cvelistv5 - CVE-2024-49124

CVE-2024-49124

Vulnerability from cvelistv5

Published

2024-12-10 17:49

Modified

2025-03-11 16:44

Severity ?

8.1 (High) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

EPSS score ?

0.05% (0.20354)

Summary

Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability

References

▼	URL	Tags
	secure@microsoft.com	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49124	Vendor Advisory

Impacted products

Vendor

Product

Version

▼

Microsoft

Windows 10 Version 1809

Version: 10.0.17763.0 < 10.0.17763.6659

Microsoft	Windows Server 2019	Version: 10.0.17763.0 < 10.0.17763.6659
Microsoft	Windows Server 2019 (Server Core installation)	Version: 10.0.17763.0 < 10.0.17763.6659
Microsoft	Windows Server 2022	Version: 10.0.20348.0 < 10.0.20348.2966
Microsoft	Windows 10 Version 21H2	Version: 10.0.19043.0 < 10.0.19044.5247
Microsoft	Windows 11 version 22H2	Version: 10.0.22621.0 < 10.0.22621.4602
Microsoft	Windows 10 Version 22H2	Version: 10.0.19045.0 < 10.0.19045.5247
Microsoft	Windows Server 2025 (Server Core installation)	Version: 10.0.26100.0 < 10.0.26100.2605
Microsoft	Windows 11 version 22H3	Version: 10.0.22631.0 < 10.0.22631.4602
Microsoft	Windows 11 Version 23H2	Version: 10.0.22631.0 < 10.0.22631.4602
Microsoft	Windows Server 2022, 23H2 Edition (Server Core installation)	Version: 10.0.25398.0 < 10.0.25398.1308
Microsoft	Windows 11 Version 24H2	Version: 10.0.26100.0 < 10.0.26100.2605
Microsoft	Windows Server 2025	Version: 10.0.26100.0 < 10.0.26100.2605
Microsoft	Windows 10 Version 1507	Version: 10.0.10240.0 < 10.0.10240.20857
Microsoft	Windows 10 Version 1607	Version: 10.0.14393.0 < 10.0.14393.7606
Microsoft	Windows Server 2016	Version: 10.0.14393.0 < 10.0.14393.7606
Microsoft	Windows Server 2016 (Server Core installation)	Version: 10.0.14393.0 < 10.0.14393.7606
Microsoft	Windows Server 2008 Service Pack 2	Version: 6.0.6003.0 < 6.0.6003.23016
Microsoft	Windows Server 2008 Service Pack 2 (Server Core installation)	Version: 6.0.6003.0 < 6.0.6003.23016
Microsoft	Windows Server 2008 Service Pack 2	Version: 6.0.6003.0 < 6.0.6003.23016
Microsoft	Windows Server 2008 R2 Service Pack 1	Version: 6.1.7601.0 < 6.1.7601.27467
Microsoft	Windows Server 2008 R2 Service Pack 1 (Server Core installation)	Version: 6.1.7601.0 < 6.1.7601.27467
Microsoft	Windows Server 2012	Version: 6.2.9200.0 < 6.2.9200.25222
Microsoft	Windows Server 2012 (Server Core installation)	Version: 6.2.9200.0 < 6.2.9200.25222
Microsoft	Windows Server 2012 R2	Version: 6.3.9600.0 < 6.3.9600.22318
Microsoft	Windows Server 2012 R2 (Server Core installation)	Version: 6.3.9600.0 < 6.3.9600.22318

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-49124",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-12-13T20:53:39.532156Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-12-13T21:26:57.743Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               platforms: [
                  "32-bit Systems",
                  "x64-based Systems",
               ],
               product: "Windows 10 Version 1809",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.17763.6659",
                     status: "affected",
                     version: "10.0.17763.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
               ],
               product: "Windows Server 2019",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.17763.6659",
                     status: "affected",
                     version: "10.0.17763.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
               ],
               product: "Windows Server 2019 (Server Core installation)",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.17763.6659",
                     status: "affected",
                     version: "10.0.17763.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
               ],
               product: "Windows Server 2022",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.20348.2966",
                     status: "affected",
                     version: "10.0.20348.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "32-bit Systems",
                  "ARM64-based Systems",
                  "x64-based Systems",
               ],
               product: "Windows 10 Version 21H2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.19044.5247",
                     status: "affected",
                     version: "10.0.19043.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "ARM64-based Systems",
                  "x64-based Systems",
               ],
               product: "Windows 11 version 22H2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.22621.4602",
                     status: "affected",
                     version: "10.0.22621.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
                  "ARM64-based Systems",
                  "32-bit Systems",
               ],
               product: "Windows 10 Version 22H2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.19045.5247",
                     status: "affected",
                     version: "10.0.19045.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
               ],
               product: "Windows Server 2025 (Server Core installation)",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.26100.2605",
                     status: "affected",
                     version: "10.0.26100.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "ARM64-based Systems",
               ],
               product: "Windows 11 version 22H3",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.22631.4602",
                     status: "affected",
                     version: "10.0.22631.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
               ],
               product: "Windows 11 Version 23H2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.22631.4602",
                     status: "affected",
                     version: "10.0.22631.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
               ],
               product: "Windows Server 2022, 23H2 Edition (Server Core installation)",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.25398.1308",
                     status: "affected",
                     version: "10.0.25398.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "ARM64-based Systems",
                  "x64-based Systems",
               ],
               product: "Windows 11 Version 24H2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.26100.2605",
                     status: "affected",
                     version: "10.0.26100.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
               ],
               product: "Windows Server 2025",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.26100.2605",
                     status: "affected",
                     version: "10.0.26100.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "32-bit Systems",
                  "x64-based Systems",
               ],
               product: "Windows 10 Version 1507",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.10240.20857",
                     status: "affected",
                     version: "10.0.10240.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "32-bit Systems",
                  "x64-based Systems",
               ],
               product: "Windows 10 Version 1607",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.14393.7606",
                     status: "affected",
                     version: "10.0.14393.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
               ],
               product: "Windows Server 2016",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.14393.7606",
                     status: "affected",
                     version: "10.0.14393.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
               ],
               product: "Windows Server 2016 (Server Core installation)",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.14393.7606",
                     status: "affected",
                     version: "10.0.14393.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "32-bit Systems",
               ],
               product: "Windows Server 2008 Service Pack 2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.0.6003.23016",
                     status: "affected",
                     version: "6.0.6003.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "32-bit Systems",
                  "x64-based Systems",
               ],
               product: "Windows Server 2008 Service Pack 2 (Server Core installation)",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.0.6003.23016",
                     status: "affected",
                     version: "6.0.6003.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
               ],
               product: "Windows Server 2008  Service Pack 2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.0.6003.23016",
                     status: "affected",
                     version: "6.0.6003.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
               ],
               product: "Windows Server 2008 R2 Service Pack 1",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.1.7601.27467",
                     status: "affected",
                     version: "6.1.7601.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
               ],
               product: "Windows Server 2008 R2 Service Pack 1 (Server Core installation)",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.1.7601.27467",
                     status: "affected",
                     version: "6.1.7601.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
               ],
               product: "Windows Server 2012",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.2.9200.25222",
                     status: "affected",
                     version: "6.2.9200.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
               ],
               product: "Windows Server 2012 (Server Core installation)",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.2.9200.25222",
                     status: "affected",
                     version: "6.2.9200.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
               ],
               product: "Windows Server 2012 R2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.3.9600.22318",
                     status: "affected",
                     version: "6.3.9600.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
               ],
               product: "Windows Server 2012 R2 (Server Core installation)",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.3.9600.22318",
                     status: "affected",
                     version: "6.3.9600.0",
                     versionType: "custom",
                  },
               ],
            },
         ],
         cpeApplicability: [
            {
               nodes: [
                  {
                     cpeMatch: [
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
                           versionEndExcluding: "10.0.17763.6659",
                           versionStartIncluding: "10.0.17763.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "10.0.17763.6659",
                           versionStartIncluding: "10.0.17763.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "10.0.17763.6659",
                           versionStartIncluding: "10.0.17763.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "10.0.20348.2966",
                           versionStartIncluding: "10.0.20348.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*",
                           versionEndExcluding: "10.0.19044.5247",
                           versionStartIncluding: "10.0.19043.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_11_22H2:*:*:*:*:*:*:arm64:*",
                           versionEndExcluding: "10.0.22621.4602",
                           versionStartIncluding: "10.0.22621.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*",
                           versionEndExcluding: "10.0.19045.5247",
                           versionStartIncluding: "10.0.19045.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "10.0.26100.2605",
                           versionStartIncluding: "10.0.26100.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*",
                           versionEndExcluding: "10.0.22631.4602",
                           versionStartIncluding: "10.0.22631.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*",
                           versionEndExcluding: "10.0.22631.4602",
                           versionStartIncluding: "10.0.22631.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_server_23h2:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "10.0.25398.1308",
                           versionStartIncluding: "10.0.25398.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*",
                           versionEndExcluding: "10.0.26100.2605",
                           versionStartIncluding: "10.0.26100.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "10.0.26100.2605",
                           versionStartIncluding: "10.0.26100.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
                           versionEndExcluding: "10.0.10240.20857",
                           versionStartIncluding: "10.0.10240.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
                           versionEndExcluding: "10.0.14393.7606",
                           versionStartIncluding: "10.0.14393.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "10.0.14393.7606",
                           versionStartIncluding: "10.0.14393.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "10.0.14393.7606",
                           versionStartIncluding: "10.0.14393.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*",
                           versionEndExcluding: "6.0.6003.23016",
                           versionStartIncluding: "6.0.6003.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*",
                           versionEndExcluding: "6.0.6003.23016",
                           versionStartIncluding: "6.0.6003.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x86:*",
                           versionEndExcluding: "6.0.6003.23016",
                           versionStartIncluding: "6.0.6003.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*",
                           versionEndExcluding: "6.1.7601.27467",
                           versionStartIncluding: "6.1.7601.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*",
                           versionEndExcluding: "6.1.7601.27467",
                           versionStartIncluding: "6.1.7601.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*",
                           versionEndExcluding: "6.2.9200.25222",
                           versionStartIncluding: "6.2.9200.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*",
                           versionEndExcluding: "6.2.9200.25222",
                           versionStartIncluding: "6.2.9200.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*",
                           versionEndExcluding: "6.3.9600.22318",
                           versionStartIncluding: "6.3.9600.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*",
                           versionEndExcluding: "6.3.9600.22318",
                           versionStartIncluding: "6.3.9600.0",
                           vulnerable: true,
                        },
                     ],
                     negate: false,
                     operator: "OR",
                  },
               ],
            },
         ],
         datePublic: "2024-12-10T08:00:00.000Z",
         descriptions: [
            {
               lang: "en-US",
               value: "Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  baseScore: 8.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en-US",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-362",
                     description: "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')",
                     lang: "en-US",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-03-11T16:44:24.544Z",
            orgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
            shortName: "microsoft",
         },
         references: [
            {
               name: "Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49124",
            },
         ],
         title: "Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability",
      },
   },
   cveMetadata: {
      assignerOrgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
      assignerShortName: "microsoft",
      cveId: "CVE-2024-49124",
      datePublished: "2024-12-10T17:49:25.530Z",
      dateReserved: "2024-10-11T20:57:49.208Z",
      dateUpdated: "2025-03-11T16:44:24.544Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
   "vulnerability-lookup:meta": {
      nvd: "{\"cve\":{\"id\":\"CVE-2024-49124\",\"sourceIdentifier\":\"secure@microsoft.com\",\"published\":\"2024-12-12T02:04:39.233\",\"lastModified\":\"2025-01-14T17:50:19.017\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability\"},{\"lang\":\"es\",\"value\":\"Vulnerabilidad de ejecución remota de código en el cliente del Protocolo ligero de acceso a directorios (LDAP)\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"secure@microsoft.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":8.1,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.2,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"secure@microsoft.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-362\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*\",\"versionEndExcluding\":\"10.0.10240.20857\",\"matchCriteriaId\":\"10F567C3-3739-4F3D-B9E0-D2725D09CE0D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*\",\"versionEndExcluding\":\"10.0.10240.20857\",\"matchCriteriaId\":\"04D1F48B-C323-4062-B5E1-9700ADBB153C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*\",\"versionEndExcluding\":\"10.0.14393.7606\",\"matchCriteriaId\":\"29B44B5E-3D35-4A5B-A916-6E70923FAB7C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*\",\"versionEndExcluding\":\"10.0.14393.7606\",\"matchCriteriaId\":\"77EAFFB9-3053-4197-B52D-69F4F86C8FBA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*\",\"versionEndExcluding\":\"10.0.17763.6659\",\"matchCriteriaId\":\"5FA7C375-3A7C-4F34-B6E7-82C187B4F7AF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*\",\"versionEndExcluding\":\"10.0.17763.6659\",\"matchCriteriaId\":\"576F141F-C874-4817-961A-2C4D2AB3DEA4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.19044.5247\",\"matchCriteriaId\":\"F814C24B-FA54-4B97-8387-6EE9AC269178\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.19045.5247\",\"matchCriteriaId\":\"6CF40E59-FC32-4047-8A63-EE0819A32962\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.22621.4602\",\"matchCriteriaId\":\"0C3B0836-B782-4C1A-B0D1-B6111CBC8DED\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.26100.2605\",\"matchCriteriaId\":\"594D3E33-9ADE-47EF-8032-A5EDC948F92B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*\",\"matchCriteriaId\":\"5F422A8C-2C4E-42C8-B420-E0728037E15C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*\",\"matchCriteriaId\":\"AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A7DF96F8-BA6A-4780-9CA3-F719B3F81074\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB18C4CE-5917-401E-ACF7-2747084FD36E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.14393.7606\",\"matchCriteriaId\":\"361D1B8E-6E56-4B5F-85D1-D47114A10A81\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.17763.6659\",\"matchCriteriaId\":\"11517523-F822-45BC-B347-C65F00B45202\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.20348.2966\",\"matchCriteriaId\":\"AECABB2C-DACB-4BBD-8739-DDB00285B0A7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.25398.1308\",\"matchCriteriaId\":\"37977CFB-B259-49B8-B0C5-85ECB40FE429\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.26100.2605\",\"matchCriteriaId\":\"E013EA3C-6F18-4CA4-AF5B-664F869B9A6D\"}]}]}],\"references\":[{\"url\":\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49124\",\"source\":\"secure@microsoft.com\",\"tags\":[\"Vendor Advisory\"]}]}}",
      vulnrichment: {
         containers: "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-49124\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-12-13T20:53:39.532156Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-12-13T20:26:05.863Z\"}}], \"cna\": {\"title\": \"Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability\", \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 8.1, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C\"}, \"scenarios\": [{\"lang\": \"en-US\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Microsoft\", \"product\": \"Windows 10 Version 1809\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.17763.0\", \"lessThan\": \"10.0.17763.6659\", \"versionType\": \"custom\"}], \"platforms\": [\"32-bit Systems\", \"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2019\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.17763.0\", \"lessThan\": \"10.0.17763.6659\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2019 (Server Core installation)\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.17763.0\", \"lessThan\": \"10.0.17763.6659\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2022\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.20348.0\", \"lessThan\": \"10.0.20348.2966\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 10 Version 21H2\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.19043.0\", \"lessThan\": \"10.0.19044.5247\", \"versionType\": \"custom\"}], \"platforms\": [\"32-bit Systems\", \"ARM64-based Systems\", \"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 11 version 22H2\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.22621.0\", \"lessThan\": \"10.0.22621.4602\", \"versionType\": \"custom\"}], \"platforms\": [\"ARM64-based Systems\", \"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 10 Version 22H2\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.19045.0\", \"lessThan\": \"10.0.19045.5247\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\", \"ARM64-based Systems\", \"32-bit Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2025 (Server Core installation)\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.26100.0\", \"lessThan\": \"10.0.26100.2605\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 11 version 22H3\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.22631.0\", \"lessThan\": \"10.0.22631.4602\", \"versionType\": \"custom\"}], \"platforms\": [\"ARM64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 11 Version 23H2\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.22631.0\", \"lessThan\": \"10.0.22631.4602\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2022, 23H2 Edition (Server Core installation)\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.25398.0\", \"lessThan\": \"10.0.25398.1308\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 11 Version 24H2\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.26100.0\", \"lessThan\": \"10.0.26100.2605\", \"versionType\": \"custom\"}], \"platforms\": [\"ARM64-based Systems\", \"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2025\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.26100.0\", \"lessThan\": \"10.0.26100.2605\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 10 Version 1507\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.10240.0\", \"lessThan\": \"10.0.10240.20857\", \"versionType\": \"custom\"}], \"platforms\": [\"32-bit Systems\", \"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 10 Version 1607\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.14393.0\", \"lessThan\": \"10.0.14393.7606\", \"versionType\": \"custom\"}], \"platforms\": [\"32-bit Systems\", \"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2016\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.14393.0\", \"lessThan\": \"10.0.14393.7606\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2016 (Server Core installation)\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.14393.0\", \"lessThan\": \"10.0.14393.7606\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2008 Service Pack 2\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.0.6003.0\", \"lessThan\": \"6.0.6003.23016\", \"versionType\": \"custom\"}], \"platforms\": [\"32-bit Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2008 Service Pack 2 (Server Core installation)\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.0.6003.0\", \"lessThan\": \"6.0.6003.23016\", \"versionType\": \"custom\"}], \"platforms\": [\"32-bit Systems\", \"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2008  Service Pack 2\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.0.6003.0\", \"lessThan\": \"6.0.6003.23016\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2008 R2 Service Pack 1\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.1.7601.0\", \"lessThan\": \"6.1.7601.27467\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2008 R2 Service Pack 1 (Server Core installation)\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.1.7601.0\", \"lessThan\": \"6.1.7601.27467\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2012\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.2.9200.0\", \"lessThan\": \"6.2.9200.25222\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2012 (Server Core installation)\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.2.9200.0\", \"lessThan\": \"6.2.9200.25222\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2012 R2\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.3.9600.0\", \"lessThan\": \"6.3.9600.22318\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2012 R2 (Server Core installation)\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.3.9600.0\", \"lessThan\": \"6.3.9600.22318\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}], \"datePublic\": \"2024-12-10T08:00:00.000Z\", \"references\": [{\"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49124\", \"name\": \"Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability\", \"tags\": [\"vendor-advisory\"]}], \"descriptions\": [{\"lang\": \"en-US\", \"value\": \"Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en-US\", \"type\": \"CWE\", \"cweId\": \"CWE-362\", \"description\": \"CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')\"}]}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.17763.6659\", \"versionStartIncluding\": \"10.0.17763.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.17763.6659\", \"versionStartIncluding\": \"10.0.17763.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.17763.6659\", \"versionStartIncluding\": \"10.0.17763.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.20348.2966\", \"versionStartIncluding\": \"10.0.20348.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.19044.5247\", \"versionStartIncluding\": \"10.0.19043.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_11_22H2:*:*:*:*:*:*:arm64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.22621.4602\", \"versionStartIncluding\": \"10.0.22621.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.19045.5247\", \"versionStartIncluding\": \"10.0.19045.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.26100.2605\", \"versionStartIncluding\": \"10.0.26100.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.22631.4602\", \"versionStartIncluding\": \"10.0.22631.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.22631.4602\", \"versionStartIncluding\": \"10.0.22631.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_23h2:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.25398.1308\", \"versionStartIncluding\": \"10.0.25398.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.26100.2605\", \"versionStartIncluding\": \"10.0.26100.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.26100.2605\", \"versionStartIncluding\": \"10.0.26100.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.10240.20857\", \"versionStartIncluding\": \"10.0.10240.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.14393.7606\", \"versionStartIncluding\": \"10.0.14393.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.14393.7606\", \"versionStartIncluding\": \"10.0.14393.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.14393.7606\", \"versionStartIncluding\": \"10.0.14393.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.0.6003.23016\", \"versionStartIncluding\": \"6.0.6003.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.0.6003.23016\", \"versionStartIncluding\": \"6.0.6003.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x86:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.0.6003.23016\", \"versionStartIncluding\": \"6.0.6003.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.7601.27467\", \"versionStartIncluding\": \"6.1.7601.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.7601.27467\", \"versionStartIncluding\": \"6.1.7601.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.2.9200.25222\", \"versionStartIncluding\": \"6.2.9200.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.2.9200.25222\", \"versionStartIncluding\": \"6.2.9200.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.3.9600.22318\", \"versionStartIncluding\": \"6.3.9600.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.3.9600.22318\", \"versionStartIncluding\": \"6.3.9600.0\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"shortName\": \"microsoft\", \"dateUpdated\": \"2025-03-11T16:44:24.544Z\"}}}",
         cveMetadata: "{\"cveId\": \"CVE-2024-49124\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-03-11T16:44:24.544Z\", \"dateReserved\": \"2024-10-11T20:57:49.208Z\", \"assignerOrgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"datePublished\": \"2024-12-10T17:49:25.530Z\", \"assignerShortName\": \"microsoft\"}",
         dataType: "CVE_RECORD",
         dataVersion: "5.1",
      },
   },
}

NCSC-2024-0470

Vulnerability from csaf_ncscnl

Published

2024-12-10 19:32

Modified

2025-01-06 07:30

Summary

Kwetsbaarheden verholpen in Microsoft Windows

Notes

The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions: NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein. NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory. This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.

Feiten

Microsoft heeft kwetsbaarheden verholpen in Windows.

Interpretaties

UPDATE: Onderzoekers hebben proof of concept (PoC) code gepubliceerd, waarmee de kwetsbaarheid met kenmerk CVE-2024-49113 kan worden aangetoond. Succesvol misbruik vereist dat de kwaadwillende toegang heeft tot zowel een DC met LDAP en een malafide server onder eigen controle. Hierdoor is misbruik niet eenvoudig te realiseren, maar neemt de kans erop wel toe. Succesvol misbruik resulteert in een Denial-of-Service van het kwetsbare systeem. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade: - Denial-of-Service (DoS) - Uitvoer van willekeurige code (Gebruikersrechten) - Uitvoer van willekeurige code (Systeemrechten) - Verkrijgen van verhoogde rechten - Toegang tot gevoelige gegevens De ernstigste kwetsbaarheid heeft kenmerk CVE-2024-49112 toegewezen gekregen en bevindt zich in de LDAP-component van de Domain Controller. Een kwaadwillende kan de kwetsbaarheid misbruiken om zonder voorafgaande authenticatie uitvoer van willekeurige code mogelijk te maken middels een malafide LDAP-call. Succesvol misbruik vereist wel dat de kwaadwillende LAN-toegang tot de Domain Controller heeft. ``` Windows Kernel-Mode Drivers: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49074 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Remote Desktop Client: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49105 | 8.40 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Windows Mobile Broadband: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49073 | 6.80 | Verkrijgen van verhoogde rechten | | CVE-2024-49087 | 4.60 | Toegang tot gevoelige gegevens | | CVE-2024-49092 | 6.80 | Verkrijgen van verhoogde rechten | | CVE-2024-49077 | 6.80 | Verkrijgen van verhoogde rechten | | CVE-2024-49078 | 6.80 | Verkrijgen van verhoogde rechten | | CVE-2024-49083 | 6.80 | Verkrijgen van verhoogde rechten | | CVE-2024-49110 | 6.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows PrintWorkflowUserSvc: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49097 | 7.00 | Verkrijgen van verhoogde rechten | | CVE-2024-49095 | 7.00 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Kernel: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49084 | 7.00 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Remote Desktop: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49132 | 8.10 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Windows Routing and Remote Access Service (RRAS): |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49085 | 8.80 | Uitvoeren van willekeurige code | | CVE-2024-49086 | 8.80 | Uitvoeren van willekeurige code | | CVE-2024-49089 | 7.20 | Uitvoeren van willekeurige code | | CVE-2024-49102 | 8.80 | Uitvoeren van willekeurige code | | CVE-2024-49104 | 8.80 | Uitvoeren van willekeurige code | | CVE-2024-49125 | 8.80 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Role: DNS Server: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49091 | 7.20 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Role: Windows Hyper-V: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49117 | 8.80 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Windows LDAP - Lightweight Directory Access Protocol: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49121 | 7.50 | Denial-of-Service | | CVE-2024-49124 | 8.10 | Uitvoeren van willekeurige code | | CVE-2024-49112 | 9.80 | Uitvoeren van willekeurige code | | CVE-2024-49113 | 7.50 | Denial-of-Service | | CVE-2024-49127 | 8.10 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Microsoft Office Publisher: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49079 | 7.80 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Windows IP Routing Management Snapin: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49080 | 8.80 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Windows Resilient File System (ReFS): |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49093 | 8.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Task Scheduler: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49072 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Remote Desktop Services: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49106 | 8.10 | Uitvoeren van willekeurige code | | CVE-2024-49108 | 8.10 | Uitvoeren van willekeurige code | | CVE-2024-49115 | 8.10 | Uitvoeren van willekeurige code | | CVE-2024-49119 | 8.10 | Uitvoeren van willekeurige code | | CVE-2024-49120 | 8.10 | Uitvoeren van willekeurige code | | CVE-2024-49123 | 8.10 | Uitvoeren van willekeurige code | | CVE-2024-49129 | 7.50 | Denial-of-Service | | CVE-2024-49075 | 7.50 | Denial-of-Service | | CVE-2024-49116 | 8.10 | Uitvoeren van willekeurige code | | CVE-2024-49128 | 8.10 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Windows Wireless Wide Area Network Service: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49094 | 6.60 | Verkrijgen van verhoogde rechten | | CVE-2024-49098 | 4.30 | Toegang tot gevoelige gegevens | | CVE-2024-49099 | 4.30 | Toegang tot gevoelige gegevens | | CVE-2024-49101 | 6.60 | Verkrijgen van verhoogde rechten | | CVE-2024-49103 | 4.30 | Toegang tot gevoelige gegevens | | CVE-2024-49111 | 6.60 | Verkrijgen van verhoogde rechten | | CVE-2024-49081 | 6.60 | Verkrijgen van verhoogde rechten | | CVE-2024-49109 | 6.60 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| WmsRepair Service: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49107 | 7.30 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Local Security Authority Subsystem Service (LSASS): |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49126 | 8.10 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Windows Message Queuing: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49096 | 7.50 | Denial-of-Service | | CVE-2024-49122 | 8.10 | Uitvoeren van willekeurige code | | CVE-2024-49118 | 8.10 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Windows Common Log File System Driver: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49088 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2024-49090 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2024-49138 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Cloud Files Mini Filter Driver: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49114 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Virtualization-Based Security (VBS) Enclave: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49076 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows File Explorer: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-49082 | 6.80 | Toegang tot gevoelige gegevens | |----------------|------|-------------------------------------| System Center Operations Manager: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2024-43594 | 7.30 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| ```

