9.8
CRITICAL
CVE-2024-49112
Windows LDAP Remote Code Execution (RCE)
Description

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

INFO

Published Date :

Dec. 12, 2024, 2:04 a.m.

Last Modified :

Jan. 14, 2025, 5:54 p.m.

Source :

[email protected]

Remotely Exploitable :

Yes !

Impact Score :

5.9

Exploitability Score :

3.9
Public PoC/Exploit Available at Github

CVE-2024-49112 has a 6 public PoC/Exploit available at Github. Go to the Public Exploits tab to see the list.

Affected Products

The following products are affected by CVE-2024-49112 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Microsoft windows_server_2008
2 Microsoft windows_server_2012
3 Microsoft windows_server_2016
4 Microsoft windows_server_2019
5 Microsoft windows_10_1607
6 Microsoft windows_10_1809
7 Microsoft windows_10_21h2
8 Microsoft windows_10_22h2
9 Microsoft windows_server_2022
10 Microsoft windows_11_22h2
11 Microsoft windows_10_1507
12 Microsoft windows_server_2022_23h2
13 Microsoft windows_11_24h2
14 Microsoft windows_server_2025
: Total Affected Vendor : 1 | Products : 14
References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2024-49112.

URL Resource
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49112 Vendor Advisory

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Profile Photo
bo0l3an/CVE-2024-49112-PoC

CVE-2024-49112 LDAP RCE PoC and Metasploit Module

Ruby Python

Updated: 1 week, 3 days ago
0 stars 0 fork 0 watcher
Born at : Jan. 8, 2025, 1:56 a.m. This repo has been linked 1 different CVEs too.
Profile Photo
CCIEVoice2009/CVE-2024-49112

None

Python

Updated: 1 week, 1 day ago
2 stars 0 fork 0 watcher
Born at : Jan. 2, 2025, 2:02 p.m. This repo has been linked 1 different CVEs too.
Profile Photo
BOl1o/CVE-2024-49112-RCE-PoC

CVE-2024-49112 Windows LDAP RCE PoC and Metasploit Module

Updated: 2 weeks, 1 day ago
1 stars 0 fork 0 watcher
Born at : Jan. 2, 2025, 4:29 a.m. This repo has been linked 1 different CVEs too.
Profile Photo
BOl1o/CVE-2024-49112-PoC

CVE-2024-49112 Windows LDAP RCE PoC and Metasploit Module

Updated: 3 weeks, 3 days ago
0 stars 0 fork 0 watcher
Born at : Dec. 25, 2024, 2:06 a.m. This repo has been linked 1 different CVEs too.
Profile Photo
b0l1o/CVE-2024-49112-PoC

CVE-2024-49112 LDAP RCE PoC and Metasploit Module

Updated: 4 weeks, 2 days ago
3 stars 0 fork 0 watcher
Born at : Dec. 18, 2024, 1:06 a.m. This repo has been linked 1 different CVEs too.
Profile Photo
tnkr/poc_monitor

A short scraper looking for a POC of CVE-2024-49112

Python

Updated: 2 weeks ago
13 stars 2 fork 2 watcher
Born at : Dec. 16, 2024, 1:41 p.m. This repo has been linked 1 different CVEs too.

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2024-49112 vulnerability anywhere in the article.

  • BleepingComputer
Fake LDAPNightmware exploit on GitHub spreads infostealer malware

A deceptive proof-of-concept (PoC) exploit for CVE-2024-49113 (aka "LDAPNightmare") on GitHub infects users with infostealer malware that exfiltrates sensitive data to an external FTP server. The tact ... Read more

Published Date: Jan 11, 2025 (6 days, 13 hours ago)
CVE-2024-49113 CVE-2024-49112
  • tripwire.com
Tripwire Patch Priority Index for December 2024

Tripwire's December 2024 Patch Priority Index (PPI) brings together important vulnerabilities for Microsoft and Adobe.First on the list is a notice about Windows Common Log File System Driver (CLFS). ... Read more

Published Date: Jan 10, 2025 (1 week ago)
CVE-2024-49142 CVE-2024-49138 CVE-2024-49132 CVE-2024-49129 CVE-2024-49128 CVE-2024-49127 CVE-2024-49126 CVE-2024-49125 CVE-2024-49124 CVE-2024-49123 ...+63 more CVE
  • The Hacker News
CrowdStrike Warns of Phishing Scam Targeting Job Seekers with XMRig Cryptominer

Cybersecurity company CrowdStrike is alerting of a phishing campaign that exploits its own branding to distribute a cryptocurrency miner that's disguised as an employee CRM application as part of a su ... Read more

Published Date: Jan 10, 2025 (1 week ago)
CVE-2024-49113 CVE-2024-49112
  • Help Net Security
January 2025 Patch Tuesday forecast: Changes coming in cybersecurity guidance

