CVE-2023-24908High· 8.1▾ TwilightRemote Procedure Call Runtime Remote Code Execution Vulnerability
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 44.6 · likelihood 0.2 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
1.0%
Remote Procedure Call Runtime Remote Code Execution Vulnerability
windows_10_1507 < 10.0.10240.19805windows_10_1607 < 10.0.14393.5786windows_10_1809 < 10.0.17763.4131windows_10_20h2 < 10.0.19042.2728windows_10_21h2 < 10.0.19044.2728windows_10_22h2 < 10.0.19045.2728windows_11_21h2 < 10.0.22000.1696windows_11_22h2 < 10.0.22000.1413windows_server_2008windows_server_2008 = r2windows_server_2012windows_server_2012 = r2windows_server_2016windows_server_2019windows_server_2022Upgrade past the affected range:
windows_10_1507 10.0.10240.19805windows_10_1607 10.0.14393.5786windows_10_1809 10.0.17763.4131windows_10_20h2 10.0.19042.2728windows_10_21h2 10.0.19044.2728windows_10_22h2 10.0.19045.2728windows_11_21h2 10.0.22000.1696windows_11_22h2 10.0.22000.1413Connected by shared product, vendor, weakness, or advisory.
CVE-2024-49112Critical· 9.8Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVE-2024-30067Medium· 5.5Winlogon Elevation of Privilege Vulnerability
CVE-2026-88077High· 8.8Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2024-49113High· 7.5Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
CVE-2024-26230High· 7.8Windows Telephony Server Elevation of Privilege Vulnerability
CVE-2013-3900Medium· 5.5Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supp…