Jul 9, 2024
2 new incidents, 1 with updates.
Started
- ClosedPatched
Microsoft SharePoint Deserialization
Microsoft SharePoint contains a deserialization vulnerability that allows for remote code execution. Added to the CISA KEV catalog on 2024-10-22. CISA lists known use in ransomware campaigns.
Microsoft SharePointClosed Oct 22, 2024
- ClosedPatched
Microsoft July 2024: 2 actively exploited zero-days
CVE-2024-38080: Microsoft Windows Hyper-V contains a privilege escalation vulnerability that allows a local attacker with user permissions to gain SYSTEM privileges. CVE-2024-38112: Microsoft Windows MSHTML Platform contains a spoofing vulnerability that has a high impact to confidentiality, integrity, and availability. Added to the CISA KEV catalog on 2024-07-09.
Microsoft WindowsClosed Jul 9, 2024
Updated
- ClosedPatched
Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine
Rejetto HTTP File Server contains an improper neutralization of special elements used in a template engine vulnerability. This allows a remote, unauthenticated attacker to execute commands on the affected system by sending a specially crafted HTTP request. Added to the CISA KEV catalog on 2024-07-09. CISA lists known use in ransomware campaigns.
Rejetto HTTP File ServerClosed Jul 9, 2024