Welcome to 2025 and a new year of patch excitement! In my December article, I talked about Microsoft’s Secure Future Initiative (SFI) and how it manifested in many of the Microsoft products released i ... Read more

Published Date: Jan 10, 2025 (1 week ago)
CVE-2025-0282 CVE-2024-49138 CVE-2024-49113 CVE-2024-49112
  • The Register
Security pros baited with fake Windows LDAP exploit traps

Security researchers are once again being lured into traps by attackers, this time with fake exploits of serious Microsoft security flaws. Trend Micro spotted what appears to be a fork of the legitima ... Read more

Published Date: Jan 09, 2025 (1 week, 1 day ago)
CVE-2024-49113 CVE-2024-49112
  • Trend Micro
Information Stealer Masquerades as LDAPNightmare (CVE-2024-49113) PoC Exploit

In December 2024, two critical vulnerabilities in Microsoft's Windows Lightweight Directory Access Protocol (LDAP) were addressed via Microsoft’s monthly Patch Tuesday release. Both vulnerabilities we ... Read more

Published Date: Jan 09, 2025 (1 week, 2 days ago)
CVE-2024-49113 CVE-2024-49112
  • The Hacker News
⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [6 Jan]

Every tap, click, and swipe we make online shapes our digital lives, but it also opens doors—some we never meant to unlock. Extensions we trust, assistants we rely on, and even the codes we scan are t ... Read more

Published Date: Jan 06, 2025 (1 week, 4 days ago)
CVE-2024-12583 CVE-2024-55078 CVE-2024-56249 CVE-2024-13062 CVE-2024-12912 CVE-2024-56198 CVE-2024-56045 CVE-2024-56044 CVE-2024-56043 CVE-2024-56040 ...+8 more CVE
  • TheCyberThrone
TheCyberThrone Security Weekly Review – January 04, 2025

Welcome to TheCyberThrone cybersecurity week in review will be posted covering the important security happenings. This review is for the week ending Saturday, January 04, 2025.CVE-2024-56512 impacts A ... Read more

Published Date: Jan 05, 2025 (1 week, 5 days ago)
CVE-2024-11944 CVE-2024-56512 CVE-2024-45387 CVE-2024-49113 CVE-2024-49112 CVE-2024-21182
  • TheCyberThrone
CVE-2024-11944: TrueNAS CORE has Severe Directory Traversal Flaw

CVE-2024-11944 is a vulnerability identified in iXsystems TrueNAS CORE. This vulnerability is classified as a Directory Traversal and Remote Code Execution (RCE) flaw. The exploitation of this vulnera ... Read more

Published Date: Jan 04, 2025 (1 week, 6 days ago)
CVE-2024-12108 CVE-2024-11944 CVE-2024-49113 CVE-2024-49112 CVE-2024-21182
  • Trend Micro
What We Know About CVE-2024-49112 and CVE-2024-49113

In December 2024, two Windows Lightweight Directory Access Protocol (LDAP) vulnerabilities were identified by independent security researcher Yuki Chen: CVE-2024-49112, a remote code execution (RCE) f ... Read more

Published Date: Jan 04, 2025 (2 weeks ago)
CVE-2024-49113 CVE-2024-49112
  • TheCyberThrone
CVE-2024-49113: PoC Exploit Code Released

The CVE-2024-49113 vulnerability is a significant Denial of Service (DoS) issue found in the Windows Lightweight Directory Access Protocol (LDAP). SafeBreach Labs developed the exploit code, which has ... Read more

Published Date: Jan 03, 2025 (2 weeks ago)
CVE-2024-12108 CVE-2024-12987 CVE-2024-49113 CVE-2024-49112 CVE-2024-21182
  • The Hacker News
LDAPNightmare PoC Exploit Crashes LSASS and Reboots Windows Domain Controllers

Windows Server / Threat Mitigation A proof-of-concept (PoC) exploit has been released for a now-patched security flaw impacting Windows Lightweight Directory Access Protocol (LDAP) that could trigger ... Read more

Published Date: Jan 03, 2025 (2 weeks ago)
CVE-2024-49113 CVE-2024-49112
  • Dark Reading
Unpatched Active Directory Flaw Can Crash Any Microsoft Server

Source: Andriy Popov via Alamy Stock PhotoOne of two critical Active Directory Domain Controller vulnerabilities patched by Microsoft last month goes beyond the original denial-of-service (DoS) attack ... Read more

Published Date: Jan 02, 2025 (2 weeks, 1 day ago)
CVE-2024-49113 CVE-2024-49112
  • TheCyberThrone
CVE-2024-12108: Progress WhatsUp Gold Vulnerability

CVE-2024-12108 with a CVSS score of 9.6 is a critical security vulnerability affecting WhatsUp Gold, a network monitoring software developed by Progress Software Corporation.Affected VersionsThe vulne ... Read more

