Security Warnings — Week: 2024-W24

Microsoft Edge (Chromium-based) Spoofing Vulnerability

2024-06-11 CVE-2024-38082

mediumMicrosoft MSRC 2024-W24

Microsoft Edge (Chromium-based) Spoofing Vulnerability

2024-06-11 CVE-2024-38083

mediumMicrosoft MSRC 2024-W24

Microsoft Edge (Chromium-based) Spoofing Vulnerability

2024-06-11 CVE-2024-38093

mediumMicrosoft MSRC 2024-W24

Microsoft Edge for iOS Spoofing Vulnerability

2024-06-11 CVE-2024-30057

mediumMicrosoft MSRC 2024-W24

Microsoft Event Trace Log File Parsing Remote Code Execution Vulnerability

2024-06-11 CVE-2024-30072

highMicrosoft MSRC 2024-W24

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

2024-06-11 CVE-2024-30080

criticalMicrosoft MSRC 2024-W24

Microsoft Office Remote Code Execution Vulnerability

2024-06-11 CVE-2024-30101

highMicrosoft MSRC 2024-W24

Microsoft Office Remote Code Execution Vulnerability

2024-06-11 CVE-2024-30102

highMicrosoft MSRC 2024-W24

Microsoft Office Remote Code Execution Vulnerability

2024-06-11 CVE-2024-30104

highMicrosoft MSRC 2024-W24

Microsoft Outlook Remote Code Execution Vulnerability

2024-06-11 CVE-2024-30103

highMicrosoft MSRC 2024-W24

Microsoft SharePoint Server Remote Code Execution Vulnerability

2024-06-11 CVE-2024-30100

highMicrosoft MSRC 2024-W24

Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability

2024-06-11 CVE-2024-30097

highMicrosoft MSRC 2024-W24

Microsoft Streaming Service Elevation of Privilege Vulnerability

2024-06-11 CVE-2024-30089

highMicrosoft MSRC 2024-W24

Microsoft Streaming Service Elevation of Privilege Vulnerability

2024-06-11 CVE-2024-30090

highMicrosoft MSRC 2024-W24

Mishandling of corrupt central directory record in archive/zip

2024-06-11 CVE-2024-24789

mediumMicrosoft MSRC 2024-W24

MITRE: CVE-2023-50868 NSEC3 closest encloser proof can exhaust CPU

2024-06-11 CVE-2023-50868

highMicrosoft MSRC 2024-W24

Nano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file

2024-06-11 CVE-2024-5742

mediumMicrosoft MSRC 2024-W24

net: bridge: xmit: make sure we have at least eth header len bytes

2024-06-11 CVE-2024-38538

highMicrosoft MSRC 2024-W24

net: fec: remove .ndo_poll_controller to avoid deadlocks

2024-06-11 CVE-2024-38553

mediumMicrosoft MSRC 2024-W24

net: fix __dst_negative_advice() race

2024-06-11 CVE-2024-36971

highMicrosoft MSRC 2024-W24

net: stmmac: move the EST lock to struct stmmac_priv

2024-06-11 CVE-2024-38594

lowMicrosoft MSRC 2024-W24

net/mlx5: Fix peer devlink set for SF representor devlink port

2024-06-11 CVE-2024-38595

mediumMicrosoft MSRC 2024-W24

net/mlx5: Reload only IB representors upon lag disable/enable

2024-06-11 CVE-2024-38557

mediumMicrosoft MSRC 2024-W24

net/mlx5e: Avoid field-overflowing memcpy()

2024-06-11 CVE-2022-48744

highMicrosoft MSRC 2024-W24

net/mlx5e: Fix netif state handling

2024-06-11 CVE-2024-38608

mediumMicrosoft MSRC 2024-W24

net/sched: taprio: extend minimum interval restriction to entire cycle too

2024-06-11 CVE-2024-36244

mediumMicrosoft MSRC 2024-W24

netplan leaks the private key of wireguard to local users.

2024-06-11 CVE-2022-4968

mediumMicrosoft MSRC 2024-W24

NTFS-3G before 75dcdc2 has a use-after-free in ntfs_uppercase_mbs in libntfs-3g/unistr.c. NOTE: discussion suggests that exploitation would be challenging.

