An arbitrary write vulnerability in Microsoft signed UEFI firmware allows for code execution of untrusted software. This allows an attacker to control its value, leading to arbitrary memory writes, including modification of critical firmware settings stored in NVRAM. Exploiting this vulnerability could enable security bypasses, persistence mechanisms, or full system compromise.

UNSUPPORTED WHEN ASSIGNED

A privilege escalation vulnerability in CxUIUSvc64.exe and CxUIUSvc32.exe of Synaptics audio drivers allows a local authorized attacker to load a DLL in a privileged process.

Out of an abundance of caution, this CVE ID is being assigned to better serve our customers and ensure all who are still running this product understand that the product is End-of-Life and should be removed. For more information on this, refer to the CVE Record’s reference information.

Cert CC: CVE-2024-7344 Howyar Taiwan Secure Boot Bypass

Windows Registry Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

Windows Telephony Service Remote Code Execution Vulnerability

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

Windows Telephony Service Remote Code Execution Vulnerability

Windows Package Library Manager Information Disclosure Vulnerability

Windows Client-Side Caching Elevation of Privilege Vulnerability

Windows Telephony Service Elevation of Privilege Vulnerability

Windows Telephony Service Remote Code Execution Vulnerability

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

Windows Telephony Service Remote Code Execution Vulnerability

Windows NT OS Kernel Elevation of Privilege Vulnerability

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

Windows Defender Application Control (WDAC) Security Feature Bypass Vulnerability

Windows Telephony Service Remote Code Execution Vulnerability

Windows Telephony Service Remote Code Execution Vulnerability

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows Hyper-V Elevation of Privilege Vulnerability

Windows TCP/IP Remote Code Execution Vulnerability

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

Windows Network Address Translation (NAT) Denial of Service Vulnerability

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability