- Description
- Windows Kerberos Elevation of Privilege Vulnerability
- Source
- secure@microsoft.com
- NVD status
- Analyzed
CVSS 3.1
- Type
- Secondary
- Base score
- 7.5
- Impact score
- 5.9
- Exploitability score
- 1.6
- Vector string
- CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- Severity
- HIGH
- secure@microsoft.com
- CWE-303
- nvd@nist.gov
- NVD-CWE-noinfo
- Hype score
- Not currently trending
Does this "Immediate Action: Enforce PAC Validation for CVE-2024-26248 & CVE-2024-29056" https://t.co/bDrBl3zAzT mean that all Windows clients must be April LCU patched prior to the domain controller's receiving the April LCU? @jarwidmark @miketerrill @Mister_MDM
@StevenKister1
8 Apr 2025
4 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2024-49112 & 49113っていうAD(LDAP)脆弱性対応を 今日明日やらんといけなさそうで、準備しとった CVE-2024-26248の対応もあるから面倒で・・・ あれ？今日って祝日？ めっさ仕事する気でいた月曜午前 のんきな旅行レポ読んでうっすら自覚した
@saxmid
13 Jan 2025
27 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*",
"vulnerable": true,
"matchCriteriaId": "E7BDA51E-51E0-487D-A25F-2477213B563E",
"versionEndExcluding": "10.0.10240.20596"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
"vulnerable": true,
"matchCriteriaId": "A607FDAE-53FE-49DA-806F-0533F5ECC108",
"versionEndExcluding": "10.0.10240.20596"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
"vulnerable": true,
"matchCriteriaId": "6CA18E04-75AD-4BC1-BCF7-B7C3DD33D9D3",
"versionEndExcluding": "10.0.14393.6897"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
"vulnerable": true,
"matchCriteriaId": "8E68CF86-FB36-4E0E-A919-D7010E1D9CEE",
"versionEndExcluding": "10.0.14393.6897"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7C50F3D5-1329-4563-BB59-9C50E2EEC237",
"versionEndExcluding": "10.0.17763.5696"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1BE5B3C6-9F18-44A0-95CC-B4CD358794BF",
"versionEndExcluding": "10.0.19044.4291"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "23C51F9B-0BF1-414C-BFA5-4F5B81413E9E",
"versionEndExcluding": "10.0.19045.4291"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "39B18FD8-656D-46D2-8BDE-AF030C278E02",
"versionEndExcluding": "10.0.22000.2899"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "54B49649-55CB-4BFF-BB50-592662435694",
"versionEndExcluding": "10.0.22621.3447"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "79409538-C0CE-4051-80C3-383220427D0B",
"versionEndExcluding": "10.0.22631.3447"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5F422A8C-2C4E-42C8-B420-E0728037E15C"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
"vulnerable": true,
"matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "412F0026-BBE6-4F7D-ABC2-56E9F1791122",
"versionEndExcluding": "10.0.14393.6897"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4EAAB276-D0E4-41CA-8A25-4DE9FC90543E",
"versionEndExcluding": "10.0.17763.5696"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7103C832-A4FB-4373-8A93-291E7A89B4AA",
"versionEndExcluding": "10.0.20348.2402"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F2B61B79-FEE5-4041-918D-6FE2C92771DC",
"versionEndExcluding": "10.0.25398.830"
}
],
"operator": "OR"
}
]
}
]