Analysis Summary

CVE-2024-37987 CVSS:8

Microsoft Windows could allow a remote attacker to bypass security restrictions, cause by a flaw in Secure Boot component. An attacker could exploit this vulnerability to bypass security feature to cause impact on confidentiality, integrity and availability.

CVE-2024-38057 CVSS:7.8

Microsoft Windows could allow a local authenticated attacker to gain elevated privileges on the system, caused by a flaw in the Streaming Service component. By executing a specially crafted program, an authenticated attacker could exploit this vulnerability to execute arbitrary code with higher privileges.

CVE-2024-38048 CVSS:6.5

Microsoft Windows is vulnerable to a denial of service, caused by a flaw in the Network Driver Interface Specification (NDIS) component. By sending a specially crafted request, a remote attacker could exploit this vulnerability to cause a denial of service condition.

CVE-2024-38078 CVSS:7.5

Microsoft Windows could allow a remote attacker to execute arbitrary code on the system, caused by a flaw in the XBox Wireless Adapter component. By sending a specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system.

CVE-2024-37988 CVSS:8

Microsoft Windows could allow a remote attacker to bypass security restrictions, cause by a flaw in the Secure Boot component. An attacker could exploit this vulnerability to bypass security feature to cause impact on confidentiality, integrity and availability.

CVE-2024-37977 CVSS:8

Microsoft Windows could allow a remote attacker to bypass security restrictions, cause by a flaw in the Secure Boot component. An attacker could exploit this vulnerability to bypass security feature to cause impact on confidentiality, integrity and availability.

CVE-2024-28899 CVSS:8.8

Microsoft Windows could allow a remote attacker to bypass security restrictions, cause by a flaw in Secure Boot component. An attacker could exploit this vulnerability to bypass security feature to cause impact on confidentiality, integrity and availability.

CVE-2024-38015 CVSS:7.5

Microsoft Windows is vulnerable to a denial of service, caused by a flaw in the Remote Desktop Gateway (RD Gateway) component. By sending a specially crafted request, a remote attacker could exploit this vulnerability to cause a denial of service condition.

CVE-2024-37970 CVSS:8

Microsoft Windows could allow a remote attacker to bypass security restrictions, cause by a flaw in Secure Boot component. An attacker could exploit this vulnerability to bypass security feature to cause impact on confidentiality, integrity and availability.

CVE-2024-38062 CVSS:7.8

Microsoft Windows could allow a local authenticated attacker to gain elevated privileges on the system, caused by a flaw in the Kernel-Mode driver. By executing a specially crafted program, an authenticated attacker could exploit this vulnerability to execute arbitrary code with higher privileges.

CVE-2024-37971 CVSS:8

Microsoft Windows could allow a remote attacker to bypass security restrictions, cause by a flaw in the Secure Boot component. An attacker could exploit this vulnerability to bypass security feature to cause impact on confidentiality, integrity and availability.

Impact

• Denial of Service
• Security Bypass
• Privilege Escalation
•  

Indicators of Compromise

CVE

• CVE-2024-37987
• CVE-2024-38057
• CVE-2024-38048
• CVE-2024-38078
• CVE-2024-37988
• CVE-2024-37977
• CVE-2024-28899
• CVE-2024-38015
• CVE-2024-37970
• CVE-2024-38062
• CVE-2024-37971

Affected Vendors

Remediation

Use Microsoft Automatic Update to apply the appropriate patch for your system, or the Microsoft Security Update Guide to search for available patches.

CVE-2024-37987

CVE-2024-38057

CVE-2024-38048

CVE-2024-38078

CVE-2024-37988

CVE-2024-37977

CVE-2024-28899

CVE-2024-38015

CVE-2024-37970

CVE-2024-38062

CVE-2024-37971