Published Date: Jan 02, 2025 (2 weeks, 1 day ago)
CVE-2024-12108 CVE-2024-12987 CVE-2024-49112 CVE-2024-21182
  • TheCyberThrone
CVE-2024-49112 POC Code Released

The CVE-2024-49112 vulnerability, identified as LDAPNightmare, has seen the release of a Proof-of-Concept (PoC) code by SafeBreach Labs. This particular security flaw is critical as it affects the Win ... Read more

Published Date: Jan 02, 2025 (2 weeks, 1 day ago)
CVE-2024-12987 CVE-2024-49112 CVE-2024-21182
  • Cybersecurity News
Starlink V3 Satellites Promise Blazing Fast Internet Speeds

Starlink recently announced on its official X account that it will soon launch the V3 satellites, which are expected to significantly enhance its satellite internet service by increasing bandwidth and ... Read more

Published Date: Jan 02, 2025 (2 weeks, 1 day ago)
CVE-2024-49112 CVE-2024-20419
  • Cybersecurity News
PoC Exploit Released for Zero-Click Vulnerability CVE-2024-49112 in Windows

SafeBreach Labs revealed a zero-click vulnerability in the Windows Lightweight Directory Access Protocol (LDAP) service, dubbed “LDAP Nightmare”. This critical vulnerability, tracked as CVE-2024-49112 ... Read more

Published Date: Jan 02, 2025 (2 weeks, 2 days ago)
CVE-2024-12108 CVE-2024-49112
  • TheCyberThrone
TheCyberThrone Security Biweekly Review – December 28, 2024

Welcome to TheCyberThrone cybersecurity week in review will be posted covering the important security happenings. This review is for the biweekly ending Saturday, December 28, 2024.Indian users are ta ... Read more

Published Date: Dec 30, 2024 (2 weeks, 5 days ago)
CVE-2024-3393 CVE-2024-54677 CVE-2024-50379 CVE-2024-49112 CVE-2024-30085
  • Cybersecurity News
CVE-2024-45387: PoC Published for Critical SQL Injection in Apache Traffic Control

Security researcher Abdelrhman Zayed, in collaboration with Mohamed Abdelhady, has published proof-of-concept (PoC) exploit code for CVE-2024-45387, a critical SQL injection vulnerability in Apache Tr ... Read more

Published Date: Dec 30, 2024 (2 weeks, 5 days ago)
CVE-2024-45387 CVE-2024-23945 CVE-2024-49112 CVE-2024-52335 CVE-2024-42327 CVE-2024-3584 CVE-2024-23832
  • TheCyberThrone
Microsoft Patch Tuesday Year 2024 Analysis

In 2024, Microsoft’s Patch Tuesday updates played a critical role in addressing security vulnerabilities across various platforms. Throughout the year, a total of 1,000+ vulnerabilities were patched, ... Read more

Published Date: Dec 25, 2024 (3 weeks, 2 days ago)
CVE-2024-54677 CVE-2024-50379 CVE-2024-49138 CVE-2024-49126 CVE-2024-49117 CVE-2024-49116 CVE-2024-49112 CVE-2024-49040 CVE-2024-49039 CVE-2024-49019 ...+64 more CVE
  • TheCyberThrone
CISA adds Acclaim Flaw CVE-2021-44207 to KEV Catalog

The US CISA has added new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitationCVE-2021-44207: Acclaim Systems USAHERDS Use of Hard-Coded Credentials V ... Read more

Published Date: Dec 23, 2024 (3 weeks, 4 days ago)
CVE-2024-54677 CVE-2024-50379 CVE-2024-49112 CVE-2021-44207
  • TheCyberThrone
BeyondTrust SaaS Breach  Comprehensive Breakdown

Incident DiscoveryOn December 2, 2024, BeyondTrust identified a significant security breach during a forensics investigation. This discovery set off a series of urgent actions to mitigate the impact a ... Read more

Published Date: Dec 23, 2024 (3 weeks, 4 days ago)
CVE-2024-49194 CVE-2024-54677 CVE-2024-50379 CVE-2024-12356 CVE-2024-49112
  • Cybersecurity News
CVE-2024-56337: Apache Tomcat Patches Critical RCE Vulnerability

The Apache Software Foundation recently released a critical security update to address a remote code execution (RCE) vulnerability in Apache Tomcat, identified as CVE-2024-56337. This vulnerability af ... Read more

Published Date: Dec 23, 2024 (3 weeks, 5 days ago)
CVE-2024-56337 CVE-2024-54677 CVE-2024-50379 CVE-2024-49112 CVE-2024-52335 CVE-2024-42327 CVE-2024-8811 CVE-2024-47855 CVE-2023-45648 CVE-2023-42795 ...+1 more CVE
  • TheCyberThrone
Foxit Vulnerability fixes Twin flaws in PDF Reader

