Untrusted Pointer Dereference in Windows and Windows Server - CVE-2024-26252

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU88418

Untrusted Pointer Dereference in Windows and Windows Server - CVE-2024-26252

Published: April 10, 2024


Vulnerability identifier: #VU88418
CSH Severity: Low
CVSSv4.0: CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2024-26252
CWE-ID: CWE-822
Exploitation vector: Local access
Exploit availability: No public exploit available
Vulnerable software:
Windows
Windows Server
Software vendor:
Microsoft

Description

The vulnerability allows a local attacker to execute arbitrar code o nthe system.

The vulnerability exists due to untrusted pointer dereference in Windows rndismp6.sys. An attacker with physical access can execute arbitrary code on the target system.


Remediation

Install updates from vendor's website.

External links