Analysis Summary

CVE-2024-26223 CVSS:7.2

Microsoft Windows could allow a remote attacker to execute arbitrary code on the system, caused by a flaw in DNS Server. By sending a specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system.

CVE-2024-26183 CVSS:6.5

Microsoft Windows is vulnerable to a denial of service, caused by a NULL pointer dereference in the Kerberos component. By sending a specially crafted request, a remote authenticated attacker could exploit this vulnerability to cause a denial of service.

CVE-2024-26237 CVSS:7.8

Microsoft Windows could allow a local authenticated attacker to gain elevated privileges on the system, caused by a use-after-free in the Defender Credential Guard component. By sending a specially crafted request, an attacker could exploit this vulnerability to obtain SYSTEM privileges.

CVE-2024-28919 CVSS 6.7

Microsoft Windows could allow a local authenticated attacker to bypass security restrictions, cause by protection mechanism failure in the Secure Boot component. An attacker could exploit this vulnerability to bypass secure booting.

CVE-2024-28924 CVSS:6.7

Microsoft Windows could allow a local authenticated attacker to bypass security restrictions, cause by a stack-based buffer overflow in the Secure Boot component. An attacker could exploit this vulnerability to bypass secure booting.

CVE-2024-28923 CVSS:6.4

Microsoft Windows could allow a local authenticated attacker to bypass security restrictions, cause by an integer overflow or wraparound in the Secure Boot component. An attacker could exploit this vulnerability to bypass secure booting.

CVE-2024-26180 CVSS:8

Microsoft Windows could allow a remote attacker to bypass security restrictions, cause by a stack-based buffer overflow in the Secure Boot component. An attacker could exploit this vulnerability to bypass secure booting.

CVE-2024-29052 CVSS:7.8

Microsoft Windows could allow a local authenticated attacker to gain elevated privileges on the system, caused by a flaw in Storage. By sending a specially crafted request, an attacker could exploit this vulnerability to obtain administrative privileges.

CVE-2024-26171 CVSS:6.7

Microsoft Windows could allow a local authenticated attacker to bypass security restrictions, cause by security mechanism failure in the Secure Boot component. An attacker could exploit this vulnerability to bypass secure booting.

CVE-2024-26252 CVSS:6.8

Microsoft Windows could allow a physical attacker to execute arbitrary code on the system, caused by an untrusted pointer dereference in the rndismp6.sys component. By sending a specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system.

CVE-2024-26231 CVSS:7.2

Microsoft Windows could allow a remote attacker to execute arbitrary code on the system, caused by a flaw in DNS Server. By sending a specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system.

CVE-2024-29064 CVSS:6.2

Microsoft Windows Hyper-V is vulnerable to a denial of service. By sending a specially crafted request, a local attacker could exploit this vulnerability to cause a denial of service condition.

CVE-2024-26248 CVSS:7.5

Microsoft Windows could allow a remote authenticated attacker to gain elevated privileges on the system, caused by incorrect implementation of authentication algorithms in the Kerberos component. By sending a specially crafted request, an attacker could exploit this vulnerability to obtain SYSTEM privileges.

CVE-2024-26214 CVSS:8.8

Microsoft Windows could allow a remote attacker to execute arbitrary code on the system, caused by a flaw in WDAC SQL Server ODBC Driver. By sending a specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system.

CVE-2024-26255 CVSS:5.5

Microsoft Windows could allow a local authenticated attacker to obtain sensitive information, caused by a buffer over-read in the Remote Access Connection Manager component. By executing a specially crafted program, an attacker could exploit this vulnerability to obtain sensitive information and then use this information to launch further attacks against the affected system.

CVE-2024-28922 CVSS:6.7

Microsoft Windows could allow a local authenticated attacker to bypass security restrictions, cause by protection mechanism failure in the Secure Boot component. An attacker could exploit this vulnerability to bypass secure booting.