Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
An arbitrary write vulnerability in Microsoft signed UEFI firmware allows for code execution of untrusted software. This allows an attacker to control its value, leading to arbitrary memory writes, including modification of critical firmware settings stored in NVRAM. Exploiting this vulnerability could enable security bypasses, persistence mechanisms, or full system compromise.
UNSUPPORTED WHEN ASSIGNED
A privilege escalation vulnerability in CxUIUSvc64.exe and CxUIUSvc32.exe of Synaptics audio drivers allows a local authorized attacker to load a DLL in a privileged process.
Out of an abundance of caution, this CVE ID is being assigned to better serve our customers and ensure all who are still running this product understand that the product is End-of-Life and should be removed. For more information on this, refer to the CVE Record’s reference information.
Cert CC: CVE-2024-7344 Howyar Taiwan Secure Boot Bypass
Windows Registry Elevation of Privilege Vulnerability
Win32k Elevation of Privilege Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
Active Directory Certificate Services Elevation of Privilege Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
Windows Client-Side Caching Elevation of Privilege Vulnerability
Windows Telephony Service Elevation of Privilege Vulnerability
Windows DNS Spoofing Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
Windows NT OS Kernel Elevation of Privilege Vulnerability
Windows Registry Elevation of Privilege Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
Windows Hyper-V Elevation of Privilege Vulnerability
Windows DNS Spoofing Vulnerability
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Windows Network Address Translation (NAT) Denial of Service Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Clipboard Virtual Channel Extension Remote Code Execution Vulnerability