\u00f6nliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuf\u00fchren. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine b\u00f6sartige Datei \u00f6ffnen oder dazu gebracht werden, eine Anfrage an einen b\u00f6sartigen Server zu senden. Bei einigen Schwachstellen m\u00fcssen spezielle Bedingungen erf\u00fcllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein b\u00f6sartiges USB-Laufwerk einstecken zu k\u00f6nnen. Einige Schwachstellen erfordern erweiterte Rechte, einschlie\u00dflich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen k\u00f6nnen sich \u00fcber die betroffenen Komponenten hinaus auswirken."
        }
      ],
      "product_status": {
        "known_affected": [
          "T039737",
          "T039748",
          "T039736",
          "T039747",
          "T039739",
          "T039738",
          "T039749",
          "T039744",
          "T039743",
          "T039746",
          "T039745",
          "T039740",
          "T039751",
          "T039750",
          "T039742",
          "T039741",
          "T039752",
          "T009295"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-49138"
    }
  ]
}

ghsa-h4hx-5g7m-p3hc

Vulnerability from github

Published

2024-12-12 03:33

Modified

2025-04-24 21:31

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2024-49138"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-122"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-12-12T02:04:40Z",
    "severity": "HIGH"
  },
  "details": "Windows Common Log File System Driver Elevation of Privilege Vulnerability",
  "id": "GHSA-h4hx-5g7m-p3hc",
  "modified": "2025-04-24T21:31:47Z",
  "published": "2024-12-12T03:33:05Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-49138"
    },
    {
      "type": "WEB",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49138"
    },
    {
      "type": "WEB",
      "url": "https://packetstorm.news/files/id/190585"
    },
    {
      "type": "WEB",
      "url": "https://www.exploit-db.com/exploits/52270"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

fkie_cve-2024-49138

Vulnerability from fkie_nvd

Published

2024-12-12 02:04

Modified

2025-04-28 20:48

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Summary

Windows Common Log File System Driver Elevation of Privilege Vulnerability

References

URL	Tags
secure@microsoft.com	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49138	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://packetstorm.news/files/id/190585/	Exploit, VDB Entry
af854a3a-2127-422b-91ae-364da2661108	https://www.exploit-db.com/exploits/52270	Exploit, VDB Entry

Impacted products

Vendor	Product	Version
microsoft	windows_10_1507	*
microsoft	windows_10_1507	*
microsoft	windows_10_1607	*
microsoft	windows_10_1607	*
microsoft	windows_10_1809	*
microsoft	windows_10_1809	*
microsoft	windows_10_21h2	*
microsoft	windows_10_21h2	*
microsoft	windows_10_21h2	*
microsoft	windows_10_22h2	*
microsoft	windows_10_22h2	*
microsoft	windows_10_22h2	*
microsoft	windows_11_22h2	*
microsoft	windows_11_22h2	*
microsoft	windows_11_23h2	*
microsoft	windows_11_23h2	*
microsoft	windows_11_24h2	*
microsoft	windows_11_24h2	*
microsoft	windows_server_2008	-
microsoft	windows_server_2008	r2
microsoft	windows_server_2008	sp2
microsoft	windows_server_2012	-
microsoft	windows_server_2012	r2
microsoft	windows_server_2016	*
microsoft	windows_server_2019	*
microsoft	windows_server_2022	*
microsoft	windows_server_2022_23h2	*
microsoft	windows_server_2025	*

