CVE-2024-21435
HIGHDescription
Windows OLE Remote Code Execution Vulnerability
Is your site exposed to CVE-2024-21435?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| microsoft | windows_11_22h2 |
| microsoft | windows_11_22h2 |
| microsoft | windows_11_23h2 |
| microsoft | windows_11_23h2 |
References
Frequently Asked Questions
What is CVE-2024-21435? +
How severe is CVE-2024-21435? +
What products are affected by CVE-2024-21435? +
How do I check if I'm vulnerable to CVE-2024-21435? +
Related Vulnerabilities
Ghostscript for Windows is vulnerable to local privilege escalation through PostScript resource file hijacking. Due to the application searching for …
In Google fuse-archive versions prior to 1.24, an attacker who can prepend a directory to PATH or write a malicious …
An untrusted search path vulnerability in Plesk from 18.0.34 before 18.0.80.8 and 18.0.81 before 18.0.81.1 allows remote authenticated users to …
Library loading on AIX Zabbix Agent builds can be hijacked by local users with write access to the /home/cecuser directory.
Potential privilege escalation issue in Revenera InstallShield version 2023 R1 running a renamed Setup.exe on Windows. When a local administrator …
There is a defect in the CPython standard library module “mimetypes” where on Windows the default list of known file …