Oplossingen

Microsoft heeft updates beschikbaar gesteld waarmee de beschreven kwetsbaarheden worden verholpen. We raden u aan om deze updates te installeren. Meer informatie over de kwetsbaarheden, de installatie van de updates en eventuele work-arounds vindt u op: https://portal.msrc.microsoft.com/en-us/security-guidance

Kans

medium

Schade

high

CWE-591

Sensitive Data Storage in Improperly Locked Memory

CWE-393

Return of Wrong Status Code

CWE-453

Insecure Default Variable Initialization

CWE-820

Missing Synchronization

CWE-59

Improper Link Resolution Before File Access ('Link Following')

CWE-191

Integer Underflow (Wrap or Wraparound)

CWE-822

Untrusted Pointer Dereference

CWE-126

Buffer Over-read

CWE-415

Double Free

CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CWE-190

Integer Overflow or Wraparound

CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CWE-125

Out-of-bounds Read

CWE-284

Improper Access Control

CWE-416

Use After Free

CWE-476

NULL Pointer Dereference

CWE-400

Uncontrolled Resource Consumption

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CWE-122

Heap-based Buffer Overflow

CWE-681

Incorrect Conversion between Numeric Types

CWE-20

Improper Input Validation

CWE-287

Improper Authentication

JSON

To clipboard

{
   document: {
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         tlp: {
            label: "WHITE",
         },
      },
      lang: "nl",
      notes: [
         {
            category: "legal_disclaimer",
            text: "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.",
         },
         {
            category: "description",
            text: "Microsoft heeft kwetsbaarheden verholpen in Windows.",
            title: "Feiten",
         },
         {
            category: "description",
            text: "UPDATE: \nOnderzoekers hebben proof of concept (PoC) code gepubliceerd, waarmee de kwetsbaarheid met kenmerk CVE-2024-49113 kan worden aangetoond. Succesvol misbruik vereist dat de kwaadwillende toegang heeft tot zowel een DC met LDAP en een malafide server onder eigen controle. Hierdoor is misbruik niet eenvoudig te realiseren, maar neemt de kans erop wel toe. Succesvol misbruik resulteert in een Denial-of-Service van het kwetsbare systeem.\n\n\nEen kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade:\n\n- Denial-of-Service (DoS)\n- Uitvoer van willekeurige code (Gebruikersrechten)\n- Uitvoer van willekeurige code (Systeemrechten)\n- Verkrijgen van verhoogde rechten\n- Toegang tot gevoelige gegevens\n\nDe ernstigste kwetsbaarheid heeft kenmerk CVE-2024-49112 toegewezen gekregen en bevindt zich in de LDAP-component van de Domain Controller. Een kwaadwillende kan de kwetsbaarheid misbruiken om zonder voorafgaande authenticatie uitvoer van willekeurige code mogelijk te maken middels een malafide LDAP-call. Succesvol misbruik vereist wel dat de kwaadwillende LAN-toegang tot de Domain Controller heeft.\n\n```\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49074 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49105 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Mobile Broadband: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49073 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2024-49087 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2024-49092 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2024-49077 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2024-49078 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2024-49083 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2024-49110 | 6.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PrintWorkflowUserSvc: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49097 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2024-49095 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49084 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49132 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49085 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2024-49086 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2024-49089 | 7.20 | Uitvoeren van willekeurige code     | \n| CVE-2024-49102 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2024-49104 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2024-49125 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49091 | 7.20 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRole: Windows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49117 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49121 | 7.50 | Denial-of-Service                   | \n| CVE-2024-49124 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2024-49112 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2024-49113 | 7.50 | Denial-of-Service                   | \n| CVE-2024-49127 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Publisher: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49079 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows IP Routing Management Snapin: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49080 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49093 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Task Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49072 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49106 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2024-49108 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2024-49115 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2024-49119 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2024-49120 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2024-49123 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2024-49129 | 7.50 | Denial-of-Service                   | \n| CVE-2024-49075 | 7.50 | Denial-of-Service                   | \n| CVE-2024-49116 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2024-49128 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49094 | 6.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2024-49098 | 4.30 | Toegang tot gevoelige gegevens      | \n| CVE-2024-49099 | 4.30 | Toegang tot gevoelige gegevens      | \n| CVE-2024-49101 | 6.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2024-49103 | 4.30 | Toegang tot gevoelige gegevens      | \n| CVE-2024-49111 | 6.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2024-49081 | 6.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2024-49109 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWmsRepair Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49107 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49126 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49096 | 7.50 | Denial-of-Service                   | \n| CVE-2024-49122 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2024-49118 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49088 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2024-49090 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2024-49138 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49114 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtualization-Based Security (VBS) Enclave: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49076 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49082 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nSystem Center Operations Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-43594 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n```",
            title: "Interpretaties",
         },
         {
            category: "description",
            text: "Microsoft heeft updates beschikbaar gesteld waarmee de beschreven kwetsbaarheden worden verholpen. We raden u aan om deze updates te installeren. Meer informatie over de kwetsbaarheden, de installatie van de updates en eventuele work-arounds vindt u op:\n\nhttps://portal.msrc.microsoft.com/en-us/security-guidance",
            title: "Oplossingen",
         },
         {
            category: "general",
            text: "medium",
            title: "Kans",
         },
         {
            category: "general",
            text: "high",
            title: "Schade",
         },
         {
            category: "general",
            text: "Sensitive Data Storage in Improperly Locked Memory",
            title: "CWE-591",
         },
         {
            category: "general",
            text: "Return of Wrong Status Code",
            title: "CWE-393",
         },
         {
            category: "general",
            text: "Insecure Default Variable Initialization",
            title: "CWE-453",
         },
         {
            category: "general",
            text: "Missing Synchronization",
            title: "CWE-820",
         },
         {
            category: "general",
            text: "Improper Link Resolution Before File Access ('Link Following')",
            title: "CWE-59",
         },
         {
            category: "general",
            text: "Integer Underflow (Wrap or Wraparound)",
            title: "CWE-191",
         },
         {
            category: "general",
            text: "Untrusted Pointer Dereference",
            title: "CWE-822",
         },
         {
            category: "general",
            text: "Buffer Over-read",
            title: "CWE-126",
         },
         {
            category: "general",
            text: "Double Free",
            title: "CWE-415",
         },
         {
            category: "general",
            text: "Access of Resource Using Incompatible Type ('Type Confusion')",
            title: "CWE-843",
         },
         {
            category: "general",
            text: "Integer Overflow or Wraparound",
            title: "CWE-190",
         },
         {
            category: "general",
            text: "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')",
            title: "CWE-362",
         },
         {
            category: "general",
            text: "Out-of-bounds Read",
            title: "CWE-125",
         },
         {
            category: "general",
            text: "Improper Access Control",
            title: "CWE-284",
         },
         {
            category: "general",
            text: "Use After Free",
            title: "CWE-416",
         },
         {
            category: "general",
            text: "NULL Pointer Dereference",
            title: "CWE-476",
         },
         {
            category: "general",
            text: "Uncontrolled Resource Consumption",
            title: "CWE-400",
         },
         {
            category: "general",
            text: "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')",
            title: "CWE-22",
         },
         {
            category: "general",
            text: "Heap-based Buffer Overflow",
            title: "CWE-122",
         },
         {
            category: "general",
            text: "Incorrect Conversion between Numeric Types",
            title: "CWE-681",
         },
         {
            category: "general",
            text: "Improper Input Validation",
            title: "CWE-20",
         },
         {
            category: "general",
            text: "Improper Authentication",
            title: "CWE-287",
         },
      ],
      publisher: {
         category: "coordinator",
         contact_details: "cert@ncsc.nl",
         name: "Nationaal Cyber Security Centrum",
         namespace: "https://www.ncsc.nl/",
      },
      title: "Kwetsbaarheden verholpen in Microsoft Windows",
      tracking: {
         current_release_date: "2025-01-06T07:30:29.655717Z",
         id: "NCSC-2024-0470",
         initial_release_date: "2024-12-10T19:32:38.846024Z",
         revision_history: [
            {
               date: "2024-12-10T19:32:38.846024Z",
               number: "0",
               summary: "Initiele versie",
            },
            {
               date: "2025-01-06T07:30:29.655717Z",
               number: "1",
               summary: "Onderzoekers hebben proof of concept (PoC) code gepubliceerd, waarmee de kwetsbaarheid met kenmerk CVE-2024-49113 kan worden aangetoond.",
            },
         ],
         status: "final",
         version: "1.0.1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  category: "product_name",
                  name: "windows_11_22h2",
                  product: {
                     name: "windows_11_22h2",
                     product_id: "CSAFPID-1741412",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_11_22h2:10.0.22621.4602:*:*:*:*:*:x64:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_11_23h2",
                  product: {
                     name: "windows_11_23h2",
                     product_id: "CSAFPID-1741417",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_11_23h2:10.0.22631.4602:*:*:*:*:*:arm64:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_11_23h2",
                  product: {
                     name: "windows_11_23h2",
                     product_id: "CSAFPID-1741418",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_11_23h2:10.0.22631.4602:*:*:*:*:*:x64:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_11_24h2",
                  product: {
                     name: "windows_11_24h2",
                     product_id: "CSAFPID-1741420",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_11_24h2:10.0.26100.2605:*:*:*:*:*:arm64:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_11_24h2",
                  product: {
                     name: "windows_11_24h2",
                     product_id: "CSAFPID-1741421",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_11_24h2:10.0.26100.2605:*:*:*:*:*:x64:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2008_r2",
                  product: {
                     name: "windows_server_2008_r2",
                     product_id: "CSAFPID-1741430",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_server_2008_r2:6.1.7601.27467:*:*:*:*:*:x64:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2008_sp2",
                  product: {
                     name: "windows_server_2008_sp2",
                     product_id: "CSAFPID-1741428",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.23016:*:*:*:*:*:x64:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2008_sp2",
                  product: {
                     name: "windows_server_2008_sp2",
                     product_id: "CSAFPID-1741429",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.23016:*:*:*:*:*:x86:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2012",
                  product: {
                     name: "windows_server_2012",
                     product_id: "CSAFPID-1741431",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_server_2012:6.2.9200.25222:*:*:*:*:*:x64:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2012_r2",
                  product: {
                     name: "windows_server_2012_r2",
                     product_id: "CSAFPID-1741432",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_server_2012_r2:6.3.9600.22318:*:*:*:*:*:x64:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2016",
                  product: {
                     name: "windows_server_2016",
                     product_id: "CSAFPID-1741427",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.7606:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2019",
                  product: {
                     name: "windows_server_2019",
                     product_id: "CSAFPID-1741407",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_server_2019:10.0.17763.6659:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2022",
                  product: {
                     name: "windows_server_2022",
                     product_id: "CSAFPID-1741422",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_server_2022:10.0.20348.2966:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2025",
                  product: {
                     name: "windows_server_2025",
                     product_id: "CSAFPID-1741416",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_server_2025:10.0.26100.2528:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_23h2",
                  product: {
                     name: "windows_server_23h2",
                     product_id: "CSAFPID-1741419",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_server_23h2:10.0.25398.1308:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "system_center_operations_manager",
                  product: {
                     name: "system_center_operations_manager",
                     product_id: "CSAFPID-618487",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:system_center_operations_manager:2019:-:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "system_center_operations_manager",
                  product: {
                     name: "system_center_operations_manager",
                     product_id: "CSAFPID-634172",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:system_center_operations_manager:2022:-:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "system_center_operations_manager",
                  product: {
                     name: "system_center_operations_manager",
                     product_id: "CSAFPID-1741404",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:system_center_operations_manager:2025:-:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "system_center_operations_manager__scom__2019",
                  product: {
                     name: "system_center_operations_manager__scom__2019",
                     product_id: "CSAFPID-1718165",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:system_center_operations_manager__scom__2019:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "system_center_operations_manager__scom__2022",
                  product: {
                     name: "system_center_operations_manager__scom__2022",
                     product_id: "CSAFPID-1718167",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:system_center_operations_manager__scom__2022:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "system_center_operations_manager__scom__2025",
                  product: {
                     name: "system_center_operations_manager__scom__2025",
                     product_id: "CSAFPID-1741485",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:system_center_operations_manager__scom__2025:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows",
                  product: {
                     name: "windows",
                     product_id: "CSAFPID-549001",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_10_version_1507",
                  product: {
                     name: "windows_10_version_1507",
                     product_id: "CSAFPID-1723936",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_10_version_1507:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_10_version_1607",
                  product: {
                     name: "windows_10_version_1607",
                     product_id: "CSAFPID-1723937",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_10_version_1607:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_10_version_1809",
                  product: {
                     name: "windows_10_version_1809",
                     product_id: "CSAFPID-1720442",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_10_version_1809:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_10_version_21h2",
                  product: {
                     name: "windows_10_version_21h2",
                     product_id: "CSAFPID-1741366",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_10_version_21h2:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_10_version_22h2",
                  product: {
                     name: "windows_10_version_22h2",
                     product_id: "CSAFPID-1741368",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_10_version_22h2:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_11_version_22h2",
                  product: {
                     name: "windows_11_version_22h2",
                     product_id: "CSAFPID-1741367",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_11_version_22h2:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_11_version_22h3",
                  product: {
                     name: "windows_11_version_22h3",
                     product_id: "CSAFPID-1741369",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_11_version_22h3:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_11_version_23h2",
                  product: {
                     name: "windows_11_version_23h2",
                     product_id: "CSAFPID-1741370",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_11_version_23h2:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_11_version_24h2",
                  product: {
                     name: "windows_11_version_24h2",
                     product_id: "CSAFPID-1741371",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_11_version_24h2:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2008__service_pack_2",
                  product: {
                     name: "windows_server_2008__service_pack_2",
                     product_id: "CSAFPID-1723943",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_server_2008__service_pack_2:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2008_r2_service_pack_1",
                  product: {
                     name: "windows_server_2008_r2_service_pack_1",
                     product_id: "CSAFPID-1723944",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_server_2008_r2_service_pack_1:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2008_r2_service_pack_1__server_core_installation_",
                  product: {
                     name: "windows_server_2008_r2_service_pack_1__server_core_installation_",
                     product_id: "CSAFPID-1723945",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_server_2008_r2_service_pack_1__server_core_installation_:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2008_service_pack_2",
                  product: {
                     name: "windows_server_2008_service_pack_2",
                     product_id: "CSAFPID-1723941",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_server_2008_service_pack_2:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2008_service_pack_2__server_core_installation_",
                  product: {
                     name: "windows_server_2008_service_pack_2__server_core_installation_",
                     product_id: "CSAFPID-1723942",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_server_2008_service_pack_2__server_core_installation_:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2012",
                  product: {
                     name: "windows_server_2012",
                     product_id: "CSAFPID-1717820",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2012__server_core_installation_",
                  product: {
                     name: "windows_server_2012__server_core_installation_",
                     product_id: "CSAFPID-1717821",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_server_2012__server_core_installation_:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2012_r2",
                  product: {
                     name: "windows_server_2012_r2",
                     product_id: "CSAFPID-1717822",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_server_2012_r2:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2012_r2__server_core_installation_",
                  product: {
                     name: "windows_server_2012_r2__server_core_installation_",
                     product_id: "CSAFPID-1717823",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_server_2012_r2__server_core_installation_:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2016",
                  product: {
                     name: "windows_server_2016",
                     product_id: "CSAFPID-1717812",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2016__server_core_installation_",
                  product: {
                     name: "windows_server_2016__server_core_installation_",
                     product_id: "CSAFPID-1717813",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_server_2016__server_core_installation_:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2019",
                  product: {
                     name: "windows_server_2019",
                     product_id: "CSAFPID-1717808",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2019__server_core_installation_",
                  product: {
                     name: "windows_server_2019__server_core_installation_",
                     product_id: "CSAFPID-1717809",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_server_2019__server_core_installation_:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2022",
                  product: {
                     name: "windows_server_2022",
                     product_id: "CSAFPID-1717810",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2022__23h2_edition__server_core_installation_",
                  product: {
                     name: "windows_server_2022__23h2_edition__server_core_installation_",
                     product_id: "CSAFPID-1741352",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_server_2022__23h2_edition__server_core_installation_:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2025",
                  product: {
                     name: "windows_server_2025",
                     product_id: "CSAFPID-1741353",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2025__server_core_installation_",
                  product: {
                     name: "windows_server_2025__server_core_installation_",
                     product_id: "CSAFPID-1741354",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_server_2025__server_core_installation_:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_10_1507",
                  product: {
                     name: "windows_10_1507",
                     product_id: "CSAFPID-1741424",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.20857:*:*:*:*:*:x64:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_10_1507",
                  product: {
                     name: "windows_10_1507",
                     product_id: "CSAFPID-1741423",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.20857:*:*:*:*:*:x86:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_10_1607",
                  product: {
                     name: "windows_10_1607",
                     product_id: "CSAFPID-1741426",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.7606:*:*:*:*:*:x64:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_10_1607",
                  product: {
                     name: "windows_10_1607",
                     product_id: "CSAFPID-1741425",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.7606:*:*:*:*:*:x86:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_10_1809",
                  product: {
                     name: "windows_10_1809",
                     product_id: "CSAFPID-1741406",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.6659:*:*:*:*:*:x64:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_10_1809",
                  product: {
                     name: "windows_10_1809",
                     product_id: "CSAFPID-1741405",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.6659:*:*:*:*:*:x86:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_10_21h2",
                  product: {
                     name: "windows_10_21h2",
                     product_id: "CSAFPID-1741409",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_10_21h2:10.0.19044.5247:*:*:*:*:*:arm64:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_10_21h2",
                  product: {
                     name: "windows_10_21h2",
                     product_id: "CSAFPID-1741410",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_10_21h2:10.0.19044.5247:*:*:*:*:*:x64:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_10_21h2",
                  product: {
                     name: "windows_10_21h2",
                     product_id: "CSAFPID-1741408",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_10_21h2:10.0.19044.5247:*:*:*:*:*:x86:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_10_22h2",
                  product: {
                     name: "windows_10_22h2",
                     product_id: "CSAFPID-1741414",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_10_22h2:10.0.19045.5247:*:*:*:*:*:arm64:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_10_22h2",
                  product: {
                     name: "windows_10_22h2",
                     product_id: "CSAFPID-1741413",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_10_22h2:10.0.19045.5247:*:*:*:*:*:x64:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_10_22h2",
                  product: {
                     name: "windows_10_22h2",
                     product_id: "CSAFPID-1741415",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_10_22h2:10.0.19045.5247:*:*:*:*:*:x86:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_11_22h2",
                  product: {
                     name: "windows_11_22h2",
                     product_id: "CSAFPID-1741411",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_11_22h2:10.0.22621.4602:*:*:*:*:*:arm64:*",
                     },
                  },
               },
            ],
            category: "vendor",
            name: "microsoft",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2024-49123",
         cwe: {
            id: "CWE-591",
            name: "Sensitive Data Storage in Improperly Locked Memory",
         },
         notes: [
            {
               category: "other",
               text: "Sensitive Data Storage in Improperly Locked Memory",
               title: "CWE-591",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49123",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49123.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741405",
                  "CSAFPID-1741406",
                  "CSAFPID-1741407",
                  "CSAFPID-1741422",
                  "CSAFPID-1741408",
                  "CSAFPID-1741409",
                  "CSAFPID-1741410",
                  "CSAFPID-1741411",
                  "CSAFPID-1741412",
                  "CSAFPID-1741413",
                  "CSAFPID-1741414",
                  "CSAFPID-1741415",
                  "CSAFPID-1741416",
                  "CSAFPID-1741417",
                  "CSAFPID-1741418",
                  "CSAFPID-1741419",
                  "CSAFPID-1741420",
                  "CSAFPID-1741421",
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
               ],
            },
         ],
         title: "CVE-2024-49123",
      },
      {
         cve: "CVE-2024-49124",
         cwe: {
            id: "CWE-362",
            name: "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')",
         },
         notes: [
            {
               category: "other",
               text: "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')",
               title: "CWE-362",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1741423",
               "CSAFPID-1741424",
               "CSAFPID-1741425",
               "CSAFPID-1741426",
               "CSAFPID-1741427",
               "CSAFPID-1741428",
               "CSAFPID-1741429",
               "CSAFPID-1741430",
               "CSAFPID-1741431",
               "CSAFPID-1741432",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1723936",
               "CSAFPID-1723937",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723941",
               "CSAFPID-1723942",