JSON

To clipboard

{
  "cisaActionDue": "2024-12-31",
  "cisaExploitAdd": "2024-12-10",
  "cisaRequiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",
  "cisaVulnerabilityName": "Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability",
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*",
              "matchCriteriaId": "10F567C3-3739-4F3D-B9E0-D2725D09CE0D",
              "versionEndExcluding": "10.0.10240.20857",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
              "matchCriteriaId": "04D1F48B-C323-4062-B5E1-9700ADBB153C",
              "versionEndExcluding": "10.0.10240.20857",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
              "matchCriteriaId": "29B44B5E-3D35-4A5B-A916-6E70923FAB7C",
              "versionEndExcluding": "10.0.14393.7606",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
              "matchCriteriaId": "77EAFFB9-3053-4197-B52D-69F4F86C8FBA",
              "versionEndExcluding": "10.0.14393.7606",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
              "matchCriteriaId": "5FA7C375-3A7C-4F34-B6E7-82C187B4F7AF",
              "versionEndExcluding": "10.0.17763.6659",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
              "matchCriteriaId": "576F141F-C874-4817-961A-2C4D2AB3DEA4",
              "versionEndExcluding": "10.0.17763.6659",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
              "matchCriteriaId": "2BD1D819-7D27-4181-9672-0F1DC6F15BA1",
              "versionEndExcluding": "10.0.19044.5247",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
              "matchCriteriaId": "6DF22110-AA81-4D46-BE27-A3F70112AD44",
              "versionEndExcluding": "10.0.19044.5247",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
              "matchCriteriaId": "A374923B-799C-4057-9C77-DE03A20FF4FE",
              "versionEndExcluding": "10.0.19044.5247",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
              "matchCriteriaId": "979EA48D-ED87-4852-B436-D730A9130BA9",
              "versionEndExcluding": "10.0.19045.5247",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
              "matchCriteriaId": "1FA81A8A-13B7-4180-8F8E-9079F6C82353",
              "versionEndExcluding": "10.0.19045.5247",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
              "matchCriteriaId": "9ACEFC50-0F9A-45DF-9002-B823DAE1FE97",
              "versionEndExcluding": "10.0.19045.5247",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:arm64:*",
              "matchCriteriaId": "C928D5FD-9F91-4BC7-A151-76B72F9539B3",
              "versionEndExcluding": "10.0.22621.4602",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:x64:*",
              "matchCriteriaId": "943E002C-645E-4AA0-B15A-621B79DF97A5",
              "versionEndExcluding": "10.0.22621.4602",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
              "matchCriteriaId": "ED3FE198-9DED-4108-AFAC-3BBF93AC7779",
              "versionEndExcluding": "10.0.22631.4602",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
              "matchCriteriaId": "3B0A1BFF-C699-4863-AAEC-0F304BB3255C",
              "versionEndExcluding": "10.0.22631.4602",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
              "matchCriteriaId": "8F34994C-CF51-49A4-8985-9B0C6EF1C3A2",
              "versionEndExcluding": "10.0.26100.2605",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
              "matchCriteriaId": "40E04CC5-22CA-4D16-9B1F-695277A5D83E",
              "versionEndExcluding": "10.0.26100.2605",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
              "matchCriteriaId": "AB425562-C0A0-452E-AABE-F70522F15E1A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
              "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2008:sp2:*:*:*:*:*:x64:*",
              "matchCriteriaId": "C0DC57FA-88F8-4D5C-94BD-3A8B1FB8C047",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
              "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "361D1B8E-6E56-4B5F-85D1-D47114A10A81",
              "versionEndExcluding": "10.0.14393.7606",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "11517523-F822-45BC-B347-C65F00B45202",
              "versionEndExcluding": "10.0.17763.6659",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "AECABB2C-DACB-4BBD-8739-DDB00285B0A7",
              "versionEndExcluding": "10.0.20348.2966",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "37977CFB-B259-49B8-B0C5-85ECB40FE429",
              "versionEndExcluding": "10.0.25398.1308",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E013EA3C-6F18-4CA4-AF5B-664F869B9A6D",
              "versionEndExcluding": "10.0.26100.2605",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Windows Common Log File System Driver Elevation of Privilege Vulnerability"
    },
    {
      "lang": "es",
      "value": " Vulnerabilidad de elevaci\u00f3n de privilegios en Windows Common Log File System Driver"
    }
  ],
  "id": "CVE-2024-49138",
  "lastModified": "2025-04-28T20:48:07.563",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9,
        "source": "secure@microsoft.com",
        "type": "Primary"
      }
    ]
  },
  "published": "2024-12-12T02:04:40.307",
  "references": [
    {
      "source": "secure@microsoft.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49138"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "VDB Entry"
      ],
      "url": "https://packetstorm.news/files/id/190585/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "VDB Entry"
      ],
      "url": "https://www.exploit-db.com/exploits/52270"
    }
  ],
  "sourceIdentifier": "secure@microsoft.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-122"
        }
      ],
      "source": "secure@microsoft.com",
      "type": "Secondary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