Foxit Software recently released an essential security update for its Foxit PDF Reader and Foxit PDF Editor applications to address multiple critical vulnerabilities. These flaws included remote code ... Read more

Published Date: Dec 22, 2024 (3 weeks, 5 days ago)
CVE-2024-49576 CVE-2024-47810 CVE-2024-49194 CVE-2024-49112
  • TheCyberThrone
Most Exploited Vulnerabilities in 2024 Top 20 Analysis

In 2024, the cybersecurity landscape saw a significant number of exploited vulnerabilities, highlighting the ongoing challenges organizations face in protecting their systems and data.Some key trends ... Read more

Published Date: Dec 22, 2024 (3 weeks, 5 days ago)
CVE-2024-49194 CVE-2024-49138 CVE-2024-49112 CVE-2024-42448 CVE-2024-11667 CVE-2024-9474 CVE-2024-0012 CVE-2024-38112 CVE-2024-20399 CVE-2024-37085 ...+12 more CVE
  • TheCyberThrone
Sophos fixes Triple Critical Vulnerabilities in its Firewall

Sophos released patches for three critical security vulnerabilities in their widely-used network security tool, Sophos Firewall that posed significant risks, including remote code execution and privil ... Read more

Published Date: Dec 20, 2024 (4 weeks ago)
CVE-2024-12729 CVE-2024-12728 CVE-2024-12727 CVE-2023-34990 CVE-2024-54677 CVE-2024-50379 CVE-2024-49112 CVE-2024-53677 CVE-2023-42118 CVE-2022-3236 ...+1 more CVE
  • CrowdStrike.com
December 2024 Patch Tuesday: 16 Critical and One Zero-Day Among 71 Vulnerabilities

Microsoft has released security updates for 71 vulnerabilities in its December 2024 Patch Tuesday rollout. Among these are 16 Critical vulnerabilities and one zero-day affecting the Windows Common Log ... Read more

Published Date: Dec 19, 2024 (4 weeks, 1 day ago)
CVE-2024-49138 CVE-2024-49132 CVE-2024-49128 CVE-2024-49127 CVE-2024-49126 CVE-2024-49124 CVE-2024-49123 CVE-2024-49122 CVE-2024-49120 CVE-2024-49119 ...+7 more CVE
  • TheCyberThrone
Fortinet fixes several vulnerabilities including CVE-2023-34990

Fortinet has released patches for vulnerabilities affecting its popular products, including FortiClient VPN, FortiManager, and FortiWLM. These flaws range from password exposure to remote code executi ... Read more

Published Date: Dec 19, 2024 (4 weeks, 1 day ago)
CVE-2024-50570 CVE-2024-48889 CVE-2023-34990 CVE-2024-54677 CVE-2024-50379 CVE-2024-49112 CVE-2024-53677 CVE-2024-47575
  • CrowdStrike.com
December 2024 Patch Tuesday: 16 Critical and One Zero-Day Among 71 Vulnerabilities

Microsoft has released security updates for 71 vulnerabilities in its December 2024 Patch Tuesday rollout. Among these are 16 Critical vulnerabilities and one zero-day affecting the Windows Common Log ... Read more

Published Date: Dec 19, 2024 (4 weeks, 1 day ago)
CVE-2024-49138 CVE-2024-49132 CVE-2024-49128 CVE-2024-49127 CVE-2024-49126 CVE-2024-49124 CVE-2024-49123 CVE-2024-49122 CVE-2024-49120 CVE-2024-49119 ...+7 more CVE
  • CrowdStrike.com
December 2024 Patch Tuesday: 16 Critical and One Zero-Day Among 71 Vulnerabilities

Microsoft has released security updates for 71 vulnerabilities in its December 2024 Patch Tuesday rollout. Among these are 16 Critical vulnerabilities and one zero-day affecting the Windows Common Log ... Read more

Published Date: Dec 19, 2024 (4 weeks, 1 day ago)
CVE-2024-49138 CVE-2024-49132 CVE-2024-49128 CVE-2024-49127 CVE-2024-49126 CVE-2024-49124 CVE-2024-49123 CVE-2024-49122 CVE-2024-49120 CVE-2024-49119 ...+7 more CVE
  • CrowdStrike.com
December 2024 Patch Tuesday: 16 Critical and One Zero-Day Among 71 Vulnerabilities

Microsoft has released security updates for 71 vulnerabilities in its December 2024 Patch Tuesday rollout. Among these are 16 Critical vulnerabilities and one zero-day affecting the Windows Common Log ... Read more

