https://pwn.watch/i/microsoft-zero-days-november-2024-43451-49039 CVE-2024-43451: Microsoft Windows contains an NTLMv2 hash spoofing vulnerability that could result in disclosing a user's NTLMv2 hash to an attacker via a file open operation. The attacker could then leverage this hash to impersonate that user. CVE-2024-49039: Microsoft Windows Task Scheduler contains a privilege escalation vulnerability that can allow an attacker-provided, local application to escalate privileges outside of its AppContainer, and access privileged RPC functions. Added to the CISA KEV catalog on 2024-11-12. CISA lists known use in ransomware campaigns. en Tue, 12 Nov 2024 00:00:00 GMT https://pwn.watch/i/microsoft-zero-days-november-2024-43451-49039 https://pwn.watch/i/microsoft-zero-days-november-2024-43451-49039#2024-11-12-2896d265 Tue, 12 Nov 2024 00:00:00 GMT high <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-43451">Source</a></p> https://pwn.watch/i/microsoft-zero-days-november-2024-43451-49039 https://pwn.watch/i/microsoft-zero-days-november-2024-43451-49039#2024-11-12-93c67fdd Tue, 12 Nov 2024 00:00:00 GMT high <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-49039">Source</a></p> https://pwn.watch/i/microsoft-zero-days-november-2024-43451-49039 https://pwn.watch/i/microsoft-zero-days-november-2024-43451-49039#2024-11-12-d1d430c2 Tue, 12 Nov 2024 00:00:00 GMT high <p><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Source</a></p> https://pwn.watch/i/microsoft-zero-days-november-2024-43451-49039 https://pwn.watch/i/microsoft-zero-days-november-2024-43451-49039#2024-11-12-8e11f9aa Tue, 12 Nov 2024 00:00:00 GMT high <p><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Source</a></p>