CVE-2024-43571 — Improper Restriction of Communication Channel to Intended Endpoints in Microsoft Windows 11 Version 24h2

CWE-923 — Improper Restriction of Communication Channel to Intended Endpoints7 documents5 sources
Severity
5.6MEDIUMCNA
No vector
EPSS
0.4%
top 40.55%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Microsoft Windows 11 Version 24h2Msrc Windows 11 Version 24h2 FOR Arm64-based SystemsMsrc Windows 11 Version 24h2 FOR X64-based Systems
Timeline
PublishedOct 8

Description

Sudo for Windows Spoofing Vulnerability Sudo for Windows Spoofing Vulnerability

Affected Packages3 packages

▶CVEListV5microsoft/windows_11_version_24h210.0.26100.0 — 10.0.26100.2033

🔴Vulnerability Details

1
CVEList
Sudo for Windows Spoofing Vulnerability↗2024-10-08
▶

📋Vendor Advisories

1
Microsoft
Sudo for Windows Spoofing Vulnerability↗2024-10-08
▶

🕵️Threat Intelligence

5
Qualys
Microsoft & Adobe October 2024 Patch Tuesday Updates | Qualys↗2024-10-08
▶
Bleepingcomputer
Microsoft October 2024 Patch Tuesday fixes 5 zero-days, 118 flaws↗2024-10-08
▶
Trendmicro
The October 2024 Security Update Review↗2024-10-08
▶
Trendmicro
The October 2024 Security Update Review↗2024-10-08
▶
Qualys
Microsoft and Adobe Patch Tuesday, October 2024 Security Update Review↗2024-10-08
▶
CVE-2024-43571 — Microsoft vulnerability | cvebase