Multiple vulnerabilities in Microsoft Windows Remote Access Connection Manager
| Risk | Low |
| Patch available | YES |
| Number of vulnerabilities | 7 |
| CVE-ID | CVE-2024-26255 CVE-2024-28902 CVE-2024-26211 CVE-2024-28901 CVE-2024-26207 CVE-2024-26217 CVE-2024-28900 |
| CWE-ID | CWE-125 CWE-122 |
| Exploitation vector | Local |
| Public exploit | N/A |
| Vulnerable software |
Windows Operating systems & Components / Operating system Windows Server Operating systems & Components / Operating system |
| Vendor | Microsoft |
Security Bulletin
This security bulletin contains information about 7 vulnerabilities.
1) Out-of-bounds read
EUVDB-ID: #VU88350
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2024-26255
CWE-ID:
CWE-125 - Out-of-bounds read
Exploit availability: No
DescriptionThe vulnerability allows a local user to gain access to potentially sensitive information.
The vulnerability exists due to a boundary condition in Windows Remote Access Connection Manager. A local user can trigger an out-of-bounds read error and read contents of memory on the system.
MitigationInstall updates from vendor's website.
Vulnerable software versionsWindows: 10 S - 11
Windows Server: 2019 10.0.17763.1 - 2022 23H2
CPE2.3- cpe:2.3:o:microsoft:windows:10:S:*:*:*:*:*:
- cpe:2.3:o:microsoft:windows:10:Mobile:*:*:*:*:*:
- cpe:2.3:o:microsoft:windows:10:Gold:*:*:*:*:*:
- cpe:2.3:o:microsoft:windows:10 20H2:10.0.19042.572:*:*:*:*:*:
- cpe:2.3:o:microsoft:windows:10 21H1:10.0.19043.985:*:*:*:*:*:
- cpe:2.3:o:microsoft:windows:10 21H2:10.0.19044.1288:*:*:*:*:*:
- cpe:2.3:o:microsoft:windows:10 22H2:10.0.19045.2130:*:*:*:*:*:
- cpe:2.3:o:microsoft:windows:10 1507:10.0.10240.16405:*:*:*:*:*:
- cpe:2.3:o:microsoft:windows:10 1511:10.0.10586.3:*:*:*:*:*:
- cpe:2.3:o:microsoft:windows:10 1607:10.0.14393.10:*:*:*:*:*:
- cpe:2.3:o:microsoft:windows_server:2019 2004:*:*:*:*:*:*:
http://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26255
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
2) Out-of-bounds read
EUVDB-ID: #VU88356
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2024-28902
CWE-ID:
CWE-125 - Out-of-bounds read
Exploit availability: No
DescriptionThe vulnerability allows a local user to gain access to potentially sensitive information.
The vulnerability exists due to a boundary condition in Windows Remote Access Connection Manager. A local user can trigger an out-of-bounds read error and read contents of memory on the system.
MitigationInstall updates from vendor's website.
Vulnerable software versionsWindows: 10 Mobile - 11
Windows Server: 2012 R2 - 2022 23H2
CPE2.3- cpe:2.3:o:microsoft:windows:10 1703:10.0.15063.138:*:*:*:*:*:
- cpe:2.3:o:microsoft:windows_server:2012 R2:*:*:*:*:*:*:
http://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-28902
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
3) Heap-based buffer overflow
EUVDB-ID: #VU88355
Risk: Low
CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2024-26211
CWE-ID:
CWE-122 - Heap-based Buffer Overflow
Exploit availability: No
DescriptionThe vulnerability allows a local user to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error in Windows Remote Access Connection Manager. A local user can pass specially crafted data to the application, trigger a heap-based buffer overflow and execute arbitrary code on the target system with elevated privileges.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
MitigationInstall updates from vendor's website.
Vulnerable software versionsWindows: 10 Mobile - 11
Windows Server: 2012 R2 - 2022 23H2
CPE2.3- cpe:2.3:o:microsoft:windows:10:1706:*:*:*:*:*:
- cpe:2.3:o:microsoft:windows_server:2016:10.0.14393.10:*:*:*:*:*:
http://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26211
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
4) Out-of-bounds read
EUVDB-ID: #VU88354
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2024-28901
CWE-ID:
CWE-125 - Out-of-bounds read
Exploit availability: No
DescriptionThe vulnerability allows a local user to gain access to potentially sensitive information.
The vulnerability exists due to a boundary condition in Windows Remote Access Connection Manager. A local user can trigger an out-of-bounds read error and read contents of memory on the system.
MitigationInstall updates from vendor's website.
Vulnerable software versionsWindows: 10 Mobile - 11
Windows Server: 2012 R2 - 2022 23H2
CPE2.3- cpe:2.3:o:microsoft:windows:10 1709:10.0.16299.19:*:*:*:*:*:
- cpe:2.3:o:microsoft:windows_server:2022:23H2:*:*:*:*:*:
http://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-28901
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
5) Out-of-bounds read
EUVDB-ID: #VU88353
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2024-26207
CWE-ID:
CWE-125 - Out-of-bounds read
Exploit availability: No
DescriptionThe vulnerability allows a local user to gain access to potentially sensitive information.
The vulnerability exists due to a boundary condition in Windows Remote Access Connection Manager. A local user can trigger an out-of-bounds read error and read contents of memory on the system.
MitigationInstall updates from vendor's website.
Vulnerable software versionsWindows: 10 Mobile - 11
Windows Server: 2012 R2 - 2022 23H2
CPE2.3 External linkshttp://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26207
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
6) Out-of-bounds read
EUVDB-ID: #VU88352
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2024-26217
CWE-ID:
CWE-125 - Out-of-bounds read
Exploit availability: No
DescriptionThe vulnerability allows a local user to gain access to potentially sensitive information.
The vulnerability exists due to a boundary condition in Windows Remote Access Connection Manager. A local user can trigger an out-of-bounds read error and read contents of memory on the system.
MitigationInstall updates from vendor's website.
Vulnerable software versionsWindows: 10 Mobile - 11
Windows Server: 2012 R2 - 2022 23H2
CPE2.3 External linkshttp://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26217
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
7) Out-of-bounds read
EUVDB-ID: #VU88351
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2024-28900
CWE-ID:
CWE-125 - Out-of-bounds read
Exploit availability: No
DescriptionThe vulnerability allows a local user to gain access to potentially sensitive information.
The vulnerability exists due to a boundary condition in Windows Remote Access Connection Manager. A local user can trigger an out-of-bounds read error and read contents of memory on the system.
MitigationInstall updates from vendor's website.
Vulnerable software versionsWindows: 10 Mobile - 11
Windows Server: 2012 R2 - 2022 23H2
CPE2.3 External linkshttp://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-28900
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