Published Date: Dec 19, 2024 (4 weeks, 1 day ago)
CVE-2024-49138 CVE-2024-49132 CVE-2024-49128 CVE-2024-49127 CVE-2024-49126 CVE-2024-49124 CVE-2024-49123 CVE-2024-49122 CVE-2024-49120 CVE-2024-49119 ...+7 more CVE
  • CrowdStrike.com
December 2024 Patch Tuesday: 16 Critical and One Zero-Day Among 71 Vulnerabilities

Microsoft has released security updates for 71 vulnerabilities in its December 2024 Patch Tuesday rollout. Among these are 16 Critical vulnerabilities and one zero-day affecting the Windows Common Log ... Read more

Published Date: Dec 19, 2024 (4 weeks, 1 day ago)
CVE-2024-49138 CVE-2024-49132 CVE-2024-49128 CVE-2024-49127 CVE-2024-49126 CVE-2024-49124 CVE-2024-49123 CVE-2024-49122 CVE-2024-49120 CVE-2024-49119 ...+7 more CVE
  • CrowdStrike.com
December 2024 Patch Tuesday: 16 Critical and One Zero-Day Among 71 Vulnerabilities

Microsoft has released security updates for 71 vulnerabilities in its December 2024 Patch Tuesday rollout. Among these are 16 Critical vulnerabilities and one zero-day affecting the Windows Common Log ... Read more

Published Date: Dec 19, 2024 (4 weeks, 1 day ago)
CVE-2024-49138 CVE-2024-49132 CVE-2024-49128 CVE-2024-49127 CVE-2024-49126 CVE-2024-49124 CVE-2024-49123 CVE-2024-49122 CVE-2024-49120 CVE-2024-49119 ...+7 more CVE
  • CrowdStrike.com
December 2024 Patch Tuesday: 16 Critical and One Zero-Day Among 71 Vulnerabilities

Microsoft has released security updates for 71 vulnerabilities in its December 2024 Patch Tuesday rollout. Among these are 16 Critical vulnerabilities and one zero-day affecting the Windows Common Log ... Read more

Published Date: Dec 19, 2024 (4 weeks, 1 day ago)
CVE-2024-49138 CVE-2024-49132 CVE-2024-49128 CVE-2024-49127 CVE-2024-49126 CVE-2024-49124 CVE-2024-49123 CVE-2024-49122 CVE-2024-49120 CVE-2024-49119 ...+7 more CVE
  • TheCyberThrone
Clop ransomware exploits Cleo Vulnerability in its attacks

The Clop ransomware gang has recently claimed responsibility for a series of sophisticated data theft attacks targeting Cleo, a prominent provider of managed file transfer software. These attacks expl ... Read more

Published Date: Dec 17, 2024 (1 month ago)
CVE-2024-54677 CVE-2024-50379 CVE-2024-49112 CVE-2024-53677 CVE-2024-50623 CVE-2023-0669
  • TheCyberThrone
TheCyberThrone Security BiWeekly Review – December 14, 2024

Welcome to TheCyberThrone cybersecurity week in review will be posted covering the important security happenings. This review is for the weeks ending Saturday, November 30, 2024.Jenkins fixes multiple ... Read more

Published Date: Dec 15, 2024 (1 month ago)
CVE-2024-54677 CVE-2024-50379 CVE-2024-49112 CVE-2024-53677 CVE-2024-52338 CVE-2024-54004 CVE-2024-54003 CVE-2024-42327 CVE-2024-47855 CVE-2024-38193 ...+1 more CVE
  • TheCyberThrone
CISA adds Cleo Vulnerability CVE-2024-50623 to KEV Catalog

The US CISA adds Cleo vulnerability to its Known Exploited Vulnerabilities Catalog based on the evidence of active exploitation reported.Security vendor Huntress was the first to publicize the attacks ... Read more

Published Date: Dec 14, 2024 (1 month ago)
CVE-2024-54677 CVE-2024-50379 CVE-2024-8233 CVE-2024-11274 CVE-2024-49112 CVE-2024-53677 CVE-2024-50623
  • TheCyberThrone
Gitlab fixes CVE-2024-11274 and CVE-2024-8233

GitLab has released a crucial security update to address multiple vulnerabilities impacting various versions of its platform. This update, applicable to versions 17.6.2, 17.5.4, and 17.4.6 for both Co ... Read more

Published Date: Dec 13, 2024 (1 month ago)
CVE-2024-54677 CVE-2024-50379 CVE-2024-8233 CVE-2024-11274 CVE-2024-49112 CVE-2024-53677 CVE-2024-50623
  • TheCyberThrone
Apache Struts was affected by CVE-2024-53677

Apache Struts framework has been detected with a critical vulnerability that could allow attackers to execute malicious code remotely, posing a significant risk to affected systems.The vulnerability t ... Read more