               "CSAFPID-1723943",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49124",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49124.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741405",
                  "CSAFPID-1741406",
                  "CSAFPID-1741407",
                  "CSAFPID-1741422",
                  "CSAFPID-1741408",
                  "CSAFPID-1741409",
                  "CSAFPID-1741410",
                  "CSAFPID-1741411",
                  "CSAFPID-1741412",
                  "CSAFPID-1741413",
                  "CSAFPID-1741414",
                  "CSAFPID-1741415",
                  "CSAFPID-1741416",
                  "CSAFPID-1741417",
                  "CSAFPID-1741418",
                  "CSAFPID-1741419",
                  "CSAFPID-1741420",
                  "CSAFPID-1741421",
                  "CSAFPID-1741423",
                  "CSAFPID-1741424",
                  "CSAFPID-1741425",
                  "CSAFPID-1741426",
                  "CSAFPID-1741427",
                  "CSAFPID-1741428",
                  "CSAFPID-1741429",
                  "CSAFPID-1741430",
                  "CSAFPID-1741431",
                  "CSAFPID-1741432",
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
                  "CSAFPID-1723936",
                  "CSAFPID-1723937",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
                  "CSAFPID-1723941",
                  "CSAFPID-1723942",
                  "CSAFPID-1723943",
                  "CSAFPID-1723944",
                  "CSAFPID-1723945",
                  "CSAFPID-1717820",
                  "CSAFPID-1717821",
                  "CSAFPID-1717822",
                  "CSAFPID-1717823",
               ],
            },
         ],
         title: "CVE-2024-49124",
      },
      {
         cve: "CVE-2024-49126",
         cwe: {
            id: "CWE-416",
            name: "Use After Free",
         },
         notes: [
            {
               category: "other",
               text: "Use After Free",
               title: "CWE-416",
            },
            {
               category: "other",
               text: "Sensitive Data Storage in Improperly Locked Memory",
               title: "CWE-591",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1741423",
               "CSAFPID-1741424",
               "CSAFPID-1741425",
               "CSAFPID-1741426",
               "CSAFPID-1741427",
               "CSAFPID-1741428",
               "CSAFPID-1741429",
               "CSAFPID-1741430",
               "CSAFPID-1741431",
               "CSAFPID-1741432",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1723936",
               "CSAFPID-1723937",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723941",
               "CSAFPID-1723942",
               "CSAFPID-1723943",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49126",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49126.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741405",
                  "CSAFPID-1741406",
                  "CSAFPID-1741407",
                  "CSAFPID-1741422",
                  "CSAFPID-1741408",
                  "CSAFPID-1741409",
                  "CSAFPID-1741410",
                  "CSAFPID-1741411",
                  "CSAFPID-1741412",
                  "CSAFPID-1741413",
                  "CSAFPID-1741414",
                  "CSAFPID-1741415",
                  "CSAFPID-1741416",
                  "CSAFPID-1741417",
                  "CSAFPID-1741418",
                  "CSAFPID-1741419",
                  "CSAFPID-1741420",
                  "CSAFPID-1741421",
                  "CSAFPID-1741423",
                  "CSAFPID-1741424",
                  "CSAFPID-1741425",
                  "CSAFPID-1741426",
                  "CSAFPID-1741427",
                  "CSAFPID-1741428",
                  "CSAFPID-1741429",
                  "CSAFPID-1741430",
                  "CSAFPID-1741431",
                  "CSAFPID-1741432",
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
                  "CSAFPID-1723936",
                  "CSAFPID-1723937",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
                  "CSAFPID-1723941",
                  "CSAFPID-1723942",
                  "CSAFPID-1723943",
                  "CSAFPID-1723944",
                  "CSAFPID-1723945",
                  "CSAFPID-1717820",
                  "CSAFPID-1717821",
                  "CSAFPID-1717822",
                  "CSAFPID-1717823",
               ],
            },
         ],
         title: "CVE-2024-49126",
      },
      {
         cve: "CVE-2024-49132",
         cwe: {
            id: "CWE-591",
            name: "Sensitive Data Storage in Improperly Locked Memory",
         },
         notes: [
            {
               category: "other",
               text: "Sensitive Data Storage in Improperly Locked Memory",
               title: "CWE-591",
            },
            {
               category: "other",
               text: "Use After Free",
               title: "CWE-416",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49132",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49132.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741405",
                  "CSAFPID-1741406",
                  "CSAFPID-1741407",
                  "CSAFPID-1741422",
                  "CSAFPID-1741408",
                  "CSAFPID-1741409",
                  "CSAFPID-1741410",
                  "CSAFPID-1741411",
                  "CSAFPID-1741412",
                  "CSAFPID-1741413",
                  "CSAFPID-1741414",
                  "CSAFPID-1741415",
                  "CSAFPID-1741416",
                  "CSAFPID-1741417",
                  "CSAFPID-1741418",
                  "CSAFPID-1741419",
                  "CSAFPID-1741420",
                  "CSAFPID-1741421",
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
               ],
            },
         ],
         title: "CVE-2024-49132",
      },
      {
         cve: "CVE-2024-49072",
         cwe: {
            id: "CWE-122",
            name: "Heap-based Buffer Overflow",
         },
         notes: [
            {
               category: "other",
               text: "Heap-based Buffer Overflow",
               title: "CWE-122",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741419",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741422",
               "CSAFPID-1741428",
               "CSAFPID-1741415",
               "CSAFPID-1741420",
               "CSAFPID-1741424",
               "CSAFPID-1741427",
               "CSAFPID-1741413",
               "CSAFPID-1741405",
               "CSAFPID-1741407",
               "CSAFPID-1741414",
               "CSAFPID-1741421",
               "CSAFPID-1741430",
               "CSAFPID-1741432",
               "CSAFPID-1741423",
               "CSAFPID-1741416",
               "CSAFPID-1741410",
               "CSAFPID-1741406",
               "CSAFPID-1741426",
               "CSAFPID-1741418",
               "CSAFPID-1741412",
               "CSAFPID-1741429",
               "CSAFPID-1741431",
               "CSAFPID-1741417",
               "CSAFPID-1741425",
               "CSAFPID-1741411",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1723936",
               "CSAFPID-1723937",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723941",
               "CSAFPID-1723942",
               "CSAFPID-1723943",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49072",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49072.json",
            },
         ],
         title: "CVE-2024-49072",
      },
      {
         cve: "CVE-2024-49075",
         cwe: {
            id: "CWE-400",
            name: "Uncontrolled Resource Consumption",
         },
         notes: [
            {
               category: "other",
               text: "Uncontrolled Resource Consumption",
               title: "CWE-400",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741411",
               "CSAFPID-1741416",
               "CSAFPID-1741410",
               "CSAFPID-1741418",
               "CSAFPID-1741417",
               "CSAFPID-1741406",
               "CSAFPID-1741409",
               "CSAFPID-1741419",
               "CSAFPID-1741407",
               "CSAFPID-1741405",
               "CSAFPID-1741414",
               "CSAFPID-1741420",
               "CSAFPID-1741415",
               "CSAFPID-1741421",
               "CSAFPID-1741408",
               "CSAFPID-1741413",
               "CSAFPID-1741412",
               "CSAFPID-1741422",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49075",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49075.json",
            },
         ],
         title: "CVE-2024-49075",
      },
      {
         cve: "CVE-2024-49076",
         cwe: {
            id: "CWE-287",
            name: "Improper Authentication",
         },
         notes: [
            {
               category: "other",
               text: "Improper Authentication",
               title: "CWE-287",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741418",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741417",
               "CSAFPID-1741420",
               "CSAFPID-1741405",
               "CSAFPID-1741415",
               "CSAFPID-1741419",
               "CSAFPID-1741413",
               "CSAFPID-1741416",
               "CSAFPID-1741421",
               "CSAFPID-1741410",
               "CSAFPID-1741409",
               "CSAFPID-1741408",
               "CSAFPID-1741411",
               "CSAFPID-1741414",
               "CSAFPID-1741412",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49076",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49076.json",
            },
         ],
         title: "CVE-2024-49076",
      },
      {
         cve: "CVE-2024-49077",
         cwe: {
            id: "CWE-191",
            name: "Integer Underflow (Wrap or Wraparound)",
         },
         notes: [
            {
               category: "other",
               text: "Integer Underflow (Wrap or Wraparound)",
               title: "CWE-191",
            },
            {
               category: "other",
               text: "Out-of-bounds Read",
               title: "CWE-125",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1741411",
               "CSAFPID-1741417",
               "CSAFPID-1741405",
               "CSAFPID-1741407",
               "CSAFPID-1741421",
               "CSAFPID-1741416",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741414",
               "CSAFPID-1741406",
               "CSAFPID-1741415",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741408",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49077",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49077.json",
            },
         ],
         title: "CVE-2024-49077",
      },
      {
         cve: "CVE-2024-49078",
         cwe: {
            id: "CWE-190",
            name: "Integer Overflow or Wraparound",
         },
         notes: [
            {
               category: "other",
               text: "Integer Overflow or Wraparound",
               title: "CWE-190",
            },
            {
               category: "other",
               text: "Out-of-bounds Read",
               title: "CWE-125",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1741412",
               "CSAFPID-1741408",
               "CSAFPID-1741416",
               "CSAFPID-1741418",
               "CSAFPID-1741417",
               "CSAFPID-1741414",
               "CSAFPID-1741405",
               "CSAFPID-1741411",
               "CSAFPID-1741421",
               "CSAFPID-1741419",
               "CSAFPID-1741413",
               "CSAFPID-1741406",
               "CSAFPID-1741410",
               "CSAFPID-1741407",
               "CSAFPID-1741409",
               "CSAFPID-1741420",
               "CSAFPID-1741415",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49078",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49078.json",
            },
         ],
         title: "CVE-2024-49078",
      },
      {
         cve: "CVE-2024-49079",
         cwe: {
            id: "CWE-416",
            name: "Use After Free",
         },
         notes: [
            {
               category: "other",
               text: "Use After Free",
               title: "CWE-416",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1723936",
               "CSAFPID-1723937",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
               "CSAFPID-1741418",
               "CSAFPID-1741411",
               "CSAFPID-1741409",
               "CSAFPID-1741423",
               "CSAFPID-1741412",
               "CSAFPID-1741424",
               "CSAFPID-1741422",
               "CSAFPID-1741425",
               "CSAFPID-1741406",
               "CSAFPID-1741427",
               "CSAFPID-1741426",
               "CSAFPID-1741410",
               "CSAFPID-1741405",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741408",
               "CSAFPID-1741419",
               "CSAFPID-1741407",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741421",
               "CSAFPID-1741420",
               "CSAFPID-1741432",
               "CSAFPID-1741431",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49079",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49079.json",
            },
         ],
         title: "CVE-2024-49079",
      },
      {
         cve: "CVE-2024-49080",
         cwe: {
            id: "CWE-122",
            name: "Heap-based Buffer Overflow",
         },
         notes: [
            {
               category: "other",
               text: "Heap-based Buffer Overflow",
               title: "CWE-122",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1723936",
               "CSAFPID-1723937",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723941",
               "CSAFPID-1723942",
               "CSAFPID-1723943",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
               "CSAFPID-1741416",
               "CSAFPID-1741430",
               "CSAFPID-1741409",
               "CSAFPID-1741426",
               "CSAFPID-1741417",
               "CSAFPID-1741431",
               "CSAFPID-1741424",
               "CSAFPID-1741407",
               "CSAFPID-1741413",
               "CSAFPID-1741406",
               "CSAFPID-1741427",
               "CSAFPID-1741412",
               "CSAFPID-1741420",
               "CSAFPID-1741415",
               "CSAFPID-1741425",
               "CSAFPID-1741414",
               "CSAFPID-1741428",
               "CSAFPID-1741419",
               "CSAFPID-1741411",
               "CSAFPID-1741422",
               "CSAFPID-1741418",
               "CSAFPID-1741405",
               "CSAFPID-1741421",
               "CSAFPID-1741432",
               "CSAFPID-1741429",
               "CSAFPID-1741410",
               "CSAFPID-1741408",
               "CSAFPID-1741423",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49080",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49080.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
                  "CSAFPID-1723936",
                  "CSAFPID-1723937",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
                  "CSAFPID-1723941",
                  "CSAFPID-1723942",
                  "CSAFPID-1723943",
                  "CSAFPID-1723944",
                  "CSAFPID-1723945",
                  "CSAFPID-1717820",
                  "CSAFPID-1717821",
                  "CSAFPID-1717822",
                  "CSAFPID-1717823",
                  "CSAFPID-1741416",
                  "CSAFPID-1741430",
                  "CSAFPID-1741409",
                  "CSAFPID-1741426",
                  "CSAFPID-1741417",
                  "CSAFPID-1741431",
                  "CSAFPID-1741424",
                  "CSAFPID-1741407",
                  "CSAFPID-1741413",
                  "CSAFPID-1741406",
                  "CSAFPID-1741427",
                  "CSAFPID-1741412",
                  "CSAFPID-1741420",
                  "CSAFPID-1741415",
                  "CSAFPID-1741425",
                  "CSAFPID-1741414",
                  "CSAFPID-1741428",
                  "CSAFPID-1741419",
                  "CSAFPID-1741411",
                  "CSAFPID-1741422",
                  "CSAFPID-1741418",
                  "CSAFPID-1741405",
                  "CSAFPID-1741421",
                  "CSAFPID-1741432",
                  "CSAFPID-1741429",
                  "CSAFPID-1741410",
                  "CSAFPID-1741408",
                  "CSAFPID-1741423",
               ],
            },
         ],
         title: "CVE-2024-49080",
      },
      {
         cve: "CVE-2024-49081",
         cwe: {
            id: "CWE-122",
            name: "Heap-based Buffer Overflow",
         },
         notes: [
            {
               category: "other",
               text: "Heap-based Buffer Overflow",
               title: "CWE-122",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1741408",
               "CSAFPID-1741415",
               "CSAFPID-1741409",
               "CSAFPID-1741411",
               "CSAFPID-1741418",
               "CSAFPID-1741417",
               "CSAFPID-1741406",
               "CSAFPID-1741419",
               "CSAFPID-1741416",
               "CSAFPID-1741410",
               "CSAFPID-1741407",
               "CSAFPID-1741420",
               "CSAFPID-1741414",
               "CSAFPID-1741405",
               "CSAFPID-1741412",
               "CSAFPID-1741421",
               "CSAFPID-1741413",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49081",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49081.json",
            },
         ],
         title: "CVE-2024-49081",
      },
      {
         cve: "CVE-2024-49082",
         cwe: {
            id: "CWE-22",
            name: "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')",
         },
         notes: [
            {
               category: "other",
               text: "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')",
               title: "CWE-22",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1723936",
               "CSAFPID-1723937",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723941",
               "CSAFPID-1723942",
               "CSAFPID-1723943",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
               "CSAFPID-1741419",
               "CSAFPID-1741411",
               "CSAFPID-1741420",
               "CSAFPID-1741407",
               "CSAFPID-1741417",
               "CSAFPID-1741430",
               "CSAFPID-1741415",
               "CSAFPID-1741422",
               "CSAFPID-1741406",
               "CSAFPID-1741416",
               "CSAFPID-1741423",
               "CSAFPID-1741414",
               "CSAFPID-1741429",
               "CSAFPID-1741410",
               "CSAFPID-1741427",
               "CSAFPID-1741424",
               "CSAFPID-1741421",
               "CSAFPID-1741431",
               "CSAFPID-1741412",
               "CSAFPID-1741426",
               "CSAFPID-1741413",
               "CSAFPID-1741432",
               "CSAFPID-1741418",
               "CSAFPID-1741405",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741425",
               "CSAFPID-1741428",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49082",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49082.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.8,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
                  "CSAFPID-1723936",
                  "CSAFPID-1723937",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
                  "CSAFPID-1723941",
                  "CSAFPID-1723942",
                  "CSAFPID-1723943",
                  "CSAFPID-1723944",
                  "CSAFPID-1723945",
                  "CSAFPID-1717820",
                  "CSAFPID-1717821",
                  "CSAFPID-1717822",
                  "CSAFPID-1717823",
                  "CSAFPID-1741419",
                  "CSAFPID-1741411",
                  "CSAFPID-1741420",
                  "CSAFPID-1741407",
                  "CSAFPID-1741417",
                  "CSAFPID-1741430",
                  "CSAFPID-1741415",
                  "CSAFPID-1741422",
                  "CSAFPID-1741406",
                  "CSAFPID-1741416",
                  "CSAFPID-1741423",
                  "CSAFPID-1741414",
                  "CSAFPID-1741429",
                  "CSAFPID-1741410",
                  "CSAFPID-1741427",
                  "CSAFPID-1741424",
                  "CSAFPID-1741421",
                  "CSAFPID-1741431",
                  "CSAFPID-1741412",
                  "CSAFPID-1741426",
                  "CSAFPID-1741413",
                  "CSAFPID-1741432",
                  "CSAFPID-1741418",
                  "CSAFPID-1741405",
                  "CSAFPID-1741408",
                  "CSAFPID-1741409",
                  "CSAFPID-1741425",
                  "CSAFPID-1741428",
               ],
            },
         ],
         title: "CVE-2024-49082",
      },
      {
         cve: "CVE-2024-49083",
         cwe: {
            id: "CWE-125",
            name: "Out-of-bounds Read",
         },
         notes: [
            {
               category: "other",
               text: "Out-of-bounds Read",
               title: "CWE-125",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1741421",
               "CSAFPID-1741414",
               "CSAFPID-1741419",
               "CSAFPID-1741416",
               "CSAFPID-1741405",
               "CSAFPID-1741417",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741420",
               "CSAFPID-1741411",
               "CSAFPID-1741413",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741415",
               "CSAFPID-1741412",
               "CSAFPID-1741418",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49083",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49083.json",
            },
         ],
         title: "CVE-2024-49083",
      },
      {
         cve: "CVE-2024-49088",
         cwe: {
            id: "CWE-126",
            name: "Buffer Over-read",
         },
         notes: [
            {
               category: "other",
               text: "Buffer Over-read",
               title: "CWE-126",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741414",
               "CSAFPID-1741430",
               "CSAFPID-1741412",
               "CSAFPID-1741417",
               "CSAFPID-1741432",
               "CSAFPID-1741406",
               "CSAFPID-1741413",
               "CSAFPID-1741423",
               "CSAFPID-1741428",
               "CSAFPID-1741422",
               "CSAFPID-1741415",
               "CSAFPID-1741407",
               "CSAFPID-1741426",
               "CSAFPID-1741424",
               "CSAFPID-1741427",
               "CSAFPID-1741405",
               "CSAFPID-1741411",
               "CSAFPID-1741420",
               "CSAFPID-1741429",
               "CSAFPID-1741431",
               "CSAFPID-1741418",
               "CSAFPID-1741425",
               "CSAFPID-1741419",
               "CSAFPID-1741410",
               "CSAFPID-1741416",
               "CSAFPID-1741408",
               "CSAFPID-1741421",
               "CSAFPID-1741409",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1723936",
               "CSAFPID-1723937",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723941",
               "CSAFPID-1723942",
               "CSAFPID-1723943",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
               "CSAFPID-1741353",
               "CSAFPID-1741354",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49088",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49088.json",
            },
         ],
         title: "CVE-2024-49088",
      },
      {
         cve: "CVE-2024-49090",
         cwe: {
            id: "CWE-822",
            name: "Untrusted Pointer Dereference",
         },
         notes: [
            {
               category: "other",
               text: "Untrusted Pointer Dereference",
               title: "CWE-822",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741428",
               "CSAFPID-1741418",
               "CSAFPID-1741424",
               "CSAFPID-1741411",
               "CSAFPID-1741427",
               "CSAFPID-1741416",
               "CSAFPID-1741421",
               "CSAFPID-1741409",
               "CSAFPID-1741413",
               "CSAFPID-1741408",
               "CSAFPID-1741406",
               "CSAFPID-1741423",
               "CSAFPID-1741430",
               "CSAFPID-1741417",
               "CSAFPID-1741407",
               "CSAFPID-1741429",
               "CSAFPID-1741412",
               "CSAFPID-1741425",
               "CSAFPID-1741405",
               "CSAFPID-1741422",
               "CSAFPID-1741415",
               "CSAFPID-1741432",
               "CSAFPID-1741419",
               "CSAFPID-1741426",
               "CSAFPID-1741414",
               "CSAFPID-1741410",
               "CSAFPID-1741420",
               "CSAFPID-1741431",
               "CSAFPID-1741353",
               "CSAFPID-1741354",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1723936",
               "CSAFPID-1723937",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723941",
               "CSAFPID-1723942",
               "CSAFPID-1723943",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49090",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49090.json",
            },
         ],
         title: "CVE-2024-49090",
      },
      {
         cve: "CVE-2024-49095",
         cwe: {
            id: "CWE-591",
            name: "Sensitive Data Storage in Improperly Locked Memory",
         },
         notes: [
            {
               category: "other",
               text: "Sensitive Data Storage in Improperly Locked Memory",
               title: "CWE-591",
            },
            {
               category: "other",
               text: "Double Free",
               title: "CWE-415",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741413",
               "CSAFPID-1741407",
               "CSAFPID-1741418",
               "CSAFPID-1741412",
               "CSAFPID-1741409",
               "CSAFPID-1741415",
               "CSAFPID-1741406",
               "CSAFPID-1741411",
               "CSAFPID-1741410",
               "CSAFPID-1741422",
               "CSAFPID-1741405",
               "CSAFPID-1741414",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741408",
               "CSAFPID-1741421",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49095",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49095.json",
            },
         ],
         title: "CVE-2024-49095",
      },
      {
         cve: "CVE-2024-49109",
         cwe: {
            id: "CWE-125",
            name: "Out-of-bounds Read",
         },
         notes: [
            {
               category: "other",
               text: "Out-of-bounds Read",
               title: "CWE-125",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741406",
               "CSAFPID-1741411",
               "CSAFPID-1741415",
               "CSAFPID-1741420",
               "CSAFPID-1741408",
               "CSAFPID-1741412",
               "CSAFPID-1741409",
               "CSAFPID-1741413",
               "CSAFPID-1741416",
               "CSAFPID-1741414",
               "CSAFPID-1741421",
               "CSAFPID-1741417",
               "CSAFPID-1741407",
               "CSAFPID-1741410",
               "CSAFPID-1741405",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49109",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49109.json",
            },
         ],
         title: "CVE-2024-49109",
      },
      {
         cve: "CVE-2024-49110",
         cwe: {
            id: "CWE-125",
            name: "Out-of-bounds Read",
         },
         notes: [
            {
               category: "other",
               text: "Out-of-bounds Read",
               title: "CWE-125",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1741419",
               "CSAFPID-1741416",
               "CSAFPID-1741410",
               "CSAFPID-1741415",
               "CSAFPID-1741406",
               "CSAFPID-1741412",
               "CSAFPID-1741417",
               "CSAFPID-1741411",
               "CSAFPID-1741408",
               "CSAFPID-1741407",
               "CSAFPID-1741405",
               "CSAFPID-1741421",
               "CSAFPID-1741409",
               "CSAFPID-1741414",
               "CSAFPID-1741413",
               "CSAFPID-1741418",
               "CSAFPID-1741420",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49110",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49110.json",
            },
         ],
         title: "CVE-2024-49110",
      },
      {
         cve: "CVE-2024-49112",
         cwe: {
            id: "CWE-190",
            name: "Integer Overflow or Wraparound",
         },
         notes: [
            {
               category: "other",
               text: "Integer Overflow or Wraparound",
               title: "CWE-190",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1723936",
               "CSAFPID-1723937",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723941",
               "CSAFPID-1723942",
               "CSAFPID-1723943",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
               "CSAFPID-1741431",
               "CSAFPID-1741406",
               "CSAFPID-1741432",
               "CSAFPID-1741408",
               "CSAFPID-1741422",
               "CSAFPID-1741423",
               "CSAFPID-1741412",
               "CSAFPID-1741427",
               "CSAFPID-1741418",
               "CSAFPID-1741407",
               "CSAFPID-1741405",
               "CSAFPID-1741429",
               "CSAFPID-1741409",
               "CSAFPID-1741428",
               "CSAFPID-1741410",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741426",
               "CSAFPID-1741424",
               "CSAFPID-1741415",
               "CSAFPID-1741421",
               "CSAFPID-1741411",
               "CSAFPID-1741430",
               "CSAFPID-1741420",
               "CSAFPID-1741413",
               "CSAFPID-1741419",
               "CSAFPID-1741414",
               "CSAFPID-1741425",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49112",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49112.json",
            },
         ],
         title: "CVE-2024-49112",
      },
      {
         cve: "CVE-2024-49113",
         cwe: {
            id: "CWE-125",
            name: "Out-of-bounds Read",
         },
         notes: [
            {
               category: "other",
               text: "Out-of-bounds Read",
               title: "CWE-125",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1723936",
               "CSAFPID-1723937",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723941",
               "CSAFPID-1723942",
               "CSAFPID-1723943",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
               "CSAFPID-1741423",
               "CSAFPID-1741426",
               "CSAFPID-1741416",
               "CSAFPID-1741409",
               "CSAFPID-1741418",
               "CSAFPID-1741427",
               "CSAFPID-1741432",
               "CSAFPID-1741414",
               "CSAFPID-1741420",
               "CSAFPID-1741411",
               "CSAFPID-1741410",
               "CSAFPID-1741405",
               "CSAFPID-1741415",
               "CSAFPID-1741428",
               "CSAFPID-1741429",
               "CSAFPID-1741425",
               "CSAFPID-1741412",
               "CSAFPID-1741422",
               "CSAFPID-1741424",
               "CSAFPID-1741406",
               "CSAFPID-1741430",
               "CSAFPID-1741413",
               "CSAFPID-1741407",
               "CSAFPID-1741417",
               "CSAFPID-1741419",
