Threat Advisories - NVD Disclosed March 12, 2024

CVE-2024-26169

Windows Error Reporting Elevation of Privilege Vulnerability.

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A local privilege escalation vulnerability in the Windows Error Reporting Service affects Windows operating systems. This flaw allows an attacker with basic user access to gain administrative privileges, potentially leading to unauthorized system control and data compromise. The risk to organizations includes unauthori

NVD modified: NVD date unavailable • CISA KEV

CVE advisoryKnown Exploit

CVE-2023-48788

Fortinet FortiClient EMS SQL Injection Vulnerability.

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

SQL injection in Fortinet FortiClient EMS allows attackers to execute unauthorized commands. This could lead to system compromise and data breaches. Affected organizations should address this vulnerability to mitigate business risk.

NVD modified: NVD date unavailable • CISA KEV

CVE advisoryCRITICAL

CVE-2023-42789

Fortinet FortiOS and FortiProxy Out-of-Bounds Write Vulnerability.

Halo Surface Signal: 5 out of 5 — more likely to be public-facing.

An out-of-bounds write vulnerability in Fortinet FortiOS and FortiProxy allows attackers to execute unauthorized code or commands via crafted HTTP requests. This could lead to device compromise if the technology is reachable. Confirm if your organization uses the affected technology and assess potential exposure.

NVD modified: NVD date unavailable