msrc_cve-2024-49138

Vulnerability from csaf_microsoft

Published

2024-12-10 08:00

Modified

2024-12-10 08:00

Summary

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Notes

Additional Resources

To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle

Disclaimer

The information provided in the Microsoft Knowledge Base is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.

Customer Action

Required. The vulnerability documented by this CVE requires customer action to resolve.

JSON

To clipboard

{
  "document": {
    "acknowledgments": [
      {
        "names": [
          "Advanced Research Team with \u003ca href=\"https://www.crowdstrike.com/\"\u003eCrowdStrike\u003c/a\u003e"
        ]
      }
    ],
    "aggregate_severity": {
      "namespace": "https://www.microsoft.com/en-us/msrc/security-update-severity-rating-system",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Public",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
        "title": "Disclaimer"
      },
      {
        "category": "general",
        "text": "Required. The vulnerability documented by this CVE requires customer action to resolve.",
        "title": "Customer Action"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "secure@microsoft.com",
      "name": "Microsoft Security Response Center",
      "namespace": "https://msrc.microsoft.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "CVE-2024-49138 Windows Common Log File System Driver Elevation of Privilege Vulnerability - HTML",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49138"
      },
      {
        "category": "self",
        "summary": "CVE-2024-49138 Windows Common Log File System Driver Elevation of Privilege Vulnerability - CSAF",
        "url": "https://msrc.microsoft.com/csaf/advisories/2024/msrc_cve-2024-49138.json"
      },
      {
        "category": "external",
        "summary": "Microsoft Exploitability Index",
        "url": "https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1"
      },
      {
        "category": "external",
        "summary": "Microsoft Support Lifecycle",
        "url": "https://support.microsoft.com/lifecycle"
      },
      {
        "category": "external",
        "summary": "Common Vulnerability Scoring System",
        "url": "https://www.first.org/cvss"
      }
    ],
    "title": "Windows Common Log File System Driver Elevation of Privilege Vulnerability",
    "tracking": {
      "current_release_date": "2024-12-10T08:00:00.000Z",
      "generator": {
        "date": "2025-05-13T15:25:05.261Z",
        "engine": {
          "name": "MSRC Generator",
          "version": "1.0"
        }
      },
      "id": "msrc_CVE-2024-49138",
      "initial_release_date": "2024-12-10T08:00:00.000Z",
      "revision_history": [
        {
          "date": "2024-12-10T08:00:00.000Z",
          "legacy_version": "1",
          "number": "1",
          "summary": "Information published."
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.17763.6659",
            "product": {
              "name": "Windows 10 Version 1809 for 32-bit Systems \u003c10.0.17763.6659",
              "product_id": "21"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.17763.6659",
            "product": {
              "name": "Windows 10 Version 1809 for 32-bit Systems 10.0.17763.6659",
              "product_id": "11568"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 1809 for 32-bit Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.17763.6659",
            "product": {
              "name": "Windows 10 Version 1809 for x64-based Systems \u003c10.0.17763.6659",
              "product_id": "20"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.17763.6659",
            "product": {
              "name": "Windows 10 Version 1809 for x64-based Systems 10.0.17763.6659",
              "product_id": "11569"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 1809 for x64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.17763.6659",
            "product": {
              "name": "Windows Server 2019 \u003c10.0.17763.6659",
              "product_id": "19"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.17763.6659",
            "product": {
              "name": "Windows Server 2019 10.0.17763.6659",
              "product_id": "11571"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2019"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.17763.6659",
            "product": {
              "name": "Windows Server 2019 (Server Core installation) \u003c10.0.17763.6659",
              "product_id": "18"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.17763.6659",
            "product": {
              "name": "Windows Server 2019 (Server Core installation) 10.0.17763.6659",
              "product_id": "11572"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2019 (Server Core installation)"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.20348.2966",
            "product": {
              "name": "Windows Server 2022 \u003c10.0.20348.2966",
              "product_id": "17"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.20348.2966",
            "product": {
              "name": "Windows Server 2022 10.0.20348.2966",