               "CSAFPID-1741431",
               "CSAFPID-1741408",
               "CSAFPID-1741421",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49113",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49113.json",
            },
         ],
         title: "CVE-2024-49113",
      },
      {
         cve: "CVE-2024-49114",
         cwe: {
            id: "CWE-820",
            name: "Missing Synchronization",
         },
         notes: [
            {
               category: "other",
               text: "Missing Synchronization",
               title: "CWE-820",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1741354",
               "CSAFPID-1741421",
               "CSAFPID-1741416",
               "CSAFPID-1741408",
               "CSAFPID-1741419",
               "CSAFPID-1741409",
               "CSAFPID-1741412",
               "CSAFPID-1741407",
               "CSAFPID-1741415",
               "CSAFPID-1741406",
               "CSAFPID-1741418",
               "CSAFPID-1741417",
               "CSAFPID-1741422",
               "CSAFPID-1741420",
               "CSAFPID-1741414",
               "CSAFPID-1741413",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741405",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49114",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49114.json",
            },
         ],
         title: "CVE-2024-49114",
      },
      {
         cve: "CVE-2024-49118",
         cwe: {
            id: "CWE-416",
            name: "Use After Free",
         },
         notes: [
            {
               category: "other",
               text: "Use After Free",
               title: "CWE-416",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741429",
               "CSAFPID-1741426",
               "CSAFPID-1741405",
               "CSAFPID-1741418",
               "CSAFPID-1741421",
               "CSAFPID-1741432",
               "CSAFPID-1741427",
               "CSAFPID-1741416",
               "CSAFPID-1741406",
               "CSAFPID-1741409",
               "CSAFPID-1741420",
               "CSAFPID-1741424",
               "CSAFPID-1741415",
               "CSAFPID-1741412",
               "CSAFPID-1741422",
               "CSAFPID-1741431",
               "CSAFPID-1741430",
               "CSAFPID-1741414",
               "CSAFPID-1741411",
               "CSAFPID-1741408",
               "CSAFPID-1741417",
               "CSAFPID-1741413",
               "CSAFPID-1741423",
               "CSAFPID-1741407",
               "CSAFPID-1741410",
               "CSAFPID-1741428",
               "CSAFPID-1741425",
               "CSAFPID-1741419",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1723936",
               "CSAFPID-1723937",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723941",
               "CSAFPID-1723942",
               "CSAFPID-1723943",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49118",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49118.json",
            },
         ],
         title: "CVE-2024-49118",
      },
      {
         cve: "CVE-2024-49127",
         cwe: {
            id: "CWE-416",
            name: "Use After Free",
         },
         notes: [
            {
               category: "other",
               text: "Use After Free",
               title: "CWE-416",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741420",
               "CSAFPID-1741408",
               "CSAFPID-1741426",
               "CSAFPID-1741416",
               "CSAFPID-1741410",
               "CSAFPID-1741430",
               "CSAFPID-1741406",
               "CSAFPID-1741423",
               "CSAFPID-1741432",
               "CSAFPID-1741418",
               "CSAFPID-1741405",
               "CSAFPID-1741407",
               "CSAFPID-1741429",
               "CSAFPID-1741415",
               "CSAFPID-1741431",
               "CSAFPID-1741427",
               "CSAFPID-1741424",
               "CSAFPID-1741421",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741417",
               "CSAFPID-1741419",
               "CSAFPID-1741414",
               "CSAFPID-1741428",
               "CSAFPID-1741425",
               "CSAFPID-1741413",
               "CSAFPID-1741409",
               "CSAFPID-1741422",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1723936",
               "CSAFPID-1723937",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723941",
               "CSAFPID-1723942",
               "CSAFPID-1723943",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49127",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49127.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741420",
                  "CSAFPID-1741408",
                  "CSAFPID-1741426",
                  "CSAFPID-1741416",
                  "CSAFPID-1741410",
                  "CSAFPID-1741430",
                  "CSAFPID-1741406",
                  "CSAFPID-1741423",
                  "CSAFPID-1741432",
                  "CSAFPID-1741418",
                  "CSAFPID-1741405",
                  "CSAFPID-1741407",
                  "CSAFPID-1741429",
                  "CSAFPID-1741415",
                  "CSAFPID-1741431",
                  "CSAFPID-1741427",
                  "CSAFPID-1741424",
                  "CSAFPID-1741421",
                  "CSAFPID-1741411",
                  "CSAFPID-1741412",
                  "CSAFPID-1741417",
                  "CSAFPID-1741419",
                  "CSAFPID-1741414",
                  "CSAFPID-1741428",
                  "CSAFPID-1741425",
                  "CSAFPID-1741413",
                  "CSAFPID-1741409",
                  "CSAFPID-1741422",
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
                  "CSAFPID-1723936",
                  "CSAFPID-1723937",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
                  "CSAFPID-1723941",
                  "CSAFPID-1723942",
                  "CSAFPID-1723943",
                  "CSAFPID-1723944",
                  "CSAFPID-1723945",
                  "CSAFPID-1717820",
                  "CSAFPID-1717821",
                  "CSAFPID-1717822",
                  "CSAFPID-1717823",
               ],
            },
         ],
         title: "CVE-2024-49127",
      },
      {
         cve: "CVE-2024-49138",
         cwe: {
            id: "CWE-122",
            name: "Heap-based Buffer Overflow",
         },
         notes: [
            {
               category: "other",
               text: "Heap-based Buffer Overflow",
               title: "CWE-122",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1723936",
               "CSAFPID-1723937",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723941",
               "CSAFPID-1723942",
               "CSAFPID-1723943",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
               "CSAFPID-549001",
               "CSAFPID-1741424",
               "CSAFPID-1741422",
               "CSAFPID-1741414",
               "CSAFPID-1741431",
               "CSAFPID-1741412",
               "CSAFPID-1741432",
               "CSAFPID-1741425",
               "CSAFPID-1741417",
               "CSAFPID-1741423",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741413",
               "CSAFPID-1741411",
               "CSAFPID-1741405",
               "CSAFPID-1741427",
               "CSAFPID-1741416",
               "CSAFPID-1741418",
               "CSAFPID-1741407",
               "CSAFPID-1741429",
               "CSAFPID-1741420",
               "CSAFPID-1741406",
               "CSAFPID-1741421",
               "CSAFPID-1741419",
               "CSAFPID-1741415",
               "CSAFPID-1741426",
               "CSAFPID-1741430",
               "CSAFPID-1741408",
               "CSAFPID-1741428",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49138",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49138.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
                  "CSAFPID-1723936",
                  "CSAFPID-1723937",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
                  "CSAFPID-1723941",
                  "CSAFPID-1723942",
                  "CSAFPID-1723943",
                  "CSAFPID-1723944",
                  "CSAFPID-1723945",
                  "CSAFPID-1717820",
                  "CSAFPID-1717821",
                  "CSAFPID-1717822",
                  "CSAFPID-1717823",
                  "CSAFPID-549001",
                  "CSAFPID-1741424",
                  "CSAFPID-1741422",
                  "CSAFPID-1741414",
                  "CSAFPID-1741431",
                  "CSAFPID-1741412",
                  "CSAFPID-1741432",
                  "CSAFPID-1741425",
                  "CSAFPID-1741417",
                  "CSAFPID-1741423",
                  "CSAFPID-1741409",
                  "CSAFPID-1741410",
                  "CSAFPID-1741413",
                  "CSAFPID-1741411",
                  "CSAFPID-1741405",
                  "CSAFPID-1741427",
                  "CSAFPID-1741416",
                  "CSAFPID-1741418",
                  "CSAFPID-1741407",
                  "CSAFPID-1741429",
                  "CSAFPID-1741420",
                  "CSAFPID-1741406",
                  "CSAFPID-1741421",
                  "CSAFPID-1741419",
                  "CSAFPID-1741415",
                  "CSAFPID-1741426",
                  "CSAFPID-1741430",
                  "CSAFPID-1741408",
                  "CSAFPID-1741428",
               ],
            },
         ],
         title: "CVE-2024-49138",
      },
      {
         cve: "CVE-2024-49085",
         cwe: {
            id: "CWE-190",
            name: "Integer Overflow or Wraparound",
         },
         notes: [
            {
               category: "other",
               text: "Integer Overflow or Wraparound",
               title: "CWE-190",
            },
            {
               category: "other",
               text: "Heap-based Buffer Overflow",
               title: "CWE-122",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741416",
               "CSAFPID-1741419",
               "CSAFPID-1741427",
               "CSAFPID-1741428",
               "CSAFPID-1741429",
               "CSAFPID-1741430",
               "CSAFPID-1741431",
               "CSAFPID-1741432",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741354",
               "CSAFPID-1741352",
               "CSAFPID-1741353",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723941",
               "CSAFPID-1723942",
               "CSAFPID-1723943",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49085",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49085.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741407",
                  "CSAFPID-1741422",
                  "CSAFPID-1741416",
                  "CSAFPID-1741419",
                  "CSAFPID-1741427",
                  "CSAFPID-1741428",
                  "CSAFPID-1741429",
                  "CSAFPID-1741430",
                  "CSAFPID-1741431",
                  "CSAFPID-1741432",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741354",
                  "CSAFPID-1741352",
                  "CSAFPID-1741353",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
                  "CSAFPID-1723941",
                  "CSAFPID-1723942",
                  "CSAFPID-1723943",
                  "CSAFPID-1723944",
                  "CSAFPID-1723945",
                  "CSAFPID-1717820",
                  "CSAFPID-1717821",
                  "CSAFPID-1717822",
                  "CSAFPID-1717823",
               ],
            },
         ],
         title: "CVE-2024-49085",
      },
      {
         cve: "CVE-2024-49086",
         cwe: {
            id: "CWE-122",
            name: "Heap-based Buffer Overflow",
         },
         notes: [
            {
               category: "other",
               text: "Heap-based Buffer Overflow",
               title: "CWE-122",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741416",
               "CSAFPID-1741419",
               "CSAFPID-1741427",
               "CSAFPID-1741428",
               "CSAFPID-1741429",
               "CSAFPID-1741430",
               "CSAFPID-1741431",
               "CSAFPID-1741432",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741354",
               "CSAFPID-1741352",
               "CSAFPID-1741353",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723941",
               "CSAFPID-1723942",
               "CSAFPID-1723943",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49086",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49086.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741407",
                  "CSAFPID-1741422",
                  "CSAFPID-1741416",
                  "CSAFPID-1741419",
                  "CSAFPID-1741427",
                  "CSAFPID-1741428",
                  "CSAFPID-1741429",
                  "CSAFPID-1741430",
                  "CSAFPID-1741431",
                  "CSAFPID-1741432",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741354",
                  "CSAFPID-1741352",
                  "CSAFPID-1741353",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
                  "CSAFPID-1723941",
                  "CSAFPID-1723942",
                  "CSAFPID-1723943",
                  "CSAFPID-1723944",
                  "CSAFPID-1723945",
                  "CSAFPID-1717820",
                  "CSAFPID-1717821",
                  "CSAFPID-1717822",
                  "CSAFPID-1717823",
               ],
            },
         ],
         title: "CVE-2024-49086",
      },
      {
         cve: "CVE-2024-49091",
         cwe: {
            id: "CWE-591",
            name: "Sensitive Data Storage in Improperly Locked Memory",
         },
         notes: [
            {
               category: "other",
               text: "Sensitive Data Storage in Improperly Locked Memory",
               title: "CWE-591",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741416",
               "CSAFPID-1741419",
               "CSAFPID-1741427",
               "CSAFPID-1741431",
               "CSAFPID-1741432",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741354",
               "CSAFPID-1741352",
               "CSAFPID-1741353",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49091",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49091.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.2,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741407",
                  "CSAFPID-1741422",
                  "CSAFPID-1741416",
                  "CSAFPID-1741419",
                  "CSAFPID-1741427",
                  "CSAFPID-1741431",
                  "CSAFPID-1741432",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741354",
                  "CSAFPID-1741352",
                  "CSAFPID-1741353",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
                  "CSAFPID-1717820",
                  "CSAFPID-1717821",
                  "CSAFPID-1717822",
                  "CSAFPID-1717823",
               ],
            },
         ],
         title: "CVE-2024-49091",
      },
      {
         cve: "CVE-2024-49106",
         cwe: {
            id: "CWE-591",
            name: "Sensitive Data Storage in Improperly Locked Memory",
         },
         notes: [
            {
               category: "other",
               text: "Sensitive Data Storage in Improperly Locked Memory",
               title: "CWE-591",
            },
            {
               category: "other",
               text: "Use After Free",
               title: "CWE-416",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741416",
               "CSAFPID-1741419",
               "CSAFPID-1741427",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741354",
               "CSAFPID-1741352",
               "CSAFPID-1741353",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49106",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49106.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741407",
                  "CSAFPID-1741422",
                  "CSAFPID-1741416",
                  "CSAFPID-1741419",
                  "CSAFPID-1741427",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741354",
                  "CSAFPID-1741352",
                  "CSAFPID-1741353",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
               ],
            },
         ],
         title: "CVE-2024-49106",
      },
      {
         cve: "CVE-2024-49108",
         cwe: {
            id: "CWE-591",
            name: "Sensitive Data Storage in Improperly Locked Memory",
         },
         notes: [
            {
               category: "other",
               text: "Sensitive Data Storage in Improperly Locked Memory",
               title: "CWE-591",
            },
            {
               category: "other",
               text: "Use After Free",
               title: "CWE-416",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741416",
               "CSAFPID-1741419",
               "CSAFPID-1741427",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741354",
               "CSAFPID-1741352",
               "CSAFPID-1741353",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49108",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49108.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741407",
                  "CSAFPID-1741422",
                  "CSAFPID-1741416",
                  "CSAFPID-1741419",
                  "CSAFPID-1741427",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741354",
                  "CSAFPID-1741352",
                  "CSAFPID-1741353",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
               ],
            },
         ],
         title: "CVE-2024-49108",
      },
      {
         cve: "CVE-2024-49115",
         cwe: {
            id: "CWE-591",
            name: "Sensitive Data Storage in Improperly Locked Memory",
         },
         notes: [
            {
               category: "other",
               text: "Sensitive Data Storage in Improperly Locked Memory",
               title: "CWE-591",
            },
            {
               category: "other",
               text: "Use After Free",
               title: "CWE-416",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741416",
               "CSAFPID-1741419",
               "CSAFPID-1741427",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741354",
               "CSAFPID-1741352",
               "CSAFPID-1741353",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49115",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49115.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741407",
                  "CSAFPID-1741422",
                  "CSAFPID-1741416",
                  "CSAFPID-1741419",
                  "CSAFPID-1741427",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741354",
                  "CSAFPID-1741352",
                  "CSAFPID-1741353",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
               ],
            },
         ],
         title: "CVE-2024-49115",
      },
      {
         cve: "CVE-2024-49119",
         cwe: {
            id: "CWE-843",
            name: "Access of Resource Using Incompatible Type ('Type Confusion')",
         },
         notes: [
            {
               category: "other",
               text: "Access of Resource Using Incompatible Type ('Type Confusion')",
               title: "CWE-843",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741416",
               "CSAFPID-1741419",
               "CSAFPID-1741427",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741354",
               "CSAFPID-1741352",
               "CSAFPID-1741353",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49119",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49119.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741407",
                  "CSAFPID-1741422",
                  "CSAFPID-1741416",
                  "CSAFPID-1741419",
                  "CSAFPID-1741427",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741354",
                  "CSAFPID-1741352",
                  "CSAFPID-1741353",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
               ],
            },
         ],
         title: "CVE-2024-49119",
      },
      {
         cve: "CVE-2024-49120",
         cwe: {
            id: "CWE-453",
            name: "Insecure Default Variable Initialization",
         },
         notes: [
            {
               category: "other",
               text: "Insecure Default Variable Initialization",
               title: "CWE-453",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741416",
               "CSAFPID-1741419",
               "CSAFPID-1741427",
               "CSAFPID-1741431",
               "CSAFPID-1741432",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741354",
               "CSAFPID-1741352",
               "CSAFPID-1741353",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49120",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49120.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741407",
                  "CSAFPID-1741422",
                  "CSAFPID-1741416",
                  "CSAFPID-1741419",
                  "CSAFPID-1741427",
                  "CSAFPID-1741431",
                  "CSAFPID-1741432",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741354",
                  "CSAFPID-1741352",
                  "CSAFPID-1741353",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
                  "CSAFPID-1717820",
                  "CSAFPID-1717821",
                  "CSAFPID-1717822",
                  "CSAFPID-1717823",
               ],
            },
         ],
         title: "CVE-2024-49120",
      },
      {
         cve: "CVE-2024-49125",
         cwe: {
            id: "CWE-122",
            name: "Heap-based Buffer Overflow",
         },
         notes: [
            {
               category: "other",
               text: "Heap-based Buffer Overflow",
               title: "CWE-122",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741416",
               "CSAFPID-1741419",
               "CSAFPID-1741427",
               "CSAFPID-1741428",
               "CSAFPID-1741429",
               "CSAFPID-1741430",
               "CSAFPID-1741431",
               "CSAFPID-1741432",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741354",
               "CSAFPID-1741352",
               "CSAFPID-1741353",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723941",
               "CSAFPID-1723942",
               "CSAFPID-1723943",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49125",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49125.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741407",
                  "CSAFPID-1741422",
                  "CSAFPID-1741416",
                  "CSAFPID-1741419",
                  "CSAFPID-1741427",
                  "CSAFPID-1741428",
                  "CSAFPID-1741429",
                  "CSAFPID-1741430",
                  "CSAFPID-1741431",
                  "CSAFPID-1741432",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741354",
                  "CSAFPID-1741352",
                  "CSAFPID-1741353",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
                  "CSAFPID-1723941",
                  "CSAFPID-1723942",
                  "CSAFPID-1723943",
                  "CSAFPID-1723944",
                  "CSAFPID-1723945",
                  "CSAFPID-1717820",
                  "CSAFPID-1717821",
                  "CSAFPID-1717822",
                  "CSAFPID-1717823",
               ],
            },
         ],
         title: "CVE-2024-49125",
      },
      {
         cve: "CVE-2024-49129",
         cwe: {
            id: "CWE-400",
            name: "Uncontrolled Resource Consumption",
         },
         notes: [
            {
               category: "other",
               text: "Uncontrolled Resource Consumption",
               title: "CWE-400",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741416",
               "CSAFPID-1741419",
               "CSAFPID-1741427",
               "CSAFPID-1741431",
               "CSAFPID-1741432",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741354",
               "CSAFPID-1741352",
               "CSAFPID-1741353",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49129",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49129.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741407",
                  "CSAFPID-1741422",
                  "CSAFPID-1741416",
                  "CSAFPID-1741419",
                  "CSAFPID-1741427",
                  "CSAFPID-1741431",
                  "CSAFPID-1741432",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741354",
                  "CSAFPID-1741352",
                  "CSAFPID-1741353",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
                  "CSAFPID-1717820",
                  "CSAFPID-1717821",
                  "CSAFPID-1717822",
                  "CSAFPID-1717823",
               ],
            },
         ],
         title: "CVE-2024-49129",
      },
      {
         cve: "CVE-2024-49116",
         cwe: {
            id: "CWE-416",
            name: "Use After Free",
         },
         notes: [
            {
               category: "other",
               text: "Use After Free",
               title: "CWE-416",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741354",
               "CSAFPID-1741352",
               "CSAFPID-1741353",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1741407",
               "CSAFPID-1741416",
               "CSAFPID-1741427",
               "CSAFPID-1741422",
               "CSAFPID-1741419",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49116",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49116.json",
            },
         ],
         title: "CVE-2024-49116",
      },
      {
         cve: "CVE-2024-49128",
         cwe: {
            id: "CWE-591",
            name: "Sensitive Data Storage in Improperly Locked Memory",
         },
         notes: [
            {
               category: "other",
               text: "Sensitive Data Storage in Improperly Locked Memory",
               title: "CWE-591",
            },
            {
               category: "other",
               text: "Use After Free",
               title: "CWE-416",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741432",
               "CSAFPID-1741416",
               "CSAFPID-1741407",
               "CSAFPID-1741427",
               "CSAFPID-1741431",
               "CSAFPID-1741419",
               "CSAFPID-1741422",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741354",
               "CSAFPID-1741352",
               "CSAFPID-1741353",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49128",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49128.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741432",
                  "CSAFPID-1741416",
                  "CSAFPID-1741407",
                  "CSAFPID-1741427",
                  "CSAFPID-1741431",
                  "CSAFPID-1741419",
                  "CSAFPID-1741422",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741354",
                  "CSAFPID-1741352",
                  "CSAFPID-1741353",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
                  "CSAFPID-1717820",
                  "CSAFPID-1717821",
                  "CSAFPID-1717822",
                  "CSAFPID-1717823",
               ],
            },
         ],
         title: "CVE-2024-49128",
      },
      {
         cve: "CVE-2024-49117",
         cwe: {
            id: "CWE-393",
            name: "Return of Wrong Status Code",
         },
         notes: [
            {
               category: "other",
               text: "Return of Wrong Status Code",
               title: "CWE-393",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741422",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1717810",
               "CSAFPID-1741367",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49117",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49117.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741422",
                  "CSAFPID-1741411",
                  "CSAFPID-1741412",
                  "CSAFPID-1741416",
                  "CSAFPID-1741417",
                  "CSAFPID-1741418",
                  "CSAFPID-1741419",
                  "CSAFPID-1741420",
                  "CSAFPID-1741421",
                  "CSAFPID-1717810",
                  "CSAFPID-1741367",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
               ],
            },
         ],
         title: "CVE-2024-49117",
      },
      {
         cve: "CVE-2024-49093",
         cwe: {
            id: "CWE-681",
            name: "Incorrect Conversion between Numeric Types",
         },
         notes: [
            {
               category: "other",
               text: "Incorrect Conversion between Numeric Types",
               title: "CWE-681",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741416",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1741353",
               "CSAFPID-1741354",
               "CSAFPID-1741371",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49093",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49093.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741416",
                  "CSAFPID-1741420",
                  "CSAFPID-1741421",
                  "CSAFPID-1741353",
                  "CSAFPID-1741354",
                  "CSAFPID-1741371",
               ],
            },
         ],
         title: "CVE-2024-49093",
      },
      {
         cve: "CVE-2024-43594",
         cwe: {
            id: "CWE-284",
            name: "Improper Access Control",
         },
         notes: [
            {
               category: "other",
               text: "Improper Access Control",
               title: "CWE-284",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-618487",
               "CSAFPID-634172",
               "CSAFPID-1741404",
               "CSAFPID-1718165",
               "CSAFPID-1718167",
               "CSAFPID-1741485",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-43594",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-43594.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.3,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-618487",
                  "CSAFPID-634172",
                  "CSAFPID-1741404",
                  "CSAFPID-1718165",
                  "CSAFPID-1718167",
                  "CSAFPID-1741485",
               ],
            },
         ],
         title: "CVE-2024-43594",
      },
      {
         cve: "CVE-2024-49073",
         cwe: {
            id: "CWE-20",
            name: "Improper Input Validation",
         },
         notes: [
            {
               category: "other",
               text: "Improper Input Validation",
               title: "CWE-20",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49073",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49073.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.8,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741405",
                  "CSAFPID-1741406",
                  "CSAFPID-1741407",
                  "CSAFPID-1741408",
                  "CSAFPID-1741409",
                  "CSAFPID-1741410",
                  "CSAFPID-1741411",
                  "CSAFPID-1741412",
                  "CSAFPID-1741413",
                  "CSAFPID-1741414",
                  "CSAFPID-1741415",
                  "CSAFPID-1741416",
                  "CSAFPID-1741417",
                  "CSAFPID-1741418",
                  "CSAFPID-1741419",
                  "CSAFPID-1741420",
                  "CSAFPID-1741421",