2024-06-11 CVE-2023-52890

mediumMicrosoft MSRC 2024-W24

null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'

2024-06-11 CVE-2024-36478

mediumMicrosoft MSRC 2024-W24

of: module: add buffer overflow check in of_modalias()

2024-06-11 CVE-2024-38541

criticalMicrosoft MSRC 2024-W24

PHP is vulnerable to the Marvin Attack

2024-06-11 CVE-2024-2408

mediumMicrosoft MSRC 2024-W24

Proxy-Authorization request header isn't stripped during cross-origin redirects in urllib3

2024-06-11 CVE-2024-37891

mediumMicrosoft MSRC 2024-W24

RDMA/hns: Fix UAF for cq async event

2024-06-11 CVE-2024-38545

highMicrosoft MSRC 2024-W24

riscv: prevent pt_regs corruption for secondary idle threads

2024-06-11 CVE-2024-38667

highMicrosoft MSRC 2024-W24

SUNRPC: Fix loop termination condition in gss_free_in_token_pages()

2024-06-11 CVE-2024-36288

mediumMicrosoft MSRC 2024-W24

tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer buffer

2024-06-11 CVE-2024-36477

highMicrosoft MSRC 2024-W24

tracing/probes: fix error check in parse_btf_field()

2024-06-11 CVE-2024-36481

mediumMicrosoft MSRC 2024-W24

um: Add winch to winch_handlers before registering winch IRQ

2024-06-11 CVE-2024-39292

mediumMicrosoft MSRC 2024-W24

Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip

2024-06-11 CVE-2024-24790

criticalMicrosoft MSRC 2024-W24

url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI and thus there may be insecure behavior in which data that was supposed to be in the us

2024-06-11 CVE-2024-38428

criticalMicrosoft MSRC 2024-W24

usb: gadget: u_audio: Fix race condition use of controls after free during gadget unbind.

2024-06-11 CVE-2024-38628

mediumMicrosoft MSRC 2024-W24

Visual Studio Elevation of Privilege Vulnerability

2024-06-11 CVE-2024-29060

mediumMicrosoft MSRC 2024-W24

Visual Studio Remote Code Execution Vulnerability

2024-06-11 CVE-2024-30052

mediumMicrosoft MSRC 2024-W24

watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger

2024-06-11 CVE-2024-38630

highMicrosoft MSRC 2024-W24

Win32k Elevation of Privilege Vulnerability

2024-06-11 CVE-2024-30082

highMicrosoft MSRC 2024-W24

Win32k Elevation of Privilege Vulnerability

2024-06-11 CVE-2024-30087

highMicrosoft MSRC 2024-W24

Win32k Elevation of Privilege Vulnerability

2024-06-11 CVE-2024-30091

highMicrosoft MSRC 2024-W24

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

2024-06-11 CVE-2024-30085

highMicrosoft MSRC 2024-W24

Windows Container Manager Service Elevation of Privilege Vulnerability

2024-06-11 CVE-2024-30076

mediumMicrosoft MSRC 2024-W24

Windows Cryptographic Services Information Disclosure Vulnerability

2024-06-11 CVE-2024-30096

mediumMicrosoft MSRC 2024-W24

Windows Distributed File System (DFS) Remote Code Execution Vulnerability

2024-06-11 CVE-2024-30063

mediumMicrosoft MSRC 2024-W24

Windows Kernel Elevation of Privilege Vulnerability

2024-06-11 CVE-2024-30064

highMicrosoft MSRC 2024-W24

Windows Kernel Elevation of Privilege Vulnerability

2024-06-11 CVE-2024-30068

highMicrosoft MSRC 2024-W24

Windows Kernel Elevation of Privilege Vulnerability

2024-06-11 CVE-2024-30088

highMicrosoft MSRC 2024-W24

Windows Kernel Elevation of Privilege Vulnerability

2024-06-11 CVE-2024-30099

highMicrosoft MSRC 2024-W24

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

2024-06-11 CVE-2024-30084

highMicrosoft MSRC 2024-W24

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

2024-06-11 CVE-2024-35250

highMicrosoft MSRC 2024-W24

Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability

2024-06-11 CVE-2024-30074

highMicrosoft MSRC 2024-W24

Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability

2024-06-11 CVE-2024-30075

highMicrosoft MSRC 2024-W24

Windows OLE Remote Code Execution Vulnerability

2024-06-11 CVE-2024-30077

highMicrosoft MSRC 2024-W24