Lucene search
CISACISA-KEV-CVE-2024-38014HistorySep 10, 2024 - 12:00 a.m.
Microsoft Windows Installer Improper Privilege Management Vulnerability
2024-09-1000:00:00
CISA
www.cisa.gov
125
microsoft
windows
installer
privilege escalation
vulnerability
system privileges
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.2
Confidence
High
EPSS
0.001
Percentile
23.6%
Microsoft Windows Installer contains an improper privilege management vulnerability that could allow an attacker to gain SYSTEM privileges.
Related
mscve
mscve
Windows Installer Elevation of Privilege Vulnerability
2024-09-10 07:00:00
cvelist
cvelist
CVE-2024-38014 Windows Installer Elevation of Privilege Vulnerability
2024-09-10 16:53:54
vulnrichment
vulnrichment
CVE-2024-38014 Windows Installer Elevation of Privilege Vulnerability
2024-09-10 16:53:54
nvd
nvd
CVE-2024-38014
2024-09-10 17:15:20
attackerkb
attackerkb
CVE-2024-38014
2024-09-10 00:00:00
cve
cve
CVE-2024-38014
2024-09-10 17:15:20
krebs
krebs
Bug Left Some Windows PCs Dangerously Unpatched
2024-09-10 21:46:21
thn
thn
talosblog
talosblog
nessus
nessus
KB5043087: Windows Server 2008 Security Update (September 2024)
2024-09-10 00:00:00
KB5043092: Windows Server 2008 R2 Security Update (September 2024)
2024-09-10 00:00:00
KB5043125: Windows Server 2012 Security Update (September 2024)
2024-09-10 00:00:00
mskb
mskb
September 10, 2024—KB5043087 (Security-only update)
2024-09-10 07:00:00
September 10, 2024—KB5043135 (Monthly Rollup)
2024-09-10 07:00:00
September 10, 2024—KB5043129 (Monthly Rollup)
2024-09-10 07:00:00
kaspersky
kaspersky
KLA73222 Multiple vulnerabilities in Microsoft Products (ESU)
2024-09-10 00:00:00
KLA73227 Multiple vulnerabilities in Microsoft Windows
2024-09-10 00:00:00
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB5043083)
2024-09-11 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5043076)
2024-09-11 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5043067)
2024-09-11 00:00:00
qualysblog
qualysblog
Microsoft and Adobe Patch Tuesday, September 2024 Security Update Review
2024-09-10 19:31:38
rapid7blog
rapid7blog
Patch Tuesday - September 2024
2024-09-10 20:49:21
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.2
Confidence
High
EPSS
0.001
Percentile
23.6%
Related for CISA-KEV-CVE-2024-38014