NVD disclosure day

Published threat advisories for March 12, 2024

CVE advisoryKnown Exploit

CVE-2024-26169

Windows Error Reporting Elevation of Privilege Vulnerability.

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A local privilege escalation vulnerability in the Windows Error Reporting Service affects Windows operating systems. This flaw allows an attacker with basic user access to gain administrative privileges, potentially leading to unauthorized system control and data compromise. The risk to organizations includes unauthori

NVD modified: NVD date unavailable • CISA KEV
CVE advisoryCRITICAL

CVE-2024-21400

Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A critical privilege elevation vulnerability exists in the Microsoft Azure CLI extension for confidential containers. If reachable, an unauthenticated attacker could exploit this to gain elevated privileges, impacting confidentiality, integrity, and availability. Organizations should verify if this extension is used fo

NVD modified: NVD date unavailable
CVE advisoryCRITICAL

CVE-2023-42789

Fortinet FortiOS and FortiProxy Out-of-Bounds Write Vulnerability.

Halo Surface Signal: 5 out of 5 — more likely to be public-facing.

An out-of-bounds write vulnerability in Fortinet FortiOS and FortiProxy allows attackers to execute unauthorized code or commands via crafted HTTP requests. This could lead to device compromise if the technology is reachable. Confirm if your organization uses the affected technology and assess potential exposure.

NVD modified: NVD date unavailable