Published Date: Dec 13, 2024 (1 month ago)
CVE-2024-54677 CVE-2024-50379 CVE-2024-8233 CVE-2024-11274 CVE-2024-49112 CVE-2024-53677
  • TheCyberThrone
Splunk addresses CVE-2024-53247 in Secure Gateway

A critical vulnerability identified has been discovered in the Splunk Secure Gateway app, affecting various versions of Splunk Enterprise and the Splunk Cloud Platform.The vulnerability tracked as CVE ... Read more

Published Date: Dec 12, 2024 (1 month ago)
CVE-2024-54677 CVE-2024-50379 CVE-2024-49112 CVE-2024-53677 CVE-2024-53247
  • TheCyberThrone
AuthQuake vulnerability with Microsoft to Bypass MFA

Cybersecurity researchers at Oasis Security have discovered a significant vulnerability in Microsoft’s Multi-Factor Authentication (MFA) system, which they have named AuthQuake.This vulnerability allo ... Read more

Published Date: Dec 12, 2024 (1 month ago)
CVE-2024-54677 CVE-2024-50379 CVE-2024-49112 CVE-2024-53677 CVE-2024-43532
  • TheCyberThrone
Apache Superset 4.1.0 released with bug fixes

The Apache Software Foundation has announced the release of Apache Superset 4.1.0 with several bug fixes that could potentially allow attackers to bypass security controls, access sensitive data, and ... Read more

Published Date: Dec 11, 2024 (1 month ago)
CVE-2024-54677 CVE-2024-50379 CVE-2024-49112 CVE-2024-53677 CVE-2024-53949 CVE-2024-53948 CVE-2024-53947
  • TheCyberThrone
Google fixes important vulnerabilities with the latest Google Chrome

Google has released updates for its Chrome browser, addressing several security vulnerabilities, including two important vulnerabilities.The first vulnerability tracked as CVE-2024-12381 with a CVSSv3 ... Read more

Published Date: Dec 11, 2024 (1 month ago)
CVE-2024-54677 CVE-2024-50379 CVE-2024-49138 CVE-2024-49112 CVE-2024-12382 CVE-2024-12381 CVE-2024-53677
  • security.nl
Windows LDAP-kwetsbaarheden maken remote code execution mogelijk

Verschillende kritieke kwetsbaarheden in het Windows Lightweight Directory Access Protocol (LDAP) maken remote code execution door ongeauthenticeerde aanvallers mogelijk, zo waarschuwt Microsoft, dat ... Read more

Published Date: Dec 11, 2024 (1 month ago)
CVE-2024-49127 CVE-2024-49124 CVE-2024-49112
  • TheCyberThrone
CISA adds CVE-2024-49138 to its KEV Catalog

The US CISA adds Microsoft vulnerability to its Known Exploited Vulnerabilities Catalog based on the evidence of active exploitation.The vulnerability tracked as CVE-2024-49138 with a CVSS score of 7. ... Read more

Published Date: Dec 11, 2024 (1 month ago)
CVE-2024-54677 CVE-2024-50379 CVE-2024-49138 CVE-2024-49112 CVE-2024-53677
  • The Hacker News
Microsoft Fixes 72 Flaws, Including Patch for Actively Exploited CLFS Vulnerability

Microsoft closed out its Patch Tuesday updates for 2024 with fixes for a total of 72 security flaws spanning its software portfolio, including one that it said has been exploited in the wild. Of the 7 ... Read more

Published Date: Dec 11, 2024 (1 month ago)
CVE-2024-49138 CVE-2024-49117 CVE-2024-49112 CVE-2024-49105 CVE-2024-49063 CVE-2024-38030 CVE-2023-28252 CVE-2023-23376 CVE-2022-37969 CVE-2022-24521
  • krebsonsecurity.com
Patch Tuesday, December 2024 Edition

Microsoft today released updates to plug at least 70 security holes in Windows and Windows software, including one vulnerability that is already being exploited in active attacks. The zero-day seeing ... Read more

Published Date: Dec 11, 2024 (1 month, 1 week ago)
CVE-2024-49138 CVE-2024-49112
  • Cybersecurity News
Microsoft Addresses Critical Zero-Day CVE-2024-49138 & 72 Additional Flaws in December Patch Tuesday

Microsoft has released its December 2024 Patch Tuesday security update, addressing a total of 73 vulnerabilities across its product portfolio. This comprehensive update includes fixes for 16 critical ... Read more

Published Date: Dec 11, 2024 (1 month, 1 week ago)
CVE-2024-49138 CVE-2024-49132 CVE-2024-49128 CVE-2024-49127 CVE-2024-49126 CVE-2024-49124 CVE-2024-49123 CVE-2024-49122 CVE-2024-49120 CVE-2024-49119 ...+11 more CVE
  • Dark Reading
Actively Exploited Zero-Day, Critical RCEs Lead Microsoft Patch Tuesday