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
               ],
            },
         ],
         title: "CVE-2024-49073",
      },
      {
         cve: "CVE-2024-49074",
         cwe: {
            id: "CWE-416",
            name: "Use After Free",
         },
         notes: [
            {
               category: "other",
               text: "Use After Free",
               title: "CWE-416",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1741366",
               "CSAFPID-1741368",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49074",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49074.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741405",
                  "CSAFPID-1741406",
                  "CSAFPID-1741407",
                  "CSAFPID-1741408",
                  "CSAFPID-1741409",
                  "CSAFPID-1741410",
                  "CSAFPID-1741413",
                  "CSAFPID-1741414",
                  "CSAFPID-1741415",
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1741366",
                  "CSAFPID-1741368",
               ],
            },
         ],
         title: "CVE-2024-49074",
      },
      {
         cve: "CVE-2024-49084",
         cwe: {
            id: "CWE-362",
            name: "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')",
         },
         notes: [
            {
               category: "other",
               text: "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')",
               title: "CWE-362",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1741423",
               "CSAFPID-1741424",
               "CSAFPID-1741425",
               "CSAFPID-1741426",
               "CSAFPID-1741427",
               "CSAFPID-1741428",
               "CSAFPID-1741429",
               "CSAFPID-1741430",
               "CSAFPID-1741431",
               "CSAFPID-1741432",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1723936",
               "CSAFPID-1723937",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723941",
               "CSAFPID-1723942",
               "CSAFPID-1723943",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49084",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49084.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741405",
                  "CSAFPID-1741406",
                  "CSAFPID-1741407",
                  "CSAFPID-1741422",
                  "CSAFPID-1741408",
                  "CSAFPID-1741409",
                  "CSAFPID-1741410",
                  "CSAFPID-1741411",
                  "CSAFPID-1741412",
                  "CSAFPID-1741413",
                  "CSAFPID-1741414",
                  "CSAFPID-1741415",
                  "CSAFPID-1741416",
                  "CSAFPID-1741417",
                  "CSAFPID-1741418",
                  "CSAFPID-1741419",
                  "CSAFPID-1741420",
                  "CSAFPID-1741421",
                  "CSAFPID-1741423",
                  "CSAFPID-1741424",
                  "CSAFPID-1741425",
                  "CSAFPID-1741426",
                  "CSAFPID-1741427",
                  "CSAFPID-1741428",
                  "CSAFPID-1741429",
                  "CSAFPID-1741430",
                  "CSAFPID-1741431",
                  "CSAFPID-1741432",
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
                  "CSAFPID-1723936",
                  "CSAFPID-1723937",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
                  "CSAFPID-1723941",
                  "CSAFPID-1723942",
                  "CSAFPID-1723943",
                  "CSAFPID-1723944",
                  "CSAFPID-1723945",
                  "CSAFPID-1717820",
                  "CSAFPID-1717821",
                  "CSAFPID-1717822",
                  "CSAFPID-1717823",
               ],
            },
         ],
         title: "CVE-2024-49084",
      },
      {
         cve: "CVE-2024-49087",
         cwe: {
            id: "CWE-20",
            name: "Improper Input Validation",
         },
         notes: [
            {
               category: "other",
               text: "Improper Input Validation",
               title: "CWE-20",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49087",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49087.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.6,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741405",
                  "CSAFPID-1741406",
                  "CSAFPID-1741407",
                  "CSAFPID-1741408",
                  "CSAFPID-1741409",
                  "CSAFPID-1741410",
                  "CSAFPID-1741411",
                  "CSAFPID-1741412",
                  "CSAFPID-1741413",
                  "CSAFPID-1741414",
                  "CSAFPID-1741415",
                  "CSAFPID-1741416",
                  "CSAFPID-1741417",
                  "CSAFPID-1741418",
                  "CSAFPID-1741419",
                  "CSAFPID-1741420",
                  "CSAFPID-1741421",
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
               ],
            },
         ],
         title: "CVE-2024-49087",
      },
      {
         cve: "CVE-2024-49089",
         cwe: {
            id: "CWE-190",
            name: "Integer Overflow or Wraparound",
         },
         notes: [
            {
               category: "other",
               text: "Integer Overflow or Wraparound",
               title: "CWE-190",
            },
            {
               category: "other",
               text: "Heap-based Buffer Overflow",
               title: "CWE-122",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1741423",
               "CSAFPID-1741424",
               "CSAFPID-1741425",
               "CSAFPID-1741426",
               "CSAFPID-1741427",
               "CSAFPID-1741428",
               "CSAFPID-1741429",
               "CSAFPID-1741430",
               "CSAFPID-1741431",
               "CSAFPID-1741432",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1723936",
               "CSAFPID-1723937",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723941",
               "CSAFPID-1723942",
               "CSAFPID-1723943",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49089",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49089.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.2,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741405",
                  "CSAFPID-1741406",
                  "CSAFPID-1741407",
                  "CSAFPID-1741422",
                  "CSAFPID-1741408",
                  "CSAFPID-1741409",
                  "CSAFPID-1741410",
                  "CSAFPID-1741411",
                  "CSAFPID-1741412",
                  "CSAFPID-1741413",
                  "CSAFPID-1741414",
                  "CSAFPID-1741415",
                  "CSAFPID-1741416",
                  "CSAFPID-1741417",
                  "CSAFPID-1741418",
                  "CSAFPID-1741419",
                  "CSAFPID-1741420",
                  "CSAFPID-1741421",
                  "CSAFPID-1741423",
                  "CSAFPID-1741424",
                  "CSAFPID-1741425",
                  "CSAFPID-1741426",
                  "CSAFPID-1741427",
                  "CSAFPID-1741428",
                  "CSAFPID-1741429",
                  "CSAFPID-1741430",
                  "CSAFPID-1741431",
                  "CSAFPID-1741432",
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
                  "CSAFPID-1723936",
                  "CSAFPID-1723937",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
                  "CSAFPID-1723941",
                  "CSAFPID-1723942",
                  "CSAFPID-1723943",
                  "CSAFPID-1723944",
                  "CSAFPID-1723945",
                  "CSAFPID-1717820",
                  "CSAFPID-1717821",
                  "CSAFPID-1717822",
                  "CSAFPID-1717823",
               ],
            },
         ],
         title: "CVE-2024-49089",
      },
      {
         cve: "CVE-2024-49092",
         cwe: {
            id: "CWE-125",
            name: "Out-of-bounds Read",
         },
         notes: [
            {
               category: "other",
               text: "Out-of-bounds Read",
               title: "CWE-125",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49092",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49092.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.8,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741405",
                  "CSAFPID-1741406",
                  "CSAFPID-1741407",
                  "CSAFPID-1741408",
                  "CSAFPID-1741409",
                  "CSAFPID-1741410",
                  "CSAFPID-1741411",
                  "CSAFPID-1741412",
                  "CSAFPID-1741413",
                  "CSAFPID-1741414",
                  "CSAFPID-1741415",
                  "CSAFPID-1741416",
                  "CSAFPID-1741417",
                  "CSAFPID-1741418",
                  "CSAFPID-1741419",
                  "CSAFPID-1741420",
                  "CSAFPID-1741421",
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
               ],
            },
         ],
         title: "CVE-2024-49092",
      },
      {
         cve: "CVE-2024-49094",
         cwe: {
            id: "CWE-122",
            name: "Heap-based Buffer Overflow",
         },
         notes: [
            {
               category: "other",
               text: "Heap-based Buffer Overflow",
               title: "CWE-122",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49094",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49094.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.6,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741405",
                  "CSAFPID-1741406",
                  "CSAFPID-1741407",
                  "CSAFPID-1741408",
                  "CSAFPID-1741409",
                  "CSAFPID-1741410",
                  "CSAFPID-1741411",
                  "CSAFPID-1741412",
                  "CSAFPID-1741413",
                  "CSAFPID-1741414",
                  "CSAFPID-1741415",
                  "CSAFPID-1741416",
                  "CSAFPID-1741417",
                  "CSAFPID-1741418",
                  "CSAFPID-1741419",
                  "CSAFPID-1741420",
                  "CSAFPID-1741421",
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
               ],
            },
         ],
         title: "CVE-2024-49094",
      },
      {
         cve: "CVE-2024-49096",
         cwe: {
            id: "CWE-400",
            name: "Uncontrolled Resource Consumption",
         },
         notes: [
            {
               category: "other",
               text: "Uncontrolled Resource Consumption",
               title: "CWE-400",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1741423",
               "CSAFPID-1741424",
               "CSAFPID-1741425",
               "CSAFPID-1741426",
               "CSAFPID-1741427",
               "CSAFPID-1741428",
               "CSAFPID-1741429",
               "CSAFPID-1741430",
               "CSAFPID-1741431",
               "CSAFPID-1741432",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1723936",
               "CSAFPID-1723937",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723941",
               "CSAFPID-1723942",
               "CSAFPID-1723943",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49096",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49096.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741405",
                  "CSAFPID-1741406",
                  "CSAFPID-1741407",
                  "CSAFPID-1741422",
                  "CSAFPID-1741408",
                  "CSAFPID-1741409",
                  "CSAFPID-1741410",
                  "CSAFPID-1741411",
                  "CSAFPID-1741412",
                  "CSAFPID-1741413",
                  "CSAFPID-1741414",
                  "CSAFPID-1741415",
                  "CSAFPID-1741416",
                  "CSAFPID-1741417",
                  "CSAFPID-1741418",
                  "CSAFPID-1741419",
                  "CSAFPID-1741420",
                  "CSAFPID-1741421",
                  "CSAFPID-1741423",
                  "CSAFPID-1741424",
                  "CSAFPID-1741425",
                  "CSAFPID-1741426",
                  "CSAFPID-1741427",
                  "CSAFPID-1741428",
                  "CSAFPID-1741429",
                  "CSAFPID-1741430",
                  "CSAFPID-1741431",
                  "CSAFPID-1741432",
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
                  "CSAFPID-1723936",
                  "CSAFPID-1723937",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
                  "CSAFPID-1723941",
                  "CSAFPID-1723942",
                  "CSAFPID-1723943",
                  "CSAFPID-1723944",
                  "CSAFPID-1723945",
                  "CSAFPID-1717820",
                  "CSAFPID-1717821",
                  "CSAFPID-1717822",
                  "CSAFPID-1717823",
               ],
            },
         ],
         title: "CVE-2024-49096",
      },
      {
         cve: "CVE-2024-49097",
         cwe: {
            id: "CWE-591",
            name: "Sensitive Data Storage in Improperly Locked Memory",
         },
         notes: [
            {
               category: "other",
               text: "Sensitive Data Storage in Improperly Locked Memory",
               title: "CWE-591",
            },
            {
               category: "other",
               text: "Use After Free",
               title: "CWE-416",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49097",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49097.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741405",
                  "CSAFPID-1741406",
                  "CSAFPID-1741407",
                  "CSAFPID-1741422",
                  "CSAFPID-1741408",
                  "CSAFPID-1741409",
                  "CSAFPID-1741410",
                  "CSAFPID-1741411",
                  "CSAFPID-1741412",
                  "CSAFPID-1741413",
                  "CSAFPID-1741414",
                  "CSAFPID-1741415",
                  "CSAFPID-1741416",
                  "CSAFPID-1741417",
                  "CSAFPID-1741418",
                  "CSAFPID-1741419",
                  "CSAFPID-1741420",
                  "CSAFPID-1741421",
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
               ],
            },
         ],
         title: "CVE-2024-49097",
      },
      {
         cve: "CVE-2024-49098",
         cwe: {
            id: "CWE-125",
            name: "Out-of-bounds Read",
         },
         notes: [
            {
               category: "other",
               text: "Out-of-bounds Read",
               title: "CWE-125",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49098",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49098.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741405",
                  "CSAFPID-1741406",
                  "CSAFPID-1741407",
                  "CSAFPID-1741408",
                  "CSAFPID-1741409",
                  "CSAFPID-1741410",
                  "CSAFPID-1741411",
                  "CSAFPID-1741412",
                  "CSAFPID-1741413",
                  "CSAFPID-1741414",
                  "CSAFPID-1741415",
                  "CSAFPID-1741416",
                  "CSAFPID-1741417",
                  "CSAFPID-1741418",
                  "CSAFPID-1741419",
                  "CSAFPID-1741420",
                  "CSAFPID-1741421",
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
               ],
            },
         ],
         title: "CVE-2024-49098",
      },
      {
         cve: "CVE-2024-49099",
         cwe: {
            id: "CWE-125",
            name: "Out-of-bounds Read",
         },
         notes: [
            {
               category: "other",
               text: "Out-of-bounds Read",
               title: "CWE-125",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49099",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49099.json",
            },
         ],
         title: "CVE-2024-49099",
      },
      {
         cve: "CVE-2024-49101",
         cwe: {
            id: "CWE-125",
            name: "Out-of-bounds Read",
         },
         notes: [
            {
               category: "other",
               text: "Out-of-bounds Read",
               title: "CWE-125",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49101",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49101.json",
            },
         ],
         title: "CVE-2024-49101",
      },
      {
         cve: "CVE-2024-49102",
         cwe: {
            id: "CWE-122",
            name: "Heap-based Buffer Overflow",
         },
         notes: [
            {
               category: "other",
               text: "Heap-based Buffer Overflow",
               title: "CWE-122",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1741423",
               "CSAFPID-1741424",
               "CSAFPID-1741425",
               "CSAFPID-1741426",
               "CSAFPID-1741427",
               "CSAFPID-1741428",
               "CSAFPID-1741429",
               "CSAFPID-1741430",
               "CSAFPID-1741431",
               "CSAFPID-1741432",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1723936",
               "CSAFPID-1723937",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723941",
               "CSAFPID-1723942",
               "CSAFPID-1723943",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49102",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49102.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741405",
                  "CSAFPID-1741406",
                  "CSAFPID-1741407",
                  "CSAFPID-1741422",
                  "CSAFPID-1741408",
                  "CSAFPID-1741409",
                  "CSAFPID-1741410",
                  "CSAFPID-1741411",
                  "CSAFPID-1741412",
                  "CSAFPID-1741413",
                  "CSAFPID-1741414",
                  "CSAFPID-1741415",
                  "CSAFPID-1741416",
                  "CSAFPID-1741417",
                  "CSAFPID-1741418",
                  "CSAFPID-1741419",
                  "CSAFPID-1741420",
                  "CSAFPID-1741421",
                  "CSAFPID-1741423",
                  "CSAFPID-1741424",
                  "CSAFPID-1741425",
                  "CSAFPID-1741426",
                  "CSAFPID-1741427",
                  "CSAFPID-1741428",
                  "CSAFPID-1741429",
                  "CSAFPID-1741430",
                  "CSAFPID-1741431",
                  "CSAFPID-1741432",
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
                  "CSAFPID-1723936",
                  "CSAFPID-1723937",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
                  "CSAFPID-1723941",
                  "CSAFPID-1723942",
                  "CSAFPID-1723943",
                  "CSAFPID-1723944",
                  "CSAFPID-1723945",
                  "CSAFPID-1717820",
                  "CSAFPID-1717821",
                  "CSAFPID-1717822",
                  "CSAFPID-1717823",
               ],
            },
         ],
         title: "CVE-2024-49102",
      },
      {
         cve: "CVE-2024-49103",
         cwe: {
            id: "CWE-191",
            name: "Integer Underflow (Wrap or Wraparound)",
         },
         notes: [
            {
               category: "other",
               text: "Integer Underflow (Wrap or Wraparound)",
               title: "CWE-191",
            },
            {
               category: "other",
               text: "Out-of-bounds Read",
               title: "CWE-125",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49103",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49103.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741405",
                  "CSAFPID-1741406",
                  "CSAFPID-1741407",
                  "CSAFPID-1741408",
                  "CSAFPID-1741409",
                  "CSAFPID-1741410",
                  "CSAFPID-1741411",
                  "CSAFPID-1741412",
                  "CSAFPID-1741413",
                  "CSAFPID-1741414",
                  "CSAFPID-1741415",
                  "CSAFPID-1741416",
                  "CSAFPID-1741417",
                  "CSAFPID-1741418",
                  "CSAFPID-1741419",
                  "CSAFPID-1741420",
                  "CSAFPID-1741421",
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
               ],
            },
         ],
         title: "CVE-2024-49103",
      },
      {
         cve: "CVE-2024-49104",
         cwe: {
            id: "CWE-122",
            name: "Heap-based Buffer Overflow",
         },
         notes: [
            {
               category: "other",
               text: "Heap-based Buffer Overflow",
               title: "CWE-122",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1741423",
               "CSAFPID-1741424",
               "CSAFPID-1741425",
               "CSAFPID-1741426",
               "CSAFPID-1741427",
               "CSAFPID-1741428",
               "CSAFPID-1741429",
               "CSAFPID-1741430",
               "CSAFPID-1741431",
               "CSAFPID-1741432",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1723936",
               "CSAFPID-1723937",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723941",
               "CSAFPID-1723942",
               "CSAFPID-1723943",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49104",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49104.json",
            },
         ],
         title: "CVE-2024-49104",
      },
      {
         cve: "CVE-2024-49105",
         cwe: {
            id: "CWE-284",
            name: "Improper Access Control",
         },
         notes: [
            {
               category: "other",
               text: "Improper Access Control",
               title: "CWE-284",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1723936",
               "CSAFPID-1723937",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
               "CSAFPID-1741419",
               "CSAFPID-1741423",
               "CSAFPID-1741408",
               "CSAFPID-1741411",
               "CSAFPID-1741430",
               "CSAFPID-1741426",
               "CSAFPID-1741432",
               "CSAFPID-1741413",
               "CSAFPID-1741415",
               "CSAFPID-1741410",
               "CSAFPID-1741406",
               "CSAFPID-1741424",
               "CSAFPID-1741409",
               "CSAFPID-1741421",
               "CSAFPID-1741417",
               "CSAFPID-1741407",
               "CSAFPID-1741427",
               "CSAFPID-1741412",
               "CSAFPID-1741416",
               "CSAFPID-1741418",
               "CSAFPID-1741431",
               "CSAFPID-1741405",
               "CSAFPID-1741422",
               "CSAFPID-1741420",
               "CSAFPID-1741414",
               "CSAFPID-1741425",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49105",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49105.json",
            },
         ],
         title: "CVE-2024-49105",
      },
      {
         cve: "CVE-2024-49107",
         cwe: {
            id: "CWE-59",
            name: "Improper Link Resolution Before File Access ('Link Following')",
         },
         notes: [
            {
               category: "other",
               text: "Improper Link Resolution Before File Access ('Link Following')",
               title: "CWE-59",
            },
            {
               category: "other",
               text: "Improper Access Control",
               title: "CWE-284",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1741423",
               "CSAFPID-1741424",
               "CSAFPID-1741425",
               "CSAFPID-1741426",
               "CSAFPID-1741427",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1723936",
               "CSAFPID-1723937",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49107",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49107.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.3,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741405",
                  "CSAFPID-1741406",
                  "CSAFPID-1741407",
                  "CSAFPID-1741422",
                  "CSAFPID-1741408",
                  "CSAFPID-1741409",
                  "CSAFPID-1741410",
                  "CSAFPID-1741411",
                  "CSAFPID-1741412",
                  "CSAFPID-1741413",
                  "CSAFPID-1741414",
                  "CSAFPID-1741415",
                  "CSAFPID-1741416",
                  "CSAFPID-1741417",
                  "CSAFPID-1741418",
                  "CSAFPID-1741419",
                  "CSAFPID-1741420",
                  "CSAFPID-1741421",
                  "CSAFPID-1741423",
                  "CSAFPID-1741424",
                  "CSAFPID-1741425",
                  "CSAFPID-1741426",
                  "CSAFPID-1741427",
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
                  "CSAFPID-1723936",
                  "CSAFPID-1723937",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
               ],
            },
         ],
         title: "CVE-2024-49107",
      },
      {
         cve: "CVE-2024-49111",
         cwe: {
            id: "CWE-125",
            name: "Out-of-bounds Read",
         },
         notes: [
            {
               category: "other",
               text: "Out-of-bounds Read",
               title: "CWE-125",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49111",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49111.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.6,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741405",
                  "CSAFPID-1741406",
                  "CSAFPID-1741407",
                  "CSAFPID-1741408",
                  "CSAFPID-1741409",
                  "CSAFPID-1741410",
                  "CSAFPID-1741411",
                  "CSAFPID-1741412",
                  "CSAFPID-1741413",
                  "CSAFPID-1741414",
                  "CSAFPID-1741415",
                  "CSAFPID-1741416",
                  "CSAFPID-1741417",
                  "CSAFPID-1741418",
                  "CSAFPID-1741419",
                  "CSAFPID-1741420",
                  "CSAFPID-1741421",
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
               ],
            },
         ],
         title: "CVE-2024-49111",
      },
      {
         cve: "CVE-2024-49121",
         cwe: {
            id: "CWE-476",
            name: "NULL Pointer Dereference",
         },
         notes: [
            {
               category: "other",
               text: "NULL Pointer Dereference",
               title: "CWE-476",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1741423",
               "CSAFPID-1741424",
               "CSAFPID-1741425",
               "CSAFPID-1741426",
               "CSAFPID-1741427",
               "CSAFPID-1741428",
               "CSAFPID-1741429",
               "CSAFPID-1741430",
               "CSAFPID-1741431",
               "CSAFPID-1741432",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1723936",
               "CSAFPID-1723937",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723941",
               "CSAFPID-1723942",
               "CSAFPID-1723943",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49121",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49121.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741405",
                  "CSAFPID-1741406",
                  "CSAFPID-1741407",
                  "CSAFPID-1741422",
                  "CSAFPID-1741408",
                  "CSAFPID-1741409",
                  "CSAFPID-1741410",
                  "CSAFPID-1741411",
                  "CSAFPID-1741412",
                  "CSAFPID-1741413",
                  "CSAFPID-1741414",
                  "CSAFPID-1741415",
                  "CSAFPID-1741416",
                  "CSAFPID-1741417",
                  "CSAFPID-1741418",
                  "CSAFPID-1741419",
                  "CSAFPID-1741420",
                  "CSAFPID-1741421",
                  "CSAFPID-1741423",
                  "CSAFPID-1741424",
                  "CSAFPID-1741425",
                  "CSAFPID-1741426",
                  "CSAFPID-1741427",
                  "CSAFPID-1741428",
                  "CSAFPID-1741429",
                  "CSAFPID-1741430",
                  "CSAFPID-1741431",
                  "CSAFPID-1741432",
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
                  "CSAFPID-1723936",
                  "CSAFPID-1723937",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
                  "CSAFPID-1723941",
                  "CSAFPID-1723942",
                  "CSAFPID-1723943",
                  "CSAFPID-1723944",
                  "CSAFPID-1723945",
                  "CSAFPID-1717820",
                  "CSAFPID-1717821",
                  "CSAFPID-1717822",
                  "CSAFPID-1717823",
               ],
            },
         ],
         title: "CVE-2024-49121",
      },
      {
         cve: "CVE-2024-49122",
         cwe: {
            id: "CWE-416",
            name: "Use After Free",
         },
         notes: [
            {
               category: "other",
               text: "Use After Free",
               title: "CWE-416",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1741423",
               "CSAFPID-1741424",
               "CSAFPID-1741425",
               "CSAFPID-1741426",
               "CSAFPID-1741427",
               "CSAFPID-1741428",
               "CSAFPID-1741429",
               "CSAFPID-1741430",
               "CSAFPID-1741431",
               "CSAFPID-1741432",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1723936",
               "CSAFPID-1723937",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723941",
               "CSAFPID-1723942",
               "CSAFPID-1723943",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49122",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49122.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741405",
                  "CSAFPID-1741406",
                  "CSAFPID-1741407",
                  "CSAFPID-1741422",
                  "CSAFPID-1741408",
                  "CSAFPID-1741409",
                  "CSAFPID-1741410",
                  "CSAFPID-1741411",
                  "CSAFPID-1741412",
                  "CSAFPID-1741413",
                  "CSAFPID-1741414",
                  "CSAFPID-1741415",
                  "CSAFPID-1741416",
                  "CSAFPID-1741417",
                  "CSAFPID-1741418",
                  "CSAFPID-1741419",
                  "CSAFPID-1741420",
                  "CSAFPID-1741421",
                  "CSAFPID-1741423",
                  "CSAFPID-1741424",
                  "CSAFPID-1741425",
                  "CSAFPID-1741426",
                  "CSAFPID-1741427",
                  "CSAFPID-1741428",
                  "CSAFPID-1741429",
                  "CSAFPID-1741430",
                  "CSAFPID-1741431",
                  "CSAFPID-1741432",
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
                  "CSAFPID-1723936",
                  "CSAFPID-1723937",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
                  "CSAFPID-1723941",
                  "CSAFPID-1723942",
                  "CSAFPID-1723943",
                  "CSAFPID-1723944",
                  "CSAFPID-1723945",
                  "CSAFPID-1717820",
                  "CSAFPID-1717821",
                  "CSAFPID-1717822",
                  "CSAFPID-1717823",
               ],
            },
         ],
         title: "CVE-2024-49122",
      },
   ],
}

