{"uuid": "0d4a122e-603a-4f82-9a3e-3bd2e104d9cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-49138", "type": "exploited", "source": "https://t.me/cibsecurity/81546", "content": "\ud83e\udd85 CISA Adds CVE-2024-49138 to the Known Exploited Vulnerabilities Catalog, Urgency for Microsoft Users \ud83e\udd85\n\n  Overview     The Cybersecurity and Infrastructure Security Agency CISA added a critical vulnerability, CVE202449138, to its Known Exploited Vulnerabilities KEV catalog based on evidence that this flaw is being actively exploited. The vulnerability, identified in the Microsoft Windows Common Log File System CLFS, is a heapbased buffer overflow issue that has the potential to allow attackers to escalate privileges on vulnerable systems. As part of Microsofts Patch Tuesday release, this flaw was patched alongside other critical vulnerabilities.   CVE202449138 is a heapbased buffer overflow vulnerability in the CLFS driver. This driver is used by both usermode and kernelmode software in Windows for generalpurpose logging. This vulnerability affects several versions of Microsoft Windows op...\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"CYBLE\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "creation_timestamp": "2024-12-11T14:17:35.000000Z"}