NVD disclosure day

Published threat advisories for June 11, 2024

CVE advisoryKnown Exploit

CVE-2024-35250

Windows Elevation of Privilege Vulnerability in Kernel-Mode Driver.

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A vulnerability in the Windows Kernel-Mode Driver allows a local attacker to escalate privileges. This could impact system integrity and data confidentiality, posing a business risk if an attacker gains unauthorized local access.A vulnerability in the Windows Kernel-Mode Driver allows a local attacker to gain elevated

• CISA KEV

CVE advisoryKnown Exploit

CVE-2024-30088

Windows Kernel Privilege Escalation Vulnerability Advisory

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A vulnerability in the Windows Kernel allows for privilege escalation. This impacts organizations by enabling attackers with local access to gain unauthorized control of systems. The risk to business operations and data is significant due to the potential for system compromise.

• CISA KEV

CVE advisoryCRITICAL

CVE-2024-30080

Microsoft MSMQ Remote Code Execution Vulnerability

Halo Surface Signal: 2 out of 5 — less likely to be public-facing.

A critical vulnerability in Microsoft Message Queuing allows unauthenticated attackers to execute arbitrary code remotely by sending a specially crafted message. This could impact system integrity and availability. The vulnerability affects multiple Windows versions.