CVE-2024-6769

Katalog CVE

CVSS 6.7 · Medium EPSS 1,1%

Kerentanan Untrusted Search Path. Skor CVSS 3.1 6.7 (Medium) menurut CNA.

Deskripsi (NVD)

A DLL Hijacking caused by drive remapping combined with a poisoning of the activation cache in Microsoft Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, and Windows Server 2022 allows a malicious authenticated attacker to elevate from a medium integrity process to a high integrity process without the intervention of a UAC prompt.

Rincian

Terbit di NVD

26 September 2024

Terakhir diubah

17 Juni 2026

Status NVD

Deferred

CVSS 3.1

6.7 (Medium), sumber CNA
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-426: Untrusted Search Path
CWE-427: Uncontrolled Search Path Element

EPSS (30 hari)

1,1% peluang dieksploitasi; lebih tinggi dari 64,2% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://www.fortra.com/security/advisories/research/fr-2024-002
• https://github.com/fortra/CVE-2024-6769