A proof-of-concept (PoC) exploit has been released for a now-patched security flaw impacting Windows Lightweight Directory Access Protocol (LDAP) that could trigger a denial-of-service (DoS) condition.
The out-of-bounds reads vulnerability is tracked as CVE-2024-49113 (CVSS score: 7.5). It was addressed by Microsoft as part of Patch Tuesday updates for December 2024, alongside CVE-2024-49112 (
A vulnerability classified as very critical was found in Microsoft .NET Framework up to 4.8.1. Affected by this vulnerability is an unknown functionality. The manipulation leads to Remote Code Execution.
This vulnerability is known as CVE-2022-26929. The attack can be launched remotely. There is no exploit available.
It is recommended to apply a patch to fix this issue.
A vulnerability was found in Microsoft Windows up to 11. It has been rated as critical. Affected by this issue is some unknown functionality of the component Raw Image Extension. The manipulation leads to Remote Code Execution.
This vulnerability is handled as CVE-2022-38011. The attack may be launched remotely. There is no exploit available.
It is recommended to apply a patch to fix this issue.