Source: Zoonar GmbH via Alamy Stock PhotoA Windows zero-day security vulnerability under active exploit leads Microsoft's December 2024 Patch Tuesday security update, which hardly constitutes a sleigh ... Read more

Published Date: Dec 10, 2024 (1 month, 1 week ago)
CVE-2024-49138 CVE-2024-49132 CVE-2024-49128 CVE-2024-49123 CVE-2024-49120 CVE-2024-49119 CVE-2024-49117 CVE-2024-49116 CVE-2024-49115 CVE-2024-49112 ...+4 more CVE
  • Help Net Security
Microsoft fixes exploited zero-day (CVE-2024-49138)

On December 2024 Patch Tuesday, Microsoft resolved 71 vulnerabilities in a variety of its products, including a zero-day (CVE-2024-49138) that’s been exploited by attackers in the wild to execute code ... Read more

Published Date: Dec 10, 2024 (1 month, 1 week ago)
CVE-2024-12356 CVE-2024-49138 CVE-2024-49114 CVE-2024-49112 CVE-2024-49093 CVE-2023-28252
  • The Register
Microsoft holds last Patch Tuesday of the year with 72 gifts for admins

Patch Tuesday Microsoft hasn't added too much coal to the stocking this Patch Tuesday, with just 72 fixes, only one of which scored more than nine on the CVSS threat ranking scale. Of more immediate c ... Read more

Published Date: Dec 10, 2024 (1 month, 1 week ago)
CVE-2024-49138 CVE-2024-49122 CVE-2024-49114 CVE-2024-49112 CVE-2024-49093 CVE-2024-49090 CVE-2024-49088 CVE-2024-49070
  • tripwire.com
VERT Threat Alert: December 2024 Patch Tuesday Analysis

Today’s VERT Alert addresses Microsoft’s December 2024 Security Updates. VERT is actively working on coverage for these vulnerabilities and expects to ship ASPL-1136 as soon as coverage is completed.I ... Read more

Published Date: Dec 10, 2024 (1 month, 1 week ago)
CVE-2024-49142 CVE-2024-49138 CVE-2024-49132 CVE-2024-49129 CVE-2024-49128 CVE-2024-49127 CVE-2024-49126 CVE-2024-49125 CVE-2024-49124 CVE-2024-49123 ...+62 more CVE
  • BleepingComputer
Microsoft December 2024 Patch Tuesday fixes 1 exploited zero-day, 71 flaws

Today is Microsoft's December 2024 Patch Tuesday, which includes security updates for 71 flaws, including one actively exploited zero-day vulnerability.This Patch Tuesday fixed sixteen critical vulner ... Read more

Published Date: Dec 10, 2024 (1 month, 1 week ago)
CVE-2024-49142 CVE-2024-49138 CVE-2024-49132 CVE-2024-49129 CVE-2024-49128 CVE-2024-49127 CVE-2024-49126 CVE-2024-49125 CVE-2024-49124 CVE-2024-49123 ...+62 more CVE
  • TheCyberThrone
Exploit Code Released for Microsoft CVE-2024-38193

A critical use-after-free vulnerability, tracked as CVE-2024-38193 with a CVSS score of 7.8, has been discovered in the afd.sys Windows driver that allows attackers to escalate privileges and execute ... Read more

Published Date: Dec 09, 2024 (1 month, 1 week ago)
CVE-2024-54677 CVE-2024-50379 CVE-2024-49112 CVE-2024-53677 CVE-2024-53908 CVE-2024-53907 CVE-2024-38193
  • TheCyberThrone
Django was affected by CVE-2024-53907 and CVE-2024-53908

The Django team has released Django 5.1.4, Django 5.0.10, and Django 4.2.17 versions to address two security vulnerabilities.The first vulnerability tracked as CVE-2024-53907 with a CVSS score of 7.5 ... Read more

Published Date: Dec 08, 2024 (1 month, 1 week ago)
CVE-2024-54677 CVE-2024-50379 CVE-2024-49112 CVE-2024-53677 CVE-2024-53908 CVE-2024-53907 CVE-2024-38193
  • TheCyberThrone
SonicWall addressed half a dozen vulnerabilities in SMA 100 series

SonicWall has released patches for several (six) vulnerabilities impacting its SMA 100 series SSL-VPN products. These flaws range from path traversal issues inherited from the Apache HTTP Server to cr ... Read more

Published Date: Dec 07, 2024 (1 month, 1 week ago)
CVE-2024-54677 CVE-2024-50379 CVE-2024-49112 CVE-2024-53677 CVE-2024-53703 CVE-2024-53702 CVE-2024-45319 CVE-2024-45318 CVE-2024-40763 CVE-2024-38475
  • TheCyberThrone
SailPoint IdentityIQ affected by CVE-2024-10905