              "product_id": "11923"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2022"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.20348.2966",
            "product": {
              "name": "Windows Server 2022 (Server Core installation) \u003c10.0.20348.2966",
              "product_id": "16"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.20348.2966",
            "product": {
              "name": "Windows Server 2022 (Server Core installation) 10.0.20348.2966",
              "product_id": "11924"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2022 (Server Core installation)"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.19044.5247",
            "product": {
              "name": "Windows 10 Version 21H2 for 32-bit Systems \u003c10.0.19044.5247",
              "product_id": "15"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.19044.5247",
            "product": {
              "name": "Windows 10 Version 21H2 for 32-bit Systems 10.0.19044.5247",
              "product_id": "11929"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 21H2 for 32-bit Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.19044.5247",
            "product": {
              "name": "Windows 10 Version 21H2 for ARM64-based Systems \u003c10.0.19044.5247",
              "product_id": "14"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.19044.5247",
            "product": {
              "name": "Windows 10 Version 21H2 for ARM64-based Systems 10.0.19044.5247",
              "product_id": "11930"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 21H2 for ARM64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.19044.5247",
            "product": {
              "name": "Windows 10 Version 21H2 for x64-based Systems \u003c10.0.19044.5247",
              "product_id": "13"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.19044.5247",
            "product": {
              "name": "Windows 10 Version 21H2 for x64-based Systems 10.0.19044.5247",
              "product_id": "11931"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 21H2 for x64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.22621.4602",
            "product": {
              "name": "Windows 11 Version 22H2 for ARM64-based Systems \u003c10.0.22621.4602",
              "product_id": "12"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.22621.4602",
            "product": {
              "name": "Windows 11 Version 22H2 for ARM64-based Systems 10.0.22621.4602",
              "product_id": "12085"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 11 Version 22H2 for ARM64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.22621.4602",
            "product": {
              "name": "Windows 11 Version 22H2 for x64-based Systems \u003c10.0.22621.4602",
              "product_id": "11"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.22621.4602",
            "product": {
              "name": "Windows 11 Version 22H2 for x64-based Systems 10.0.22621.4602",
              "product_id": "12086"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 11 Version 22H2 for x64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.19045.5247",
            "product": {
              "name": "Windows 10 Version 22H2 for x64-based Systems \u003c10.0.19045.5247",
              "product_id": "10"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.19045.5247",
            "product": {
              "name": "Windows 10 Version 22H2 for x64-based Systems 10.0.19045.5247",
              "product_id": "12097"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 22H2 for x64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.19045.5247",
            "product": {
              "name": "Windows 10 Version 22H2 for ARM64-based Systems \u003c10.0.19045.5247",
              "product_id": "9"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.19045.5247",
            "product": {
              "name": "Windows 10 Version 22H2 for ARM64-based Systems 10.0.19045.5247",
              "product_id": "12098"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 22H2 for ARM64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.19045.5247",
            "product": {
              "name": "Windows 10 Version 22H2 for 32-bit Systems \u003c10.0.19045.5247",
              "product_id": "8"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.19045.5247",
            "product": {
              "name": "Windows 10 Version 22H2 for 32-bit Systems 10.0.19045.5247",
              "product_id": "12099"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 22H2 for 32-bit Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.26100.2605",
            "product": {
              "name": "Windows Server 2025 (Server Core installation) \u003c10.0.26100.2605",
              "product_id": "1"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.26100.2605",
            "product": {
              "name": "Windows Server 2025 (Server Core installation) 10.0.26100.2605",
              "product_id": "12437"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2025 (Server Core installation)"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.22631.4602",
            "product": {
