Yüksek CISA KEV
CVE-2024-38178: Microsoft Windows: aktif olarak istismar edilen açık
Açıklama (NVD)
Microsoft Windows Scripting Engine contains a memory corruption vulnerability that allows unauthenticated attacker to initiate remote code execution via a specially crafted URL.
Özet bilgiler
- EPSS
- %41,38 (yüzdelik 99)
- Yama
- Yok / bilinmiyor
- KEV
- Eklenme: 2024-08-13 · Son tarih: 2024-09-03
Gerekli aksiyon: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.