ncsc-2024-0470

Vulnerability from csaf_ncscnl

Published

2024-12-10 19:32

Modified

2025-01-06 07:30

Summary

Kwetsbaarheden verholpen in Microsoft Windows

Notes

Feiten

Microsoft heeft kwetsbaarheden verholpen in Windows.

Interpretaties

Oplossingen

Kans

medium

Schade

high

CWE-591

Sensitive Data Storage in Improperly Locked Memory

CWE-393

Return of Wrong Status Code

CWE-453

Insecure Default Variable Initialization

CWE-820

Missing Synchronization

CWE-59

Improper Link Resolution Before File Access ('Link Following')

CWE-191

Integer Underflow (Wrap or Wraparound)

CWE-822

Untrusted Pointer Dereference

CWE-126

Buffer Over-read

CWE-415

Double Free

CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CWE-190

Integer Overflow or Wraparound

CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CWE-125

Out-of-bounds Read

CWE-284

Improper Access Control

CWE-416

Use After Free

CWE-476

NULL Pointer Dereference

CWE-400

Uncontrolled Resource Consumption

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CWE-122

Heap-based Buffer Overflow

CWE-681

Incorrect Conversion between Numeric Types

CWE-20

Improper Input Validation

CWE-287

Improper Authentication

JSON

To clipboard

{
   document: {
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         tlp: {
            label: "WHITE",
         },
      },
      lang: "nl",
      notes: [
         {
            category: "legal_disclaimer",
            text: "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.",
         },
         {
            category: "description",
            text: "Microsoft heeft kwetsbaarheden verholpen in Windows.",
            title: "Feiten",
         },
         {
            category: "description",
            text: "UPDATE: \nOnderzoekers hebben proof of concept (PoC) code gepubliceerd, waarmee de kwetsbaarheid met kenmerk CVE-2024-49113 kan worden aangetoond. Succesvol misbruik vereist dat de kwaadwillende toegang heeft tot zowel een DC met LDAP en een malafide server onder eigen controle. Hierdoor is misbruik niet eenvoudig te realiseren, maar neemt de kans erop wel toe. Succesvol misbruik resulteert in een Denial-of-Service van het kwetsbare systeem.\n\n\nEen kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade:\n\n- Denial-of-Service (DoS)\n- Uitvoer van willekeurige code (Gebruikersrechten)\n- Uitvoer van willekeurige code (Systeemrechten)\n- Verkrijgen van verhoogde rechten\n- Toegang tot gevoelige gegevens\n\nDe ernstigste kwetsbaarheid heeft kenmerk CVE-2024-49112 toegewezen gekregen en bevindt zich in de LDAP-component van de Domain Controller. Een kwaadwillende kan de kwetsbaarheid misbruiken om zonder voorafgaande authenticatie uitvoer van willekeurige code mogelijk te maken middels een malafide LDAP-call. Succesvol misbruik vereist wel dat de kwaadwillende LAN-toegang tot de Domain Controller heeft.\n\n```\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49074 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49105 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Mobile Broadband: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49073 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2024-49087 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2024-49092 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2024-49077 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2024-49078 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2024-49083 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2024-49110 | 6.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PrintWorkflowUserSvc: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49097 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2024-49095 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49084 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49132 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49085 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2024-49086 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2024-49089 | 7.20 | Uitvoeren van willekeurige code     | \n| CVE-2024-49102 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2024-49104 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2024-49125 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49091 | 7.20 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRole: Windows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49117 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49121 | 7.50 | Denial-of-Service                   | \n| CVE-2024-49124 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2024-49112 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2024-49113 | 7.50 | Denial-of-Service                   | \n| CVE-2024-49127 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Publisher: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49079 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows IP Routing Management Snapin: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49080 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49093 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Task Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49072 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49106 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2024-49108 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2024-49115 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2024-49119 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2024-49120 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2024-49123 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2024-49129 | 7.50 | Denial-of-Service                   | \n| CVE-2024-49075 | 7.50 | Denial-of-Service                   | \n| CVE-2024-49116 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2024-49128 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49094 | 6.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2024-49098 | 4.30 | Toegang tot gevoelige gegevens      | \n| CVE-2024-49099 | 4.30 | Toegang tot gevoelige gegevens      | \n| CVE-2024-49101 | 6.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2024-49103 | 4.30 | Toegang tot gevoelige gegevens      | \n| CVE-2024-49111 | 6.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2024-49081 | 6.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2024-49109 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWmsRepair Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49107 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49126 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49096 | 7.50 | Denial-of-Service                   | \n| CVE-2024-49122 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2024-49118 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49088 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2024-49090 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2024-49138 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49114 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtualization-Based Security (VBS) Enclave: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49076 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-49082 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nSystem Center Operations Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2024-43594 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n```",
            title: "Interpretaties",
         },
         {
            category: "description",
            text: "Microsoft heeft updates beschikbaar gesteld waarmee de beschreven kwetsbaarheden worden verholpen. We raden u aan om deze updates te installeren. Meer informatie over de kwetsbaarheden, de installatie van de updates en eventuele work-arounds vindt u op:\n\nhttps://portal.msrc.microsoft.com/en-us/security-guidance",
            title: "Oplossingen",
         },
         {
            category: "general",
            text: "medium",
            title: "Kans",
         },
         {
            category: "general",
            text: "high",
            title: "Schade",
         },
         {
            category: "general",
            text: "Sensitive Data Storage in Improperly Locked Memory",
            title: "CWE-591",
         },
         {
            category: "general",
            text: "Return of Wrong Status Code",
            title: "CWE-393",
         },
         {
            category: "general",
            text: "Insecure Default Variable Initialization",
            title: "CWE-453",
         },
         {
            category: "general",
            text: "Missing Synchronization",
            title: "CWE-820",
         },
         {
            category: "general",
            text: "Improper Link Resolution Before File Access ('Link Following')",
            title: "CWE-59",
         },
         {
            category: "general",
            text: "Integer Underflow (Wrap or Wraparound)",
            title: "CWE-191",
         },
         {
            category: "general",
            text: "Untrusted Pointer Dereference",
            title: "CWE-822",
         },
         {
            category: "general",
            text: "Buffer Over-read",
            title: "CWE-126",
         },
         {
            category: "general",
            text: "Double Free",
            title: "CWE-415",
         },
         {
            category: "general",
            text: "Access of Resource Using Incompatible Type ('Type Confusion')",
            title: "CWE-843",
         },
         {
            category: "general",
            text: "Integer Overflow or Wraparound",
            title: "CWE-190",
         },
         {
            category: "general",
            text: "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')",
            title: "CWE-362",
         },
         {
            category: "general",
            text: "Out-of-bounds Read",
            title: "CWE-125",
         },
         {
            category: "general",
            text: "Improper Access Control",
            title: "CWE-284",
         },
         {
            category: "general",
            text: "Use After Free",
            title: "CWE-416",
         },
         {
            category: "general",
            text: "NULL Pointer Dereference",
            title: "CWE-476",
         },
         {
            category: "general",
            text: "Uncontrolled Resource Consumption",
            title: "CWE-400",
         },
         {
            category: "general",
            text: "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')",
            title: "CWE-22",
         },
         {
            category: "general",
            text: "Heap-based Buffer Overflow",
            title: "CWE-122",
         },
         {
            category: "general",
            text: "Incorrect Conversion between Numeric Types",
            title: "CWE-681",
         },
         {
            category: "general",
            text: "Improper Input Validation",
            title: "CWE-20",
         },
         {
            category: "general",
            text: "Improper Authentication",
            title: "CWE-287",
         },
      ],
      publisher: {
         category: "coordinator",
         contact_details: "cert@ncsc.nl",
         name: "Nationaal Cyber Security Centrum",
         namespace: "https://www.ncsc.nl/",
      },
      title: "Kwetsbaarheden verholpen in Microsoft Windows",
      tracking: {
         current_release_date: "2025-01-06T07:30:29.655717Z",
         id: "NCSC-2024-0470",
         initial_release_date: "2024-12-10T19:32:38.846024Z",
         revision_history: [
            {
               date: "2024-12-10T19:32:38.846024Z",
               number: "0",
               summary: "Initiele versie",
            },
            {
               date: "2025-01-06T07:30:29.655717Z",
               number: "1",
               summary: "Onderzoekers hebben proof of concept (PoC) code gepubliceerd, waarmee de kwetsbaarheid met kenmerk CVE-2024-49113 kan worden aangetoond.",
            },
         ],
         status: "final",
         version: "1.0.1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  category: "product_name",
                  name: "windows_11_22h2",
                  product: {
                     name: "windows_11_22h2",
                     product_id: "CSAFPID-1741412",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_11_22h2:10.0.22621.4602:*:*:*:*:*:x64:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_11_23h2",
                  product: {
                     name: "windows_11_23h2",
                     product_id: "CSAFPID-1741417",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_11_23h2:10.0.22631.4602:*:*:*:*:*:arm64:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_11_23h2",
                  product: {
                     name: "windows_11_23h2",
                     product_id: "CSAFPID-1741418",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_11_23h2:10.0.22631.4602:*:*:*:*:*:x64:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_11_24h2",
                  product: {
                     name: "windows_11_24h2",
                     product_id: "CSAFPID-1741420",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_11_24h2:10.0.26100.2605:*:*:*:*:*:arm64:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_11_24h2",
                  product: {
                     name: "windows_11_24h2",
                     product_id: "CSAFPID-1741421",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_11_24h2:10.0.26100.2605:*:*:*:*:*:x64:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2008_r2",
                  product: {
                     name: "windows_server_2008_r2",
                     product_id: "CSAFPID-1741430",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_server_2008_r2:6.1.7601.27467:*:*:*:*:*:x64:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2008_sp2",
                  product: {
                     name: "windows_server_2008_sp2",
                     product_id: "CSAFPID-1741428",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.23016:*:*:*:*:*:x64:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2008_sp2",
                  product: {
                     name: "windows_server_2008_sp2",
                     product_id: "CSAFPID-1741429",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.23016:*:*:*:*:*:x86:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2012",
                  product: {
                     name: "windows_server_2012",
                     product_id: "CSAFPID-1741431",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_server_2012:6.2.9200.25222:*:*:*:*:*:x64:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2012_r2",
                  product: {
                     name: "windows_server_2012_r2",
                     product_id: "CSAFPID-1741432",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_server_2012_r2:6.3.9600.22318:*:*:*:*:*:x64:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2016",
                  product: {
                     name: "windows_server_2016",
                     product_id: "CSAFPID-1741427",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.7606:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2019",
                  product: {
                     name: "windows_server_2019",
                     product_id: "CSAFPID-1741407",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_server_2019:10.0.17763.6659:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2022",
                  product: {
                     name: "windows_server_2022",
                     product_id: "CSAFPID-1741422",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_server_2022:10.0.20348.2966:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2025",
                  product: {
                     name: "windows_server_2025",
                     product_id: "CSAFPID-1741416",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_server_2025:10.0.26100.2528:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_23h2",
                  product: {
                     name: "windows_server_23h2",
                     product_id: "CSAFPID-1741419",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_server_23h2:10.0.25398.1308:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "system_center_operations_manager",
                  product: {
                     name: "system_center_operations_manager",
                     product_id: "CSAFPID-618487",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:system_center_operations_manager:2019:-:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "system_center_operations_manager",
                  product: {
                     name: "system_center_operations_manager",
                     product_id: "CSAFPID-634172",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:system_center_operations_manager:2022:-:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "system_center_operations_manager",
                  product: {
                     name: "system_center_operations_manager",
                     product_id: "CSAFPID-1741404",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:system_center_operations_manager:2025:-:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "system_center_operations_manager__scom__2019",
                  product: {
                     name: "system_center_operations_manager__scom__2019",
                     product_id: "CSAFPID-1718165",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:system_center_operations_manager__scom__2019:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "system_center_operations_manager__scom__2022",
                  product: {
                     name: "system_center_operations_manager__scom__2022",
                     product_id: "CSAFPID-1718167",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:system_center_operations_manager__scom__2022:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "system_center_operations_manager__scom__2025",
                  product: {
                     name: "system_center_operations_manager__scom__2025",
                     product_id: "CSAFPID-1741485",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:system_center_operations_manager__scom__2025:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows",
                  product: {
                     name: "windows",
                     product_id: "CSAFPID-549001",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_10_version_1507",
                  product: {
                     name: "windows_10_version_1507",
                     product_id: "CSAFPID-1723936",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_10_version_1507:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_10_version_1607",
                  product: {
                     name: "windows_10_version_1607",
                     product_id: "CSAFPID-1723937",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_10_version_1607:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_10_version_1809",
                  product: {
                     name: "windows_10_version_1809",
                     product_id: "CSAFPID-1720442",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_10_version_1809:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_10_version_21h2",
                  product: {
                     name: "windows_10_version_21h2",
                     product_id: "CSAFPID-1741366",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_10_version_21h2:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_10_version_22h2",
                  product: {
                     name: "windows_10_version_22h2",
                     product_id: "CSAFPID-1741368",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_10_version_22h2:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_11_version_22h2",
                  product: {
                     name: "windows_11_version_22h2",
                     product_id: "CSAFPID-1741367",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_11_version_22h2:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_11_version_22h3",
                  product: {
                     name: "windows_11_version_22h3",
                     product_id: "CSAFPID-1741369",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_11_version_22h3:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_11_version_23h2",
                  product: {
                     name: "windows_11_version_23h2",
                     product_id: "CSAFPID-1741370",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_11_version_23h2:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_11_version_24h2",
                  product: {
                     name: "windows_11_version_24h2",
                     product_id: "CSAFPID-1741371",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_11_version_24h2:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2008__service_pack_2",
                  product: {
                     name: "windows_server_2008__service_pack_2",
                     product_id: "CSAFPID-1723943",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_server_2008__service_pack_2:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2008_r2_service_pack_1",
                  product: {
                     name: "windows_server_2008_r2_service_pack_1",
                     product_id: "CSAFPID-1723944",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_server_2008_r2_service_pack_1:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2008_r2_service_pack_1__server_core_installation_",
                  product: {
                     name: "windows_server_2008_r2_service_pack_1__server_core_installation_",
                     product_id: "CSAFPID-1723945",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_server_2008_r2_service_pack_1__server_core_installation_:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2008_service_pack_2",
                  product: {
                     name: "windows_server_2008_service_pack_2",
                     product_id: "CSAFPID-1723941",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_server_2008_service_pack_2:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2008_service_pack_2__server_core_installation_",
                  product: {
                     name: "windows_server_2008_service_pack_2__server_core_installation_",
                     product_id: "CSAFPID-1723942",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_server_2008_service_pack_2__server_core_installation_:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2012",
                  product: {
                     name: "windows_server_2012",
                     product_id: "CSAFPID-1717820",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2012__server_core_installation_",
                  product: {
                     name: "windows_server_2012__server_core_installation_",
                     product_id: "CSAFPID-1717821",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_server_2012__server_core_installation_:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2012_r2",
                  product: {
                     name: "windows_server_2012_r2",
                     product_id: "CSAFPID-1717822",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_server_2012_r2:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2012_r2__server_core_installation_",
                  product: {
                     name: "windows_server_2012_r2__server_core_installation_",
                     product_id: "CSAFPID-1717823",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_server_2012_r2__server_core_installation_:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2016",
                  product: {
                     name: "windows_server_2016",
                     product_id: "CSAFPID-1717812",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2016__server_core_installation_",
                  product: {
                     name: "windows_server_2016__server_core_installation_",
                     product_id: "CSAFPID-1717813",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_server_2016__server_core_installation_:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2019",
                  product: {
                     name: "windows_server_2019",
                     product_id: "CSAFPID-1717808",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2019__server_core_installation_",
                  product: {
                     name: "windows_server_2019__server_core_installation_",
                     product_id: "CSAFPID-1717809",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_server_2019__server_core_installation_:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2022",
                  product: {
                     name: "windows_server_2022",
                     product_id: "CSAFPID-1717810",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2022__23h2_edition__server_core_installation_",
                  product: {
                     name: "windows_server_2022__23h2_edition__server_core_installation_",
                     product_id: "CSAFPID-1741352",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_server_2022__23h2_edition__server_core_installation_:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2025",
                  product: {
                     name: "windows_server_2025",
                     product_id: "CSAFPID-1741353",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_server_2025__server_core_installation_",
                  product: {
                     name: "windows_server_2025__server_core_installation_",
                     product_id: "CSAFPID-1741354",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:microsoft:windows_server_2025__server_core_installation_:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_10_1507",
                  product: {
                     name: "windows_10_1507",
                     product_id: "CSAFPID-1741424",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.20857:*:*:*:*:*:x64:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_10_1507",
                  product: {
                     name: "windows_10_1507",
                     product_id: "CSAFPID-1741423",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.20857:*:*:*:*:*:x86:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_10_1607",
                  product: {
                     name: "windows_10_1607",
                     product_id: "CSAFPID-1741426",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.7606:*:*:*:*:*:x64:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_10_1607",
                  product: {
                     name: "windows_10_1607",
                     product_id: "CSAFPID-1741425",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.7606:*:*:*:*:*:x86:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_10_1809",
                  product: {
                     name: "windows_10_1809",
                     product_id: "CSAFPID-1741406",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.6659:*:*:*:*:*:x64:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_10_1809",
                  product: {
                     name: "windows_10_1809",
                     product_id: "CSAFPID-1741405",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.6659:*:*:*:*:*:x86:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_10_21h2",
                  product: {
                     name: "windows_10_21h2",
                     product_id: "CSAFPID-1741409",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_10_21h2:10.0.19044.5247:*:*:*:*:*:arm64:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_10_21h2",
                  product: {
                     name: "windows_10_21h2",
                     product_id: "CSAFPID-1741410",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_10_21h2:10.0.19044.5247:*:*:*:*:*:x64:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_10_21h2",
                  product: {
                     name: "windows_10_21h2",
                     product_id: "CSAFPID-1741408",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_10_21h2:10.0.19044.5247:*:*:*:*:*:x86:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_10_22h2",
                  product: {
                     name: "windows_10_22h2",
                     product_id: "CSAFPID-1741414",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_10_22h2:10.0.19045.5247:*:*:*:*:*:arm64:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_10_22h2",
                  product: {
                     name: "windows_10_22h2",
                     product_id: "CSAFPID-1741413",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_10_22h2:10.0.19045.5247:*:*:*:*:*:x64:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_10_22h2",
                  product: {
                     name: "windows_10_22h2",
                     product_id: "CSAFPID-1741415",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_10_22h2:10.0.19045.5247:*:*:*:*:*:x86:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "windows_11_22h2",
                  product: {
                     name: "windows_11_22h2",
                     product_id: "CSAFPID-1741411",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:microsoft:windows_11_22h2:10.0.22621.4602:*:*:*:*:*:arm64:*",
                     },
                  },
               },
            ],
            category: "vendor",
            name: "microsoft",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2024-49123",
         cwe: {
            id: "CWE-591",
            name: "Sensitive Data Storage in Improperly Locked Memory",
         },
         notes: [
            {
               category: "other",
               text: "Sensitive Data Storage in Improperly Locked Memory",
               title: "CWE-591",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49123",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49123.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741405",
                  "CSAFPID-1741406",
                  "CSAFPID-1741407",
                  "CSAFPID-1741422",
                  "CSAFPID-1741408",
                  "CSAFPID-1741409",
                  "CSAFPID-1741410",
                  "CSAFPID-1741411",
                  "CSAFPID-1741412",
                  "CSAFPID-1741413",
                  "CSAFPID-1741414",
                  "CSAFPID-1741415",
                  "CSAFPID-1741416",
                  "CSAFPID-1741417",
                  "CSAFPID-1741418",
                  "CSAFPID-1741419",
                  "CSAFPID-1741420",
                  "CSAFPID-1741421",
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
               ],
            },
         ],
         title: "CVE-2024-49123",
      },
      {
         cve: "CVE-2024-49124",
         cwe: {
            id: "CWE-362",
            name: "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')",
         },
         notes: [
            {
               category: "other",
               text: "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')",
               title: "CWE-362",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1741423",
               "CSAFPID-1741424",
               "CSAFPID-1741425",
               "CSAFPID-1741426",
               "CSAFPID-1741427",
               "CSAFPID-1741428",
               "CSAFPID-1741429",
               "CSAFPID-1741430",
               "CSAFPID-1741431",
               "CSAFPID-1741432",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1723936",
               "CSAFPID-1723937",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723941",
               "CSAFPID-1723942",
               "CSAFPID-1723943",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49124",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49124.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741405",
                  "CSAFPID-1741406",
                  "CSAFPID-1741407",
                  "CSAFPID-1741422",
                  "CSAFPID-1741408",
                  "CSAFPID-1741409",
                  "CSAFPID-1741410",
                  "CSAFPID-1741411",
                  "CSAFPID-1741412",
                  "CSAFPID-1741413",
                  "CSAFPID-1741414",
                  "CSAFPID-1741415",
                  "CSAFPID-1741416",
                  "CSAFPID-1741417",
                  "CSAFPID-1741418",
                  "CSAFPID-1741419",
                  "CSAFPID-1741420",
                  "CSAFPID-1741421",
                  "CSAFPID-1741423",
                  "CSAFPID-1741424",
                  "CSAFPID-1741425",
                  "CSAFPID-1741426",
                  "CSAFPID-1741427",
                  "CSAFPID-1741428",
                  "CSAFPID-1741429",
                  "CSAFPID-1741430",
                  "CSAFPID-1741431",
                  "CSAFPID-1741432",
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
                  "CSAFPID-1723936",
                  "CSAFPID-1723937",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
                  "CSAFPID-1723941",
                  "CSAFPID-1723942",
                  "CSAFPID-1723943",
                  "CSAFPID-1723944",
                  "CSAFPID-1723945",
                  "CSAFPID-1717820",
                  "CSAFPID-1717821",
                  "CSAFPID-1717822",
                  "CSAFPID-1717823",
               ],
            },
         ],
         title: "CVE-2024-49124",
      },
      {
         cve: "CVE-2024-49126",
         cwe: {
            id: "CWE-416",
            name: "Use After Free",
         },
         notes: [
            {
               category: "other",
               text: "Use After Free",
               title: "CWE-416",
            },
            {
               category: "other",
               text: "Sensitive Data Storage in Improperly Locked Memory",
               title: "CWE-591",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1741423",
               "CSAFPID-1741424",
               "CSAFPID-1741425",
               "CSAFPID-1741426",
               "CSAFPID-1741427",
               "CSAFPID-1741428",
               "CSAFPID-1741429",
               "CSAFPID-1741430",
               "CSAFPID-1741431",
               "CSAFPID-1741432",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1723936",
               "CSAFPID-1723937",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723941",
               "CSAFPID-1723942",
               "CSAFPID-1723943",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49126",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49126.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741405",
                  "CSAFPID-1741406",
                  "CSAFPID-1741407",
                  "CSAFPID-1741422",
                  "CSAFPID-1741408",
                  "CSAFPID-1741409",
                  "CSAFPID-1741410",
                  "CSAFPID-1741411",
                  "CSAFPID-1741412",
                  "CSAFPID-1741413",
                  "CSAFPID-1741414",
                  "CSAFPID-1741415",
                  "CSAFPID-1741416",
                  "CSAFPID-1741417",
                  "CSAFPID-1741418",
                  "CSAFPID-1741419",
                  "CSAFPID-1741420",
                  "CSAFPID-1741421",
                  "CSAFPID-1741423",
                  "CSAFPID-1741424",
                  "CSAFPID-1741425",
                  "CSAFPID-1741426",
                  "CSAFPID-1741427",
                  "CSAFPID-1741428",
                  "CSAFPID-1741429",
                  "CSAFPID-1741430",
                  "CSAFPID-1741431",
                  "CSAFPID-1741432",
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
                  "CSAFPID-1723936",
                  "CSAFPID-1723937",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
                  "CSAFPID-1723941",
                  "CSAFPID-1723942",
                  "CSAFPID-1723943",
                  "CSAFPID-1723944",
                  "CSAFPID-1723945",
                  "CSAFPID-1717820",
                  "CSAFPID-1717821",
                  "CSAFPID-1717822",
                  "CSAFPID-1717823",
               ],
            },
         ],
         title: "CVE-2024-49126",
      },
      {
         cve: "CVE-2024-49132",
         cwe: {
            id: "CWE-591",
            name: "Sensitive Data Storage in Improperly Locked Memory",
         },
         notes: [
            {
               category: "other",
               text: "Sensitive Data Storage in Improperly Locked Memory",
               title: "CWE-591",
            },
            {
               category: "other",
               text: "Use After Free",
               title: "CWE-416",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49132",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49132.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741405",
                  "CSAFPID-1741406",
                  "CSAFPID-1741407",
                  "CSAFPID-1741422",
                  "CSAFPID-1741408",
                  "CSAFPID-1741409",
                  "CSAFPID-1741410",
                  "CSAFPID-1741411",
                  "CSAFPID-1741412",
                  "CSAFPID-1741413",
                  "CSAFPID-1741414",
                  "CSAFPID-1741415",
                  "CSAFPID-1741416",
                  "CSAFPID-1741417",
                  "CSAFPID-1741418",
                  "CSAFPID-1741419",
                  "CSAFPID-1741420",
                  "CSAFPID-1741421",
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
               ],
            },
         ],
         title: "CVE-2024-49132",
      },
      {
         cve: "CVE-2024-49072",
         cwe: {
            id: "CWE-122",
            name: "Heap-based Buffer Overflow",
         },
         notes: [
            {
               category: "other",
               text: "Heap-based Buffer Overflow",
               title: "CWE-122",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741419",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741422",
               "CSAFPID-1741428",
               "CSAFPID-1741415",
               "CSAFPID-1741420",
               "CSAFPID-1741424",
               "CSAFPID-1741427",
               "CSAFPID-1741413",
               "CSAFPID-1741405",
               "CSAFPID-1741407",
               "CSAFPID-1741414",
               "CSAFPID-1741421",
               "CSAFPID-1741430",
               "CSAFPID-1741432",
               "CSAFPID-1741423",
               "CSAFPID-1741416",
               "CSAFPID-1741410",
               "CSAFPID-1741406",
               "CSAFPID-1741426",
               "CSAFPID-1741418",
               "CSAFPID-1741412",
               "CSAFPID-1741429",
               "CSAFPID-1741431",
               "CSAFPID-1741417",
               "CSAFPID-1741425",
               "CSAFPID-1741411",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1723936",
               "CSAFPID-1723937",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723941",
               "CSAFPID-1723942",
               "CSAFPID-1723943",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49072",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49072.json",
            },
         ],
         title: "CVE-2024-49072",
      },
      {
         cve: "CVE-2024-49075",
         cwe: {
            id: "CWE-400",
            name: "Uncontrolled Resource Consumption",
         },
         notes: [
            {
               category: "other",
               text: "Uncontrolled Resource Consumption",
               title: "CWE-400",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741411",
               "CSAFPID-1741416",
               "CSAFPID-1741410",
               "CSAFPID-1741418",
               "CSAFPID-1741417",
               "CSAFPID-1741406",
               "CSAFPID-1741409",
               "CSAFPID-1741419",
               "CSAFPID-1741407",
               "CSAFPID-1741405",
               "CSAFPID-1741414",
               "CSAFPID-1741420",
               "CSAFPID-1741415",
               "CSAFPID-1741421",
               "CSAFPID-1741408",
               "CSAFPID-1741413",
               "CSAFPID-1741412",
               "CSAFPID-1741422",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49075",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49075.json",
            },
         ],
         title: "CVE-2024-49075",
      },
      {
         cve: "CVE-2024-49076",
         cwe: {
            id: "CWE-287",
            name: "Improper Authentication",
         },
         notes: [
            {
               category: "other",
               text: "Improper Authentication",
               title: "CWE-287",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741418",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741417",
               "CSAFPID-1741420",
               "CSAFPID-1741405",
               "CSAFPID-1741415",
               "CSAFPID-1741419",
               "CSAFPID-1741413",
               "CSAFPID-1741416",
               "CSAFPID-1741421",
               "CSAFPID-1741410",
               "CSAFPID-1741409",
               "CSAFPID-1741408",
               "CSAFPID-1741411",
               "CSAFPID-1741414",
               "CSAFPID-1741412",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49076",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49076.json",
            },
         ],
         title: "CVE-2024-49076",
      },
      {
         cve: "CVE-2024-49077",
         cwe: {
            id: "CWE-191",
            name: "Integer Underflow (Wrap or Wraparound)",
         },
         notes: [
            {
               category: "other",
               text: "Integer Underflow (Wrap or Wraparound)",
               title: "CWE-191",
            },
            {
               category: "other",
               text: "Out-of-bounds Read",
               title: "CWE-125",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1741411",
               "CSAFPID-1741417",
               "CSAFPID-1741405",
               "CSAFPID-1741407",
               "CSAFPID-1741421",
               "CSAFPID-1741416",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741414",
               "CSAFPID-1741406",
               "CSAFPID-1741415",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741408",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49077",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49077.json",
            },
         ],
         title: "CVE-2024-49077",
      },
      {
         cve: "CVE-2024-49078",
         cwe: {
            id: "CWE-190",
            name: "Integer Overflow or Wraparound",
         },
         notes: [
            {
               category: "other",
               text: "Integer Overflow or Wraparound",
               title: "CWE-190",
            },
            {
               category: "other",
               text: "Out-of-bounds Read",
               title: "CWE-125",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1741412",
               "CSAFPID-1741408",
               "CSAFPID-1741416",
               "CSAFPID-1741418",
               "CSAFPID-1741417",
               "CSAFPID-1741414",
               "CSAFPID-1741405",
               "CSAFPID-1741411",
               "CSAFPID-1741421",
               "CSAFPID-1741419",
               "CSAFPID-1741413",
               "CSAFPID-1741406",
               "CSAFPID-1741410",
               "CSAFPID-1741407",
               "CSAFPID-1741409",
               "CSAFPID-1741420",
               "CSAFPID-1741415",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49078",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49078.json",
            },
         ],
         title: "CVE-2024-49078",
      },
      {
         cve: "CVE-2024-49079",
         cwe: {
            id: "CWE-416",
            name: "Use After Free",
         },
         notes: [
            {
               category: "other",
               text: "Use After Free",
               title: "CWE-416",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1723936",
               "CSAFPID-1723937",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
               "CSAFPID-1741418",
               "CSAFPID-1741411",
               "CSAFPID-1741409",
               "CSAFPID-1741423",
               "CSAFPID-1741412",
               "CSAFPID-1741424",
               "CSAFPID-1741422",
               "CSAFPID-1741425",
               "CSAFPID-1741406",
               "CSAFPID-1741427",
               "CSAFPID-1741426",
               "CSAFPID-1741410",
               "CSAFPID-1741405",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741408",
               "CSAFPID-1741419",
               "CSAFPID-1741407",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741421",
               "CSAFPID-1741420",
               "CSAFPID-1741432",
               "CSAFPID-1741431",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49079",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49079.json",
            },
         ],
         title: "CVE-2024-49079",
      },
      {
         cve: "CVE-2024-49080",
         cwe: {
            id: "CWE-122",
            name: "Heap-based Buffer Overflow",
         },
         notes: [
            {
               category: "other",
               text: "Heap-based Buffer Overflow",
               title: "CWE-122",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1723936",
               "CSAFPID-1723937",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723941",
               "CSAFPID-1723942",
               "CSAFPID-1723943",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
               "CSAFPID-1741416",
               "CSAFPID-1741430",
               "CSAFPID-1741409",
               "CSAFPID-1741426",
               "CSAFPID-1741417",
               "CSAFPID-1741431",
               "CSAFPID-1741424",
               "CSAFPID-1741407",
               "CSAFPID-1741413",
               "CSAFPID-1741406",
               "CSAFPID-1741427",
               "CSAFPID-1741412",
               "CSAFPID-1741420",
               "CSAFPID-1741415",
               "CSAFPID-1741425",
               "CSAFPID-1741414",
               "CSAFPID-1741428",
               "CSAFPID-1741419",
               "CSAFPID-1741411",
               "CSAFPID-1741422",
               "CSAFPID-1741418",
               "CSAFPID-1741405",
               "CSAFPID-1741421",
               "CSAFPID-1741432",
               "CSAFPID-1741429",
               "CSAFPID-1741410",
               "CSAFPID-1741408",
               "CSAFPID-1741423",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49080",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49080.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
                  "CSAFPID-1723936",
                  "CSAFPID-1723937",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
                  "CSAFPID-1723941",
                  "CSAFPID-1723942",
                  "CSAFPID-1723943",
                  "CSAFPID-1723944",
                  "CSAFPID-1723945",
                  "CSAFPID-1717820",
                  "CSAFPID-1717821",
                  "CSAFPID-1717822",
                  "CSAFPID-1717823",
                  "CSAFPID-1741416",
                  "CSAFPID-1741430",
                  "CSAFPID-1741409",
                  "CSAFPID-1741426",
                  "CSAFPID-1741417",
                  "CSAFPID-1741431",
                  "CSAFPID-1741424",
                  "CSAFPID-1741407",
                  "CSAFPID-1741413",
                  "CSAFPID-1741406",
                  "CSAFPID-1741427",
                  "CSAFPID-1741412",
                  "CSAFPID-1741420",
                  "CSAFPID-1741415",
                  "CSAFPID-1741425",
                  "CSAFPID-1741414",
                  "CSAFPID-1741428",
                  "CSAFPID-1741419",
                  "CSAFPID-1741411",
                  "CSAFPID-1741422",
                  "CSAFPID-1741418",
                  "CSAFPID-1741405",
                  "CSAFPID-1741421",
                  "CSAFPID-1741432",
                  "CSAFPID-1741429",
                  "CSAFPID-1741410",
                  "CSAFPID-1741408",
                  "CSAFPID-1741423",
               ],
            },
         ],
         title: "CVE-2024-49080",
      },
      {
         cve: "CVE-2024-49081",
         cwe: {
            id: "CWE-122",
            name: "Heap-based Buffer Overflow",
         },
         notes: [
            {
               category: "other",
               text: "Heap-based Buffer Overflow",
               title: "CWE-122",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1741408",
               "CSAFPID-1741415",
               "CSAFPID-1741409",
               "CSAFPID-1741411",
               "CSAFPID-1741418",
               "CSAFPID-1741417",
               "CSAFPID-1741406",
               "CSAFPID-1741419",
               "CSAFPID-1741416",
               "CSAFPID-1741410",
               "CSAFPID-1741407",
               "CSAFPID-1741420",
               "CSAFPID-1741414",
               "CSAFPID-1741405",
               "CSAFPID-1741412",
               "CSAFPID-1741421",
               "CSAFPID-1741413",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49081",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49081.json",
            },
         ],
         title: "CVE-2024-49081",
      },
      {
         cve: "CVE-2024-49082",
         cwe: {
            id: "CWE-22",
            name: "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')",
         },
         notes: [
            {
               category: "other",
               text: "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')",
               title: "CWE-22",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1723936",
               "CSAFPID-1723937",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723941",
               "CSAFPID-1723942",
               "CSAFPID-1723943",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
               "CSAFPID-1741419",
               "CSAFPID-1741411",
               "CSAFPID-1741420",
               "CSAFPID-1741407",
               "CSAFPID-1741417",
               "CSAFPID-1741430",
               "CSAFPID-1741415",
               "CSAFPID-1741422",
               "CSAFPID-1741406",
               "CSAFPID-1741416",
               "CSAFPID-1741423",
               "CSAFPID-1741414",
               "CSAFPID-1741429",
               "CSAFPID-1741410",
               "CSAFPID-1741427",
               "CSAFPID-1741424",
               "CSAFPID-1741421",
               "CSAFPID-1741431",
               "CSAFPID-1741412",
               "CSAFPID-1741426",
               "CSAFPID-1741413",
               "CSAFPID-1741432",
               "CSAFPID-1741418",
               "CSAFPID-1741405",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741425",
               "CSAFPID-1741428",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49082",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49082.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.8,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
                  "CSAFPID-1723936",
                  "CSAFPID-1723937",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
                  "CSAFPID-1723941",
                  "CSAFPID-1723942",
                  "CSAFPID-1723943",
                  "CSAFPID-1723944",
                  "CSAFPID-1723945",
                  "CSAFPID-1717820",
                  "CSAFPID-1717821",
                  "CSAFPID-1717822",
                  "CSAFPID-1717823",
                  "CSAFPID-1741419",
                  "CSAFPID-1741411",
                  "CSAFPID-1741420",
                  "CSAFPID-1741407",
                  "CSAFPID-1741417",
                  "CSAFPID-1741430",
                  "CSAFPID-1741415",
                  "CSAFPID-1741422",
                  "CSAFPID-1741406",
                  "CSAFPID-1741416",
                  "CSAFPID-1741423",
                  "CSAFPID-1741414",
                  "CSAFPID-1741429",
                  "CSAFPID-1741410",
                  "CSAFPID-1741427",
                  "CSAFPID-1741424",
                  "CSAFPID-1741421",
                  "CSAFPID-1741431",
                  "CSAFPID-1741412",
                  "CSAFPID-1741426",
                  "CSAFPID-1741413",
                  "CSAFPID-1741432",
                  "CSAFPID-1741418",
                  "CSAFPID-1741405",
                  "CSAFPID-1741408",
                  "CSAFPID-1741409",
                  "CSAFPID-1741425",
                  "CSAFPID-1741428",
               ],
            },
         ],
         title: "CVE-2024-49082",
      },
      {
         cve: "CVE-2024-49083",
         cwe: {
            id: "CWE-125",
            name: "Out-of-bounds Read",
         },
         notes: [
            {
               category: "other",
               text: "Out-of-bounds Read",
               title: "CWE-125",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1741421",
               "CSAFPID-1741414",
               "CSAFPID-1741419",
               "CSAFPID-1741416",
               "CSAFPID-1741405",
               "CSAFPID-1741417",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741420",
               "CSAFPID-1741411",
               "CSAFPID-1741413",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741415",
               "CSAFPID-1741412",
               "CSAFPID-1741418",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49083",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49083.json",
            },
         ],
         title: "CVE-2024-49083",
      },
      {
         cve: "CVE-2024-49088",
         cwe: {
            id: "CWE-126",
            name: "Buffer Over-read",
         },
         notes: [
            {
               category: "other",
               text: "Buffer Over-read",
               title: "CWE-126",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741414",
               "CSAFPID-1741430",
               "CSAFPID-1741412",
               "CSAFPID-1741417",
               "CSAFPID-1741432",
               "CSAFPID-1741406",
               "CSAFPID-1741413",
               "CSAFPID-1741423",
               "CSAFPID-1741428",
               "CSAFPID-1741422",
               "CSAFPID-1741415",
               "CSAFPID-1741407",
               "CSAFPID-1741426",
               "CSAFPID-1741424",
               "CSAFPID-1741427",
               "CSAFPID-1741405",
               "CSAFPID-1741411",
               "CSAFPID-1741420",
               "CSAFPID-1741429",
               "CSAFPID-1741431",
               "CSAFPID-1741418",
               "CSAFPID-1741425",
               "CSAFPID-1741419",
               "CSAFPID-1741410",
               "CSAFPID-1741416",
               "CSAFPID-1741408",
               "CSAFPID-1741421",
               "CSAFPID-1741409",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1723936",
               "CSAFPID-1723937",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723941",
               "CSAFPID-1723942",
               "CSAFPID-1723943",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
               "CSAFPID-1741353",
               "CSAFPID-1741354",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49088",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49088.json",
            },
         ],
         title: "CVE-2024-49088",
      },
      {
         cve: "CVE-2024-49090",
         cwe: {
            id: "CWE-822",
            name: "Untrusted Pointer Dereference",
         },
         notes: [
            {
               category: "other",
               text: "Untrusted Pointer Dereference",
               title: "CWE-822",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741428",
               "CSAFPID-1741418",
               "CSAFPID-1741424",
               "CSAFPID-1741411",
               "CSAFPID-1741427",
               "CSAFPID-1741416",
               "CSAFPID-1741421",
               "CSAFPID-1741409",
               "CSAFPID-1741413",
               "CSAFPID-1741408",
               "CSAFPID-1741406",
               "CSAFPID-1741423",
               "CSAFPID-1741430",
               "CSAFPID-1741417",
               "CSAFPID-1741407",
               "CSAFPID-1741429",
               "CSAFPID-1741412",
               "CSAFPID-1741425",
               "CSAFPID-1741405",
               "CSAFPID-1741422",
               "CSAFPID-1741415",
               "CSAFPID-1741432",
               "CSAFPID-1741419",
               "CSAFPID-1741426",
               "CSAFPID-1741414",
               "CSAFPID-1741410",
               "CSAFPID-1741420",
               "CSAFPID-1741431",
               "CSAFPID-1741353",
               "CSAFPID-1741354",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1723936",
               "CSAFPID-1723937",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723941",
               "CSAFPID-1723942",
               "CSAFPID-1723943",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49090",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49090.json",
            },
         ],
         title: "CVE-2024-49090",
      },
      {
         cve: "CVE-2024-49095",
         cwe: {
            id: "CWE-591",
            name: "Sensitive Data Storage in Improperly Locked Memory",
         },
         notes: [
            {
               category: "other",
               text: "Sensitive Data Storage in Improperly Locked Memory",
               title: "CWE-591",
            },
            {
               category: "other",
               text: "Double Free",
               title: "CWE-415",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741413",
               "CSAFPID-1741407",
               "CSAFPID-1741418",
               "CSAFPID-1741412",
               "CSAFPID-1741409",
               "CSAFPID-1741415",
               "CSAFPID-1741406",
               "CSAFPID-1741411",
               "CSAFPID-1741410",
               "CSAFPID-1741422",
               "CSAFPID-1741405",
               "CSAFPID-1741414",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741408",
               "CSAFPID-1741421",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49095",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49095.json",
            },
         ],
         title: "CVE-2024-49095",
      },
      {
         cve: "CVE-2024-49109",
         cwe: {
            id: "CWE-125",
            name: "Out-of-bounds Read",
         },
         notes: [
            {
               category: "other",
               text: "Out-of-bounds Read",
               title: "CWE-125",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741406",
               "CSAFPID-1741411",
               "CSAFPID-1741415",
               "CSAFPID-1741420",
               "CSAFPID-1741408",
               "CSAFPID-1741412",
               "CSAFPID-1741409",
               "CSAFPID-1741413",
               "CSAFPID-1741416",
               "CSAFPID-1741414",
               "CSAFPID-1741421",
               "CSAFPID-1741417",
               "CSAFPID-1741407",
               "CSAFPID-1741410",
               "CSAFPID-1741405",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49109",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49109.json",
            },
         ],
         title: "CVE-2024-49109",
      },
      {
         cve: "CVE-2024-49110",
         cwe: {
            id: "CWE-125",
            name: "Out-of-bounds Read",
         },
         notes: [
            {
               category: "other",
               text: "Out-of-bounds Read",
               title: "CWE-125",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1741419",
               "CSAFPID-1741416",
               "CSAFPID-1741410",
               "CSAFPID-1741415",
               "CSAFPID-1741406",
               "CSAFPID-1741412",
               "CSAFPID-1741417",
               "CSAFPID-1741411",
               "CSAFPID-1741408",
               "CSAFPID-1741407",
               "CSAFPID-1741405",
               "CSAFPID-1741421",
               "CSAFPID-1741409",
               "CSAFPID-1741414",
               "CSAFPID-1741413",
               "CSAFPID-1741418",
               "CSAFPID-1741420",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49110",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49110.json",
            },
         ],
         title: "CVE-2024-49110",
      },
      {
         cve: "CVE-2024-49112",
         cwe: {
            id: "CWE-190",
            name: "Integer Overflow or Wraparound",
         },
         notes: [
            {
               category: "other",
               text: "Integer Overflow or Wraparound",
               title: "CWE-190",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1723936",
               "CSAFPID-1723937",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723941",
               "CSAFPID-1723942",
               "CSAFPID-1723943",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
               "CSAFPID-1741431",
               "CSAFPID-1741406",
               "CSAFPID-1741432",
               "CSAFPID-1741408",
               "CSAFPID-1741422",
               "CSAFPID-1741423",
               "CSAFPID-1741412",
               "CSAFPID-1741427",
               "CSAFPID-1741418",
               "CSAFPID-1741407",
               "CSAFPID-1741405",
               "CSAFPID-1741429",
               "CSAFPID-1741409",
               "CSAFPID-1741428",
               "CSAFPID-1741410",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741426",
               "CSAFPID-1741424",
               "CSAFPID-1741415",
               "CSAFPID-1741421",
               "CSAFPID-1741411",
               "CSAFPID-1741430",
               "CSAFPID-1741420",
               "CSAFPID-1741413",
               "CSAFPID-1741419",
               "CSAFPID-1741414",
               "CSAFPID-1741425",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49112",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49112.json",
            },
         ],
         title: "CVE-2024-49112",
      },
      {
         cve: "CVE-2024-49113",
         cwe: {
            id: "CWE-125",
            name: "Out-of-bounds Read",
         },
         notes: [
            {
               category: "other",
               text: "Out-of-bounds Read",
               title: "CWE-125",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1723936",
               "CSAFPID-1723937",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723941",
               "CSAFPID-1723942",
               "CSAFPID-1723943",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
               "CSAFPID-1741423",
               "CSAFPID-1741426",
               "CSAFPID-1741416",
               "CSAFPID-1741409",
               "CSAFPID-1741418",
               "CSAFPID-1741427",
               "CSAFPID-1741432",
               "CSAFPID-1741414",
               "CSAFPID-1741420",
               "CSAFPID-1741411",
               "CSAFPID-1741410",
               "CSAFPID-1741405",
               "CSAFPID-1741415",
               "CSAFPID-1741428",
               "CSAFPID-1741429",
               "CSAFPID-1741425",
               "CSAFPID-1741412",
               "CSAFPID-1741422",
               "CSAFPID-1741424",
               "CSAFPID-1741406",
               "CSAFPID-1741430",
               "CSAFPID-1741413",
               "CSAFPID-1741407",
               "CSAFPID-1741417",
               "CSAFPID-1741419",
               "CSAFPID-1741431",
               "CSAFPID-1741408",
               "CSAFPID-1741421",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49113",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49113.json",
            },
         ],
         title: "CVE-2024-49113",
      },
      {
         cve: "CVE-2024-49114",
         cwe: {
            id: "CWE-820",
            name: "Missing Synchronization",
         },
         notes: [
            {
               category: "other",
               text: "Missing Synchronization",
               title: "CWE-820",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1741354",
               "CSAFPID-1741421",
               "CSAFPID-1741416",
               "CSAFPID-1741408",
               "CSAFPID-1741419",
               "CSAFPID-1741409",
               "CSAFPID-1741412",
               "CSAFPID-1741407",
               "CSAFPID-1741415",
               "CSAFPID-1741406",
               "CSAFPID-1741418",
               "CSAFPID-1741417",
               "CSAFPID-1741422",
               "CSAFPID-1741420",
               "CSAFPID-1741414",
               "CSAFPID-1741413",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741405",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49114",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49114.json",
            },
         ],
         title: "CVE-2024-49114",
      },
      {
         cve: "CVE-2024-49118",
         cwe: {
            id: "CWE-416",
            name: "Use After Free",
         },
         notes: [
            {
               category: "other",
               text: "Use After Free",
               title: "CWE-416",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741429",
               "CSAFPID-1741426",
               "CSAFPID-1741405",
               "CSAFPID-1741418",
               "CSAFPID-1741421",
               "CSAFPID-1741432",
               "CSAFPID-1741427",
               "CSAFPID-1741416",
               "CSAFPID-1741406",
               "CSAFPID-1741409",
               "CSAFPID-1741420",
               "CSAFPID-1741424",
               "CSAFPID-1741415",
               "CSAFPID-1741412",
               "CSAFPID-1741422",
               "CSAFPID-1741431",
               "CSAFPID-1741430",
               "CSAFPID-1741414",
               "CSAFPID-1741411",
               "CSAFPID-1741408",
               "CSAFPID-1741417",
               "CSAFPID-1741413",
               "CSAFPID-1741423",
               "CSAFPID-1741407",
               "CSAFPID-1741410",
               "CSAFPID-1741428",
               "CSAFPID-1741425",
               "CSAFPID-1741419",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1723936",
               "CSAFPID-1723937",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723941",
               "CSAFPID-1723942",
               "CSAFPID-1723943",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49118",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49118.json",
            },
         ],
         title: "CVE-2024-49118",
      },
      {
         cve: "CVE-2024-49127",
         cwe: {
            id: "CWE-416",
            name: "Use After Free",
         },
         notes: [
            {
               category: "other",
               text: "Use After Free",
               title: "CWE-416",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741420",
               "CSAFPID-1741408",
               "CSAFPID-1741426",
               "CSAFPID-1741416",
               "CSAFPID-1741410",
               "CSAFPID-1741430",
               "CSAFPID-1741406",
               "CSAFPID-1741423",
               "CSAFPID-1741432",
               "CSAFPID-1741418",
               "CSAFPID-1741405",
               "CSAFPID-1741407",
               "CSAFPID-1741429",
               "CSAFPID-1741415",
               "CSAFPID-1741431",
               "CSAFPID-1741427",
               "CSAFPID-1741424",
               "CSAFPID-1741421",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741417",
               "CSAFPID-1741419",
               "CSAFPID-1741414",
               "CSAFPID-1741428",
               "CSAFPID-1741425",
               "CSAFPID-1741413",
               "CSAFPID-1741409",
               "CSAFPID-1741422",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1723936",
               "CSAFPID-1723937",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723941",
               "CSAFPID-1723942",
               "CSAFPID-1723943",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49127",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49127.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741420",
                  "CSAFPID-1741408",
                  "CSAFPID-1741426",
                  "CSAFPID-1741416",
                  "CSAFPID-1741410",
                  "CSAFPID-1741430",
                  "CSAFPID-1741406",
                  "CSAFPID-1741423",
                  "CSAFPID-1741432",
                  "CSAFPID-1741418",
                  "CSAFPID-1741405",
                  "CSAFPID-1741407",
                  "CSAFPID-1741429",
                  "CSAFPID-1741415",
                  "CSAFPID-1741431",
                  "CSAFPID-1741427",
                  "CSAFPID-1741424",
                  "CSAFPID-1741421",
                  "CSAFPID-1741411",
                  "CSAFPID-1741412",
                  "CSAFPID-1741417",
                  "CSAFPID-1741419",
                  "CSAFPID-1741414",
                  "CSAFPID-1741428",
                  "CSAFPID-1741425",
                  "CSAFPID-1741413",
                  "CSAFPID-1741409",
                  "CSAFPID-1741422",
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
                  "CSAFPID-1723936",
                  "CSAFPID-1723937",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
                  "CSAFPID-1723941",
                  "CSAFPID-1723942",
                  "CSAFPID-1723943",
                  "CSAFPID-1723944",
                  "CSAFPID-1723945",
                  "CSAFPID-1717820",
                  "CSAFPID-1717821",
                  "CSAFPID-1717822",
                  "CSAFPID-1717823",
               ],
            },
         ],
         title: "CVE-2024-49127",
      },
      {
         cve: "CVE-2024-49138",
         cwe: {
            id: "CWE-122",
            name: "Heap-based Buffer Overflow",
         },
         notes: [
            {
               category: "other",
               text: "Heap-based Buffer Overflow",
               title: "CWE-122",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1723936",
               "CSAFPID-1723937",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723941",
               "CSAFPID-1723942",
               "CSAFPID-1723943",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
               "CSAFPID-549001",
               "CSAFPID-1741424",
               "CSAFPID-1741422",
               "CSAFPID-1741414",
               "CSAFPID-1741431",
               "CSAFPID-1741412",
               "CSAFPID-1741432",
               "CSAFPID-1741425",
               "CSAFPID-1741417",
               "CSAFPID-1741423",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741413",
               "CSAFPID-1741411",
               "CSAFPID-1741405",
               "CSAFPID-1741427",
               "CSAFPID-1741416",
               "CSAFPID-1741418",
               "CSAFPID-1741407",
               "CSAFPID-1741429",
               "CSAFPID-1741420",
               "CSAFPID-1741406",
               "CSAFPID-1741421",
               "CSAFPID-1741419",
               "CSAFPID-1741415",
               "CSAFPID-1741426",
               "CSAFPID-1741430",
               "CSAFPID-1741408",
               "CSAFPID-1741428",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49138",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49138.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
                  "CSAFPID-1723936",
                  "CSAFPID-1723937",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
                  "CSAFPID-1723941",
                  "CSAFPID-1723942",
                  "CSAFPID-1723943",
                  "CSAFPID-1723944",
                  "CSAFPID-1723945",
                  "CSAFPID-1717820",
                  "CSAFPID-1717821",
                  "CSAFPID-1717822",
                  "CSAFPID-1717823",
                  "CSAFPID-549001",
                  "CSAFPID-1741424",
                  "CSAFPID-1741422",
                  "CSAFPID-1741414",
                  "CSAFPID-1741431",
                  "CSAFPID-1741412",
                  "CSAFPID-1741432",
                  "CSAFPID-1741425",
                  "CSAFPID-1741417",
                  "CSAFPID-1741423",
                  "CSAFPID-1741409",
                  "CSAFPID-1741410",
                  "CSAFPID-1741413",
                  "CSAFPID-1741411",
                  "CSAFPID-1741405",
                  "CSAFPID-1741427",
                  "CSAFPID-1741416",
                  "CSAFPID-1741418",
                  "CSAFPID-1741407",
                  "CSAFPID-1741429",
                  "CSAFPID-1741420",
                  "CSAFPID-1741406",
                  "CSAFPID-1741421",
                  "CSAFPID-1741419",
                  "CSAFPID-1741415",
                  "CSAFPID-1741426",
                  "CSAFPID-1741430",
                  "CSAFPID-1741408",
                  "CSAFPID-1741428",
               ],
            },
         ],
         title: "CVE-2024-49138",
      },
      {
         cve: "CVE-2024-49085",
         cwe: {
            id: "CWE-190",
            name: "Integer Overflow or Wraparound",
         },
         notes: [
            {
               category: "other",
               text: "Integer Overflow or Wraparound",
               title: "CWE-190",
            },
            {