              "name": "Windows 11 Version 23H2 for ARM64-based Systems \u003c10.0.22631.4602",
              "product_id": "7"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.22631.4602",
            "product": {
              "name": "Windows 11 Version 23H2 for ARM64-based Systems 10.0.22631.4602",
              "product_id": "12242"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 11 Version 23H2 for ARM64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.22631.4602",
            "product": {
              "name": "Windows 11 Version 23H2 for x64-based Systems \u003c10.0.22631.4602",
              "product_id": "6"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.22631.4602",
            "product": {
              "name": "Windows 11 Version 23H2 for x64-based Systems 10.0.22631.4602",
              "product_id": "12243"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 11 Version 23H2 for x64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.25398.1308",
            "product": {
              "name": "Windows Server 2022, 23H2 Edition (Server Core installation) \u003c10.0.25398.1308",
              "product_id": "5"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.25398.1308",
            "product": {
              "name": "Windows Server 2022, 23H2 Edition (Server Core installation) 10.0.25398.1308",
              "product_id": "12244"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2022, 23H2 Edition (Server Core installation)"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.26100.2605",
            "product": {
              "name": "Windows 11 Version 24H2 for ARM64-based Systems \u003c10.0.26100.2605",
              "product_id": "4"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.26100.2605",
            "product": {
              "name": "Windows 11 Version 24H2 for ARM64-based Systems 10.0.26100.2605",
              "product_id": "12389"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 11 Version 24H2 for ARM64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.26100.2605",
            "product": {
              "name": "Windows 11 Version 24H2 for x64-based Systems \u003c10.0.26100.2605",
              "product_id": "3"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.26100.2605",
            "product": {
              "name": "Windows 11 Version 24H2 for x64-based Systems 10.0.26100.2605",
              "product_id": "12390"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 11 Version 24H2 for x64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.26100.2605",
            "product": {
              "name": "Windows Server 2025 \u003c10.0.26100.2605",
              "product_id": "2"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.26100.2605",
            "product": {
              "name": "Windows Server 2025 10.0.26100.2605",
              "product_id": "12436"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2025"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.10240.20857",
            "product": {
              "name": "Windows 10 for 32-bit Systems \u003c10.0.10240.20857",
              "product_id": "27"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.10240.20857",
            "product": {
              "name": "Windows 10 for 32-bit Systems 10.0.10240.20857",
              "product_id": "10729"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 for 32-bit Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.10240.20857",
            "product": {
              "name": "Windows 10 for x64-based Systems \u003c10.0.10240.20857",
              "product_id": "26"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.10240.20857",
            "product": {
              "name": "Windows 10 for x64-based Systems 10.0.10240.20857",
              "product_id": "10735"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 for x64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.14393.7606",
            "product": {
              "name": "Windows 10 Version 1607 for 32-bit Systems \u003c10.0.14393.7606",
              "product_id": "24"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.14393.7606",
            "product": {
              "name": "Windows 10 Version 1607 for 32-bit Systems 10.0.14393.7606",
              "product_id": "10852"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 1607 for 32-bit Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.14393.7606",
            "product": {
              "name": "Windows 10 Version 1607 for x64-based Systems \u003c10.0.14393.7606",
              "product_id": "23"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.14393.7606",
            "product": {
              "name": "Windows 10 Version 1607 for x64-based Systems 10.0.14393.7606",
              "product_id": "10853"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 1607 for x64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.14393.7606",
            "product": {
              "name": "Windows Server 2016 \u003c10.0.14393.7606",
              "product_id": "25"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.14393.7606",
            "product": {
              "name": "Windows Server 2016 10.0.14393.7606",
              "product_id": "10816"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2016"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.14393.7606",
            "product": {
              "name": "Windows Server 2016 (Server Core installation) \u003c10.0.14393.7606",
              "product_id": "22"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.14393.7606",
            "product": {
              "name": "Windows Server 2016 (Server Core installation) 10.0.14393.7606",
              "product_id": "10855"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2016 (Server Core installation)"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.0.6003.23016",
            "product": {
              "name": "Windows Server 2008 for 32-bit Systems Service Pack 2 \u003c6.0.6003.23016",
              "product_id": "37"
            }
          },
          {
            "category": "product_version",
            "name": "6.0.6003.23016",
            "product": {
              "name": "Windows Server 2008 for 32-bit Systems Service Pack 2 6.0.6003.23016",
              "product_id": "9312"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2008 for 32-bit Systems Service Pack 2"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.0.6003.23016",
            "product": {
              "name": "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) \u003c6.0.6003.23016",
              "product_id": "32"
            }
          },
          {
            "category": "product_version",
            "name": "6.0.6003.23016",
            "product": {
              "name": "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) 6.0.6003.23016",
              "product_id": "10287"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.0.6003.23016",
            "product": {
              "name": "Windows Server 2008 for x64-based Systems Service Pack 2 \u003c6.0.6003.23016",
              "product_id": "36"
            }
          },
          {
            "category": "product_version",
            "name": "6.0.6003.23016",
            "product": {
              "name": "Windows Server 2008 for x64-based Systems Service Pack 2 6.0.6003.23016",
              "product_id": "9318"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2008 for x64-based Systems Service Pack 2"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.0.6003.23016",
            "product": {
              "name": "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) \u003c6.0.6003.23016",
              "product_id": "35"
            }
          },
          {
            "category": "product_version",
            "name": "6.0.6003.23016",
            "product": {
              "name": "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) 6.0.6003.23016",
              "product_id": "9344"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.1.7601.27467",
            "product": {
              "name": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 \u003c6.1.7601.27467",
              "product_id": "33"
            }
          },
          {
            "category": "product_version",
            "name": "6.1.7601.27467",
            "product": {
              "name": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 6.1.7601.27467",
              "product_id": "10051"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2008 R2 for x64-based Systems Service Pack 1"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.1.7601.27467",
            "product": {
              "name": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) \u003c6.1.7601.27467",
              "product_id": "34"
            }
          },
          {
            "category": "product_version",
            "name": "6.1.7601.27467",
            "product": {
              "name": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 6.1.7601.27467",
              "product_id": "10049"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.2.9200.25222",
            "product": {
              "name": "Windows Server 2012 \u003c6.2.9200.25222",
              "product_id": "31"
            }
          },
          {
            "category": "product_version",
            "name": "6.2.9200.25222",
            "product": {
              "name": "Windows Server 2012 6.2.9200.25222",
              "product_id": "10378"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2012"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.2.9200.25222",
            "product": {
              "name": "Windows Server 2012 (Server Core installation) \u003c6.2.9200.25222",
              "product_id": "30"
            }
          },
          {
            "category": "product_version",
            "name": "6.2.9200.25222",
            "product": {
              "name": "Windows Server 2012 (Server Core installation) 6.2.9200.25222",
              "product_id": "10379"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2012 (Server Core installation)"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.3.9600.22318",
            "product": {
              "name": "Windows Server 2012 R2 \u003c6.3.9600.22318",
              "product_id": "29"
            }
          },
          {
            "category": "product_version",
            "name": "6.3.9600.22318",