SailPoint IdentityIQ has been affected by a critical vulnerability, that could allow sensitive data exposureThe vulnerability tracked as CVE-2024-10905 with a CVSS score of 10.0, stems from improper a ... Read more

Published Date: Dec 05, 2024 (1 month, 1 week ago)
CVE-2024-54677 CVE-2024-50379 CVE-2024-49112 CVE-2024-53677 CVE-2024-10905 CVE-2024-51378
  • TheCyberThrone
CISA Adds CyberPanel Flaw CVE-2024-51378 to KEV Catalog

The CISA has warned about a critical vulnerability in CyberPanel tracked as CVE-2024-51378, is being actively exploited by attackers to deploy ransomware and added to the known exploited vulnerability ... Read more

Published Date: Dec 05, 2024 (1 month, 1 week ago)
CVE-2024-54677 CVE-2024-50379 CVE-2024-49112 CVE-2024-53677 CVE-2024-8785 CVE-2024-10905 CVE-2024-51378
  • TheCyberThrone
POC Exploit released for WhatsUp Gold CVE-2024-8785

Security researchers have published a proof-of-concept (PoC) exploit for CVE-2024-8785 with a CVSS score of 9.8, a critical remote code execution vulnerability affecting Progress WhatsUp Gold,A critic ... Read more

Published Date: Dec 05, 2024 (1 month, 1 week ago)
CVE-2024-54677 CVE-2024-50379 CVE-2024-49112 CVE-2024-53677 CVE-2024-12053 CVE-2024-8785 CVE-2024-51378
  • TheCyberThrone
Google Patches CVE-2024-12053 in Chrome

Google has released patches for a high severity vulnerability in its popular  Chrome web browser residing within the V8 JavaScript engine and allow attackers to execute arbitrary code on users’ system ... Read more

Published Date: Dec 04, 2024 (1 month, 1 week ago)
CVE-2024-54677 CVE-2024-50379 CVE-2024-49112 CVE-2024-42448 CVE-2024-53677 CVE-2024-12053 CVE-2024-8785
  • TheCyberThrone
CISA KEV Catalog Update Part I – December 2024

The US CISA has added the below vulnerabilities to its Known Exploited Vulnerabilities Catalog based on the evidence of active exploitation.CVE-2023-45727 Tracked as CWE-611, North Grid Proself Enterp ... Read more

Published Date: Dec 04, 2024 (1 month, 2 weeks ago)
CVE-2024-54677 CVE-2024-50379 CVE-2024-49112 CVE-2024-42448 CVE-2024-53677 CVE-2024-11667 CVE-2024-11680 CVE-2023-45727
  • TheCyberThrone
IBM fixes multiple vulnerabilities including CVE-2024-49803

IBM has  released patches for multiple vulnerabilities, that could lead to a remote code execution to hard-coded credentials and privilege escalation that potentially compromising sensitive data and d ... Read more

Published Date: Dec 03, 2024 (1 month, 2 weeks ago)
CVE-2024-54677 CVE-2024-50379 CVE-2024-49112 CVE-2024-53677 CVE-2024-49806 CVE-2024-49805 CVE-2024-49804 CVE-2024-49803

The following table lists the changes that have been made to the CVE-2024-49112 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • Initial Analysis by [email protected]

    Jan. 14, 2025

    Action Type Old Value New Value
    Added CWE NIST NVD-CWE-noinfo
    Added CPE Configuration OR *cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:* versions up to (excluding) 10.0.10240.20857 *cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:* versions up to (excluding) 10.0.10240.20857 *cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:* versions up to (excluding) 10.0.14393.7606 *cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:* versions up to (excluding) 10.0.14393.7606 *cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:* versions up to (excluding) 10.0.17763.6659 *cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:* versions up to (excluding) 10.0.17763.6659 *cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:* versions up to (excluding) 10.0.19044.5247 *cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:* versions up to (excluding) 10.0.19045.5247 *cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:* versions up to (excluding) 10.0.22621.4602 *cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:* versions up to (excluding) 10.0.26100.2605 *cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:* *cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:* *cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:* *cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:* *cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:* versions up to (excluding) 10.0.14393.7606 *cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:* versions up to (excluding) 10.0.17763.6659 *cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:* versions up to (excluding) 10.0.20348.2966 *cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:* versions up to (excluding) 10.0.25398.1308 *cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:* versions up to (excluding) 10.0.26100.2605
    Changed Reference Type https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49112 No Types Assigned https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49112 Vendor Advisory
  • New CVE Received by [email protected]

    Dec. 12, 2024

    Action Type Old Value New Value
    Added Description Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
    Added CVSS V3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    Added CWE CWE-190
    Added Reference https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49112
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2024-49112 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2024-49112 weaknesses.

CVSS31 - Vulnerability Scoring System
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
: