Feb 13, 2024
3 new incidents, 0 with updates.
Started
- ClosedPatched
Microsoft Exchange Server Privilege Escalation
Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. Added to the CISA KEV catalog on 2024-02-15.
Microsoft Exchange ServerClosed Feb 15, 2024
- ClosedPatched
Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control
Microsoft Windows Kernel contains an exposed IOCTL with insufficient access control vulnerability within the IOCTL (input and output control) dispatcher in appid.sys that allows a local attacker to achieve privilege escalation. Added to the CISA KEV catalog on 2024-03-04. CISA lists known use in ransomware campaigns.
Microsoft WindowsClosed Mar 4, 2024
- ClosedPatched
Microsoft February 2024: 2 actively exploited zero-days
CVE-2024-21351: Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the SmartScreen user experience and inject code to potentially gain code execution, which could lead to some data exposure, lack of system availability, or both. CVE-2024-21412: Microsoft Windows Internet Shortcut Files contains an unspecified vulnerability that allows for a security feature bypass. Added to the CISA KEV catalog on 2024-02-13. CISA lists known use in ransomware campaigns.
Microsoft WindowsClosed Feb 13, 2024