            "product": {
              "name": "Windows Server 2012 R2 6.3.9600.22318",
              "product_id": "10483"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2012 R2"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.3.9600.22318",
            "product": {
              "name": "Windows Server 2012 R2 (Server Core installation) \u003c6.3.9600.22318",
              "product_id": "28"
            }
          },
          {
            "category": "product_version",
            "name": "6.3.9600.22318",
            "product": {
              "name": "Windows Server 2012 R2 (Server Core installation) 6.3.9600.22318",
              "product_id": "10543"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2012 R2 (Server Core installation)"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-49138",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "general",
          "text": "Microsoft",
          "title": "Assigning CNA"
        },
        {
          "category": "faq",
          "text": "An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.",
          "title": "What privileges could be gained by an attacker who successfully exploited this vulnerability?"
        }
      ],
      "product_status": {
        "fixed": [
          "9312",
          "9318",
          "9344",
          "10049",
          "10051",
          "10287",
          "10378",
          "10379",
          "10483",
          "10543",
          "10729",
          "10735",
          "10816",
          "10852",
          "10853",
          "10855",
          "11568",
          "11569",
          "11571",
          "11572",
          "11923",
          "11924",
          "11929",
          "11930",
          "11931",
          "12085",
          "12086",
          "12097",
          "12098",
          "12099",
          "12242",
          "12243",
          "12244",
          "12389",
          "12390",
          "12436",
          "12437"
        ],
        "known_affected": [
          "1",
          "2",
          "3",
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11",
          "12",
          "13",
          "14",
          "15",
          "16",
          "17",
          "18",
          "19",
          "20",
          "21",
          "22",
          "23",
          "24",
          "25",
          "26",
          "27",
          "28",
          "29",
          "30",
          "31",
          "32",
          "33",
          "34",
          "35",
          "36",
          "37"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49138 Windows Common Log File System Driver Elevation of Privilege Vulnerability - HTML",
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49138"
        },
        {
          "category": "self",
          "summary": "CVE-2024-49138 Windows Common Log File System Driver Elevation of Privilege Vulnerability - CSAF",
          "url": "https://msrc.microsoft.com/csaf/advisories/2024/msrc_cve-2024-49138.json"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-12-10T08:00:00.000Z",
          "details": "10.0.17763.6659:Security Update:https://support.microsoft.com/help/5048661",
          "product_ids": [
            "21",
            "20",
            "19",
            "18"
          ],
          "url": "https://support.microsoft.com/help/5048661"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-10T08:00:00.000Z",
          "details": "10.0.20348.2966:Security Update:https://support.microsoft.com/help/5048654",
          "product_ids": [
            "17",
            "16"
          ],
          "url": "https://support.microsoft.com/help/5048654"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-10T08:00:00.000Z",
          "details": "10.0.20348.2908:SecurityHotpatchUpdate:https://support.microsoft.com/help/5048800",
          "product_ids": [
            "17",
            "16"
          ],
          "url": "https://support.microsoft.com/help/5048800"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-10T08:00:00.000Z",
          "details": "10.0.19044.5247:Security Update:https://support.microsoft.com/help/5048652",
          "product_ids": [
            "15",
            "14",
            "13"
          ],
          "url": "https://support.microsoft.com/help/5048652"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-10T08:00:00.000Z",
          "details": "10.0.22621.4602:Security Update:https://support.microsoft.com/help/5048685",
          "product_ids": [
            "12",
            "11"
          ],
          "url": "https://support.microsoft.com/help/5048685"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-10T08:00:00.000Z",
          "details": "10.0.19045.5247:Security Update:https://support.microsoft.com/help/5048652",
          "product_ids": [
            "10",
            "9",
            "8"
          ],
          "url": "https://support.microsoft.com/help/5048652"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-10T08:00:00.000Z",
          "details": "10.0.26100.2605:Security Update:https://support.microsoft.com/help/5048667",
          "product_ids": [
            "1",
            "4",
            "3",
            "2"
          ],
          "url": "https://support.microsoft.com/help/5048667"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-10T08:00:00.000Z",
          "details": "10.0.26100.2528:SecurityHotpatchUpdate:https://support.microsoft.com/help/5048794",
          "product_ids": [
            "1",
            "4",
            "3",
            "2"
          ],
          "url": "https://support.microsoft.com/help/5048794"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-10T08:00:00.000Z",
          "details": "10.0.22631.4602:Security Update:https://support.microsoft.com/help/5048685",
          "product_ids": [
            "7",
            "6"
          ],
          "url": "https://support.microsoft.com/help/5048685"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-10T08:00:00.000Z",
          "details": "10.0.25398.1308:Security Update:https://support.microsoft.com/help/5048653",
          "product_ids": [
            "5"
          ],
          "url": "https://support.microsoft.com/help/5048653"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-10T08:00:00.000Z",
          "details": "10.0.10240.20857:Security Update:https://support.microsoft.com/help/5048703",
          "product_ids": [
            "27",
            "26"
          ],
          "url": "https://support.microsoft.com/help/5048703"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-10T08:00:00.000Z",
          "details": "10.0.14393.7606:Security Update:https://support.microsoft.com/help/5048671",
          "product_ids": [
            "24",
            "23",
            "25",
            "22"
          ],
          "url": "https://support.microsoft.com/help/5048671"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-10T08:00:00.000Z",
          "details": "6.0.6003.23016:Monthly Rollup:https://support.microsoft.com/help/5048710",
          "product_ids": [
            "37",
            "32",
            "36",
            "35"
          ],
          "url": "https://support.microsoft.com/help/5048710"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-10T08:00:00.000Z",
          "details": "6.0.6003.23016:Security Only:https://support.microsoft.com/help/5048744",
          "product_ids": [
            "37",
            "32",
            "36",
            "35"
          ],
          "url": "https://support.microsoft.com/help/5048744"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-10T08:00:00.000Z",
          "details": "6.1.7601.27467:Monthly Rollup:https://support.microsoft.com/help/5048695",
          "product_ids": [
            "33",
            "34"
          ],
          "url": "https://support.microsoft.com/help/5048695"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-10T08:00:00.000Z",
          "details": "6.1.7601.27467:Security Only:https://support.microsoft.com/help/5048676",
          "product_ids": [
            "33",
            "34"
          ],
          "url": "https://support.microsoft.com/help/5048676"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-10T08:00:00.000Z",
          "details": "6.2.9200.25222:Monthly Rollup:https://support.microsoft.com/help/5048699",
          "product_ids": [
            "31",
            "30"
          ],
          "url": "https://support.microsoft.com/help/5048699"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-10T08:00:00.000Z",
          "details": "6.3.9600.22318:Monthly Rollup:https://support.microsoft.com/help/5048735",
          "product_ids": [
            "29",
            "28"
          ],
          "url": "https://support.microsoft.com/help/5048735"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalsScore": 0.0,
            "exploitCodeMaturity": "UNPROVEN",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "remediationLevel": "OFFICIAL_FIX",
            "reportConfidence": "CONFIRMED",
            "scope": "UNCHANGED",
            "temporalScore": 6.8,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "3",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "12",
            "13",
            "14",
            "15",
            "16",
            "17",
            "18",
            "19",
            "20",
            "21",
            "22",
            "23",
            "24",
            "25",
            "26",
            "27",
            "28",
            "29",
            "30",
            "31",
            "32",
            "33",
            "34",
            "35",
            "36",
            "37"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Elevation of Privilege"
        },
        {
          "category": "exploit_status",
          "details": "Publicly Disclosed:Yes;Exploited:Yes;Latest Software Release:Exploitation Detected"
        }
      ],
      "title": "Windows Common Log File System Driver Elevation of Privilege Vulnerability"
    }
  ]
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CVE-2024-49138 (GCVE-0-2024-49138)

Vulnerability from cvelistv5

CISA Known exploited vulnerability

Data from the Known Exploited Vulnerabilities Catalog

ncsc-2024-0470

Vulnerability from csaf_ncscnl

wid-sec-w-2024-3657

Vulnerability from csaf_certbund

ghsa-h4hx-5g7m-p3hc

Vulnerability from github

fkie_cve-2024-49138

Vulnerability from fkie_nvd

msrc_cve-2024-49138

Vulnerability from csaf_microsoft

Tags

Sightings

Nomenclature