               category: "other",
               text: "Heap-based Buffer Overflow",
               title: "CWE-122",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741416",
               "CSAFPID-1741419",
               "CSAFPID-1741427",
               "CSAFPID-1741428",
               "CSAFPID-1741429",
               "CSAFPID-1741430",
               "CSAFPID-1741431",
               "CSAFPID-1741432",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741354",
               "CSAFPID-1741352",
               "CSAFPID-1741353",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723941",
               "CSAFPID-1723942",
               "CSAFPID-1723943",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49085",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49085.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741407",
                  "CSAFPID-1741422",
                  "CSAFPID-1741416",
                  "CSAFPID-1741419",
                  "CSAFPID-1741427",
                  "CSAFPID-1741428",
                  "CSAFPID-1741429",
                  "CSAFPID-1741430",
                  "CSAFPID-1741431",
                  "CSAFPID-1741432",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741354",
                  "CSAFPID-1741352",
                  "CSAFPID-1741353",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
                  "CSAFPID-1723941",
                  "CSAFPID-1723942",
                  "CSAFPID-1723943",
                  "CSAFPID-1723944",
                  "CSAFPID-1723945",
                  "CSAFPID-1717820",
                  "CSAFPID-1717821",
                  "CSAFPID-1717822",
                  "CSAFPID-1717823",
               ],
            },
         ],
         title: "CVE-2024-49085",
      },
      {
         cve: "CVE-2024-49086",
         cwe: {
            id: "CWE-122",
            name: "Heap-based Buffer Overflow",
         },
         notes: [
            {
               category: "other",
               text: "Heap-based Buffer Overflow",
               title: "CWE-122",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741416",
               "CSAFPID-1741419",
               "CSAFPID-1741427",
               "CSAFPID-1741428",
               "CSAFPID-1741429",
               "CSAFPID-1741430",
               "CSAFPID-1741431",
               "CSAFPID-1741432",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741354",
               "CSAFPID-1741352",
               "CSAFPID-1741353",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723941",
               "CSAFPID-1723942",
               "CSAFPID-1723943",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49086",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49086.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741407",
                  "CSAFPID-1741422",
                  "CSAFPID-1741416",
                  "CSAFPID-1741419",
                  "CSAFPID-1741427",
                  "CSAFPID-1741428",
                  "CSAFPID-1741429",
                  "CSAFPID-1741430",
                  "CSAFPID-1741431",
                  "CSAFPID-1741432",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741354",
                  "CSAFPID-1741352",
                  "CSAFPID-1741353",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
                  "CSAFPID-1723941",
                  "CSAFPID-1723942",
                  "CSAFPID-1723943",
                  "CSAFPID-1723944",
                  "CSAFPID-1723945",
                  "CSAFPID-1717820",
                  "CSAFPID-1717821",
                  "CSAFPID-1717822",
                  "CSAFPID-1717823",
               ],
            },
         ],
         title: "CVE-2024-49086",
      },
      {
         cve: "CVE-2024-49091",
         cwe: {
            id: "CWE-591",
            name: "Sensitive Data Storage in Improperly Locked Memory",
         },
         notes: [
            {
               category: "other",
               text: "Sensitive Data Storage in Improperly Locked Memory",
               title: "CWE-591",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741416",
               "CSAFPID-1741419",
               "CSAFPID-1741427",
               "CSAFPID-1741431",
               "CSAFPID-1741432",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741354",
               "CSAFPID-1741352",
               "CSAFPID-1741353",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49091",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49091.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.2,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741407",
                  "CSAFPID-1741422",
                  "CSAFPID-1741416",
                  "CSAFPID-1741419",
                  "CSAFPID-1741427",
                  "CSAFPID-1741431",
                  "CSAFPID-1741432",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741354",
                  "CSAFPID-1741352",
                  "CSAFPID-1741353",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
                  "CSAFPID-1717820",
                  "CSAFPID-1717821",
                  "CSAFPID-1717822",
                  "CSAFPID-1717823",
               ],
            },
         ],
         title: "CVE-2024-49091",
      },
      {
         cve: "CVE-2024-49106",
         cwe: {
            id: "CWE-591",
            name: "Sensitive Data Storage in Improperly Locked Memory",
         },
         notes: [
            {
               category: "other",
               text: "Sensitive Data Storage in Improperly Locked Memory",
               title: "CWE-591",
            },
            {
               category: "other",
               text: "Use After Free",
               title: "CWE-416",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741416",
               "CSAFPID-1741419",
               "CSAFPID-1741427",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741354",
               "CSAFPID-1741352",
               "CSAFPID-1741353",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49106",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49106.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741407",
                  "CSAFPID-1741422",
                  "CSAFPID-1741416",
                  "CSAFPID-1741419",
                  "CSAFPID-1741427",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741354",
                  "CSAFPID-1741352",
                  "CSAFPID-1741353",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
               ],
            },
         ],
         title: "CVE-2024-49106",
      },
      {
         cve: "CVE-2024-49108",
         cwe: {
            id: "CWE-591",
            name: "Sensitive Data Storage in Improperly Locked Memory",
         },
         notes: [
            {
               category: "other",
               text: "Sensitive Data Storage in Improperly Locked Memory",
               title: "CWE-591",
            },
            {
               category: "other",
               text: "Use After Free",
               title: "CWE-416",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741416",
               "CSAFPID-1741419",
               "CSAFPID-1741427",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741354",
               "CSAFPID-1741352",
               "CSAFPID-1741353",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49108",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49108.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741407",
                  "CSAFPID-1741422",
                  "CSAFPID-1741416",
                  "CSAFPID-1741419",
                  "CSAFPID-1741427",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741354",
                  "CSAFPID-1741352",
                  "CSAFPID-1741353",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
               ],
            },
         ],
         title: "CVE-2024-49108",
      },
      {
         cve: "CVE-2024-49115",
         cwe: {
            id: "CWE-591",
            name: "Sensitive Data Storage in Improperly Locked Memory",
         },
         notes: [
            {
               category: "other",
               text: "Sensitive Data Storage in Improperly Locked Memory",
               title: "CWE-591",
            },
            {
               category: "other",
               text: "Use After Free",
               title: "CWE-416",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741416",
               "CSAFPID-1741419",
               "CSAFPID-1741427",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741354",
               "CSAFPID-1741352",
               "CSAFPID-1741353",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49115",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49115.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741407",
                  "CSAFPID-1741422",
                  "CSAFPID-1741416",
                  "CSAFPID-1741419",
                  "CSAFPID-1741427",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741354",
                  "CSAFPID-1741352",
                  "CSAFPID-1741353",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
               ],
            },
         ],
         title: "CVE-2024-49115",
      },
      {
         cve: "CVE-2024-49119",
         cwe: {
            id: "CWE-843",
            name: "Access of Resource Using Incompatible Type ('Type Confusion')",
         },
         notes: [
            {
               category: "other",
               text: "Access of Resource Using Incompatible Type ('Type Confusion')",
               title: "CWE-843",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741416",
               "CSAFPID-1741419",
               "CSAFPID-1741427",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741354",
               "CSAFPID-1741352",
               "CSAFPID-1741353",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49119",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49119.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741407",
                  "CSAFPID-1741422",
                  "CSAFPID-1741416",
                  "CSAFPID-1741419",
                  "CSAFPID-1741427",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741354",
                  "CSAFPID-1741352",
                  "CSAFPID-1741353",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
               ],
            },
         ],
         title: "CVE-2024-49119",
      },
      {
         cve: "CVE-2024-49120",
         cwe: {
            id: "CWE-453",
            name: "Insecure Default Variable Initialization",
         },
         notes: [
            {
               category: "other",
               text: "Insecure Default Variable Initialization",
               title: "CWE-453",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741416",
               "CSAFPID-1741419",
               "CSAFPID-1741427",
               "CSAFPID-1741431",
               "CSAFPID-1741432",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741354",
               "CSAFPID-1741352",
               "CSAFPID-1741353",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49120",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49120.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741407",
                  "CSAFPID-1741422",
                  "CSAFPID-1741416",
                  "CSAFPID-1741419",
                  "CSAFPID-1741427",
                  "CSAFPID-1741431",
                  "CSAFPID-1741432",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741354",
                  "CSAFPID-1741352",
                  "CSAFPID-1741353",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
                  "CSAFPID-1717820",
                  "CSAFPID-1717821",
                  "CSAFPID-1717822",
                  "CSAFPID-1717823",
               ],
            },
         ],
         title: "CVE-2024-49120",
      },
      {
         cve: "CVE-2024-49125",
         cwe: {
            id: "CWE-122",
            name: "Heap-based Buffer Overflow",
         },
         notes: [
            {
               category: "other",
               text: "Heap-based Buffer Overflow",
               title: "CWE-122",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741416",
               "CSAFPID-1741419",
               "CSAFPID-1741427",
               "CSAFPID-1741428",
               "CSAFPID-1741429",
               "CSAFPID-1741430",
               "CSAFPID-1741431",
               "CSAFPID-1741432",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741354",
               "CSAFPID-1741352",
               "CSAFPID-1741353",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723941",
               "CSAFPID-1723942",
               "CSAFPID-1723943",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49125",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49125.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741407",
                  "CSAFPID-1741422",
                  "CSAFPID-1741416",
                  "CSAFPID-1741419",
                  "CSAFPID-1741427",
                  "CSAFPID-1741428",
                  "CSAFPID-1741429",
                  "CSAFPID-1741430",
                  "CSAFPID-1741431",
                  "CSAFPID-1741432",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741354",
                  "CSAFPID-1741352",
                  "CSAFPID-1741353",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
                  "CSAFPID-1723941",
                  "CSAFPID-1723942",
                  "CSAFPID-1723943",
                  "CSAFPID-1723944",
                  "CSAFPID-1723945",
                  "CSAFPID-1717820",
                  "CSAFPID-1717821",
                  "CSAFPID-1717822",
                  "CSAFPID-1717823",
               ],
            },
         ],
         title: "CVE-2024-49125",
      },
      {
         cve: "CVE-2024-49129",
         cwe: {
            id: "CWE-400",
            name: "Uncontrolled Resource Consumption",
         },
         notes: [
            {
               category: "other",
               text: "Uncontrolled Resource Consumption",
               title: "CWE-400",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741416",
               "CSAFPID-1741419",
               "CSAFPID-1741427",
               "CSAFPID-1741431",
               "CSAFPID-1741432",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741354",
               "CSAFPID-1741352",
               "CSAFPID-1741353",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49129",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49129.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741407",
                  "CSAFPID-1741422",
                  "CSAFPID-1741416",
                  "CSAFPID-1741419",
                  "CSAFPID-1741427",
                  "CSAFPID-1741431",
                  "CSAFPID-1741432",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741354",
                  "CSAFPID-1741352",
                  "CSAFPID-1741353",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
                  "CSAFPID-1717820",
                  "CSAFPID-1717821",
                  "CSAFPID-1717822",
                  "CSAFPID-1717823",
               ],
            },
         ],
         title: "CVE-2024-49129",
      },
      {
         cve: "CVE-2024-49116",
         cwe: {
            id: "CWE-416",
            name: "Use After Free",
         },
         notes: [
            {
               category: "other",
               text: "Use After Free",
               title: "CWE-416",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741354",
               "CSAFPID-1741352",
               "CSAFPID-1741353",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1741407",
               "CSAFPID-1741416",
               "CSAFPID-1741427",
               "CSAFPID-1741422",
               "CSAFPID-1741419",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49116",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49116.json",
            },
         ],
         title: "CVE-2024-49116",
      },
      {
         cve: "CVE-2024-49128",
         cwe: {
            id: "CWE-591",
            name: "Sensitive Data Storage in Improperly Locked Memory",
         },
         notes: [
            {
               category: "other",
               text: "Sensitive Data Storage in Improperly Locked Memory",
               title: "CWE-591",
            },
            {
               category: "other",
               text: "Use After Free",
               title: "CWE-416",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741432",
               "CSAFPID-1741416",
               "CSAFPID-1741407",
               "CSAFPID-1741427",
               "CSAFPID-1741431",
               "CSAFPID-1741419",
               "CSAFPID-1741422",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741354",
               "CSAFPID-1741352",
               "CSAFPID-1741353",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49128",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49128.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741432",
                  "CSAFPID-1741416",
                  "CSAFPID-1741407",
                  "CSAFPID-1741427",
                  "CSAFPID-1741431",
                  "CSAFPID-1741419",
                  "CSAFPID-1741422",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741354",
                  "CSAFPID-1741352",
                  "CSAFPID-1741353",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
                  "CSAFPID-1717820",
                  "CSAFPID-1717821",
                  "CSAFPID-1717822",
                  "CSAFPID-1717823",
               ],
            },
         ],
         title: "CVE-2024-49128",
      },
      {
         cve: "CVE-2024-49117",
         cwe: {
            id: "CWE-393",
            name: "Return of Wrong Status Code",
         },
         notes: [
            {
               category: "other",
               text: "Return of Wrong Status Code",
               title: "CWE-393",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741422",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1717810",
               "CSAFPID-1741367",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49117",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49117.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741422",
                  "CSAFPID-1741411",
                  "CSAFPID-1741412",
                  "CSAFPID-1741416",
                  "CSAFPID-1741417",
                  "CSAFPID-1741418",
                  "CSAFPID-1741419",
                  "CSAFPID-1741420",
                  "CSAFPID-1741421",
                  "CSAFPID-1717810",
                  "CSAFPID-1741367",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
               ],
            },
         ],
         title: "CVE-2024-49117",
      },
      {
         cve: "CVE-2024-49093",
         cwe: {
            id: "CWE-681",
            name: "Incorrect Conversion between Numeric Types",
         },
         notes: [
            {
               category: "other",
               text: "Incorrect Conversion between Numeric Types",
               title: "CWE-681",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741416",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1741353",
               "CSAFPID-1741354",
               "CSAFPID-1741371",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49093",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49093.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741416",
                  "CSAFPID-1741420",
                  "CSAFPID-1741421",
                  "CSAFPID-1741353",
                  "CSAFPID-1741354",
                  "CSAFPID-1741371",
               ],
            },
         ],
         title: "CVE-2024-49093",
      },
      {
         cve: "CVE-2024-43594",
         cwe: {
            id: "CWE-284",
            name: "Improper Access Control",
         },
         notes: [
            {
               category: "other",
               text: "Improper Access Control",
               title: "CWE-284",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-618487",
               "CSAFPID-634172",
               "CSAFPID-1741404",
               "CSAFPID-1718165",
               "CSAFPID-1718167",
               "CSAFPID-1741485",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-43594",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-43594.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.3,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-618487",
                  "CSAFPID-634172",
                  "CSAFPID-1741404",
                  "CSAFPID-1718165",
                  "CSAFPID-1718167",
                  "CSAFPID-1741485",
               ],
            },
         ],
         title: "CVE-2024-43594",
      },
      {
         cve: "CVE-2024-49073",
         cwe: {
            id: "CWE-20",
            name: "Improper Input Validation",
         },
         notes: [
            {
               category: "other",
               text: "Improper Input Validation",
               title: "CWE-20",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49073",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49073.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.8,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741405",
                  "CSAFPID-1741406",
                  "CSAFPID-1741407",
                  "CSAFPID-1741408",
                  "CSAFPID-1741409",
                  "CSAFPID-1741410",
                  "CSAFPID-1741411",
                  "CSAFPID-1741412",
                  "CSAFPID-1741413",
                  "CSAFPID-1741414",
                  "CSAFPID-1741415",
                  "CSAFPID-1741416",
                  "CSAFPID-1741417",
                  "CSAFPID-1741418",
                  "CSAFPID-1741419",
                  "CSAFPID-1741420",
                  "CSAFPID-1741421",
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
               ],
            },
         ],
         title: "CVE-2024-49073",
      },
      {
         cve: "CVE-2024-49074",
         cwe: {
            id: "CWE-416",
            name: "Use After Free",
         },
         notes: [
            {
               category: "other",
               text: "Use After Free",
               title: "CWE-416",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1741366",
               "CSAFPID-1741368",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49074",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49074.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741405",
                  "CSAFPID-1741406",
                  "CSAFPID-1741407",
                  "CSAFPID-1741408",
                  "CSAFPID-1741409",
                  "CSAFPID-1741410",
                  "CSAFPID-1741413",
                  "CSAFPID-1741414",
                  "CSAFPID-1741415",
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1741366",
                  "CSAFPID-1741368",
               ],
            },
         ],
         title: "CVE-2024-49074",
      },
      {
         cve: "CVE-2024-49084",
         cwe: {
            id: "CWE-362",
            name: "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')",
         },
         notes: [
            {
               category: "other",
               text: "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')",
               title: "CWE-362",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1741423",
               "CSAFPID-1741424",
               "CSAFPID-1741425",
               "CSAFPID-1741426",
               "CSAFPID-1741427",
               "CSAFPID-1741428",
               "CSAFPID-1741429",
               "CSAFPID-1741430",
               "CSAFPID-1741431",
               "CSAFPID-1741432",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1723936",
               "CSAFPID-1723937",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723941",
               "CSAFPID-1723942",
               "CSAFPID-1723943",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49084",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49084.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741405",
                  "CSAFPID-1741406",
                  "CSAFPID-1741407",
                  "CSAFPID-1741422",
                  "CSAFPID-1741408",
                  "CSAFPID-1741409",
                  "CSAFPID-1741410",
                  "CSAFPID-1741411",
                  "CSAFPID-1741412",
                  "CSAFPID-1741413",
                  "CSAFPID-1741414",
                  "CSAFPID-1741415",
                  "CSAFPID-1741416",
                  "CSAFPID-1741417",
                  "CSAFPID-1741418",
                  "CSAFPID-1741419",
                  "CSAFPID-1741420",
                  "CSAFPID-1741421",
                  "CSAFPID-1741423",
                  "CSAFPID-1741424",
                  "CSAFPID-1741425",
                  "CSAFPID-1741426",
                  "CSAFPID-1741427",
                  "CSAFPID-1741428",
                  "CSAFPID-1741429",
                  "CSAFPID-1741430",
                  "CSAFPID-1741431",
                  "CSAFPID-1741432",
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
                  "CSAFPID-1723936",
                  "CSAFPID-1723937",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
                  "CSAFPID-1723941",
                  "CSAFPID-1723942",
                  "CSAFPID-1723943",
                  "CSAFPID-1723944",
                  "CSAFPID-1723945",
                  "CSAFPID-1717820",
                  "CSAFPID-1717821",
                  "CSAFPID-1717822",
                  "CSAFPID-1717823",
               ],
            },
         ],
         title: "CVE-2024-49084",
      },
      {
         cve: "CVE-2024-49087",
         cwe: {
            id: "CWE-20",
            name: "Improper Input Validation",
         },
         notes: [
            {
               category: "other",
               text: "Improper Input Validation",
               title: "CWE-20",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49087",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49087.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.6,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741405",
                  "CSAFPID-1741406",
                  "CSAFPID-1741407",
                  "CSAFPID-1741408",
                  "CSAFPID-1741409",
                  "CSAFPID-1741410",
                  "CSAFPID-1741411",
                  "CSAFPID-1741412",
                  "CSAFPID-1741413",
                  "CSAFPID-1741414",
                  "CSAFPID-1741415",
                  "CSAFPID-1741416",
                  "CSAFPID-1741417",
                  "CSAFPID-1741418",
                  "CSAFPID-1741419",
                  "CSAFPID-1741420",
                  "CSAFPID-1741421",
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
               ],
            },
         ],
         title: "CVE-2024-49087",
      },
      {
         cve: "CVE-2024-49089",
         cwe: {
            id: "CWE-190",
            name: "Integer Overflow or Wraparound",
         },
         notes: [
            {
               category: "other",
               text: "Integer Overflow or Wraparound",
               title: "CWE-190",
            },
            {
               category: "other",
               text: "Heap-based Buffer Overflow",
               title: "CWE-122",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1741423",
               "CSAFPID-1741424",
               "CSAFPID-1741425",
               "CSAFPID-1741426",
               "CSAFPID-1741427",
               "CSAFPID-1741428",
               "CSAFPID-1741429",
               "CSAFPID-1741430",
               "CSAFPID-1741431",
               "CSAFPID-1741432",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1723936",
               "CSAFPID-1723937",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723941",
               "CSAFPID-1723942",
               "CSAFPID-1723943",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49089",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49089.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.2,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741405",
                  "CSAFPID-1741406",
                  "CSAFPID-1741407",
                  "CSAFPID-1741422",
                  "CSAFPID-1741408",
                  "CSAFPID-1741409",
                  "CSAFPID-1741410",
                  "CSAFPID-1741411",
                  "CSAFPID-1741412",
                  "CSAFPID-1741413",
                  "CSAFPID-1741414",
                  "CSAFPID-1741415",
                  "CSAFPID-1741416",
                  "CSAFPID-1741417",
                  "CSAFPID-1741418",
                  "CSAFPID-1741419",
                  "CSAFPID-1741420",
                  "CSAFPID-1741421",
                  "CSAFPID-1741423",
                  "CSAFPID-1741424",
                  "CSAFPID-1741425",
                  "CSAFPID-1741426",
                  "CSAFPID-1741427",
                  "CSAFPID-1741428",
                  "CSAFPID-1741429",
                  "CSAFPID-1741430",
                  "CSAFPID-1741431",
                  "CSAFPID-1741432",
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
                  "CSAFPID-1723936",
                  "CSAFPID-1723937",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
                  "CSAFPID-1723941",
                  "CSAFPID-1723942",
                  "CSAFPID-1723943",
                  "CSAFPID-1723944",
                  "CSAFPID-1723945",
                  "CSAFPID-1717820",
                  "CSAFPID-1717821",
                  "CSAFPID-1717822",
                  "CSAFPID-1717823",
               ],
            },
         ],
         title: "CVE-2024-49089",
      },
      {
         cve: "CVE-2024-49092",
         cwe: {
            id: "CWE-125",
            name: "Out-of-bounds Read",
         },
         notes: [
            {
               category: "other",
               text: "Out-of-bounds Read",
               title: "CWE-125",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49092",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49092.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.8,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741405",
                  "CSAFPID-1741406",
                  "CSAFPID-1741407",
                  "CSAFPID-1741408",
                  "CSAFPID-1741409",
                  "CSAFPID-1741410",
                  "CSAFPID-1741411",
                  "CSAFPID-1741412",
                  "CSAFPID-1741413",
                  "CSAFPID-1741414",
                  "CSAFPID-1741415",
                  "CSAFPID-1741416",
                  "CSAFPID-1741417",
                  "CSAFPID-1741418",
                  "CSAFPID-1741419",
                  "CSAFPID-1741420",
                  "CSAFPID-1741421",
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
               ],
            },
         ],
         title: "CVE-2024-49092",
      },
      {
         cve: "CVE-2024-49094",
         cwe: {
            id: "CWE-122",
            name: "Heap-based Buffer Overflow",
         },
         notes: [
            {
               category: "other",
               text: "Heap-based Buffer Overflow",
               title: "CWE-122",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49094",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49094.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.6,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741405",
                  "CSAFPID-1741406",
                  "CSAFPID-1741407",
                  "CSAFPID-1741408",
                  "CSAFPID-1741409",
                  "CSAFPID-1741410",
                  "CSAFPID-1741411",
                  "CSAFPID-1741412",
                  "CSAFPID-1741413",
                  "CSAFPID-1741414",
                  "CSAFPID-1741415",
                  "CSAFPID-1741416",
                  "CSAFPID-1741417",
                  "CSAFPID-1741418",
                  "CSAFPID-1741419",
                  "CSAFPID-1741420",
                  "CSAFPID-1741421",
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
               ],
            },
         ],
         title: "CVE-2024-49094",
      },
      {
         cve: "CVE-2024-49096",
         cwe: {
            id: "CWE-400",
            name: "Uncontrolled Resource Consumption",
         },
         notes: [
            {
               category: "other",
               text: "Uncontrolled Resource Consumption",
               title: "CWE-400",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1741423",
               "CSAFPID-1741424",
               "CSAFPID-1741425",
               "CSAFPID-1741426",
               "CSAFPID-1741427",
               "CSAFPID-1741428",
               "CSAFPID-1741429",
               "CSAFPID-1741430",
               "CSAFPID-1741431",
               "CSAFPID-1741432",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1723936",
               "CSAFPID-1723937",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723941",
               "CSAFPID-1723942",
               "CSAFPID-1723943",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49096",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49096.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741405",
                  "CSAFPID-1741406",
                  "CSAFPID-1741407",
                  "CSAFPID-1741422",
                  "CSAFPID-1741408",
                  "CSAFPID-1741409",
                  "CSAFPID-1741410",
                  "CSAFPID-1741411",
                  "CSAFPID-1741412",
                  "CSAFPID-1741413",
                  "CSAFPID-1741414",
                  "CSAFPID-1741415",
                  "CSAFPID-1741416",
                  "CSAFPID-1741417",
                  "CSAFPID-1741418",
                  "CSAFPID-1741419",
                  "CSAFPID-1741420",
                  "CSAFPID-1741421",
                  "CSAFPID-1741423",
                  "CSAFPID-1741424",
                  "CSAFPID-1741425",
                  "CSAFPID-1741426",
                  "CSAFPID-1741427",
                  "CSAFPID-1741428",
                  "CSAFPID-1741429",
                  "CSAFPID-1741430",
                  "CSAFPID-1741431",
                  "CSAFPID-1741432",
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
                  "CSAFPID-1723936",
                  "CSAFPID-1723937",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
                  "CSAFPID-1723941",
                  "CSAFPID-1723942",
                  "CSAFPID-1723943",
                  "CSAFPID-1723944",
                  "CSAFPID-1723945",
                  "CSAFPID-1717820",
                  "CSAFPID-1717821",
                  "CSAFPID-1717822",
                  "CSAFPID-1717823",
               ],
            },
         ],
         title: "CVE-2024-49096",
      },
      {
         cve: "CVE-2024-49097",
         cwe: {
            id: "CWE-591",
            name: "Sensitive Data Storage in Improperly Locked Memory",
         },
         notes: [
            {
               category: "other",
               text: "Sensitive Data Storage in Improperly Locked Memory",
               title: "CWE-591",
            },
            {
               category: "other",
               text: "Use After Free",
               title: "CWE-416",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49097",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49097.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741405",
                  "CSAFPID-1741406",
                  "CSAFPID-1741407",
                  "CSAFPID-1741422",
                  "CSAFPID-1741408",
                  "CSAFPID-1741409",
                  "CSAFPID-1741410",
                  "CSAFPID-1741411",
                  "CSAFPID-1741412",
                  "CSAFPID-1741413",
                  "CSAFPID-1741414",
                  "CSAFPID-1741415",
                  "CSAFPID-1741416",
                  "CSAFPID-1741417",
                  "CSAFPID-1741418",
                  "CSAFPID-1741419",
                  "CSAFPID-1741420",
                  "CSAFPID-1741421",
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
               ],
            },
         ],
         title: "CVE-2024-49097",
      },
      {
         cve: "CVE-2024-49098",
         cwe: {
            id: "CWE-125",
            name: "Out-of-bounds Read",
         },
         notes: [
            {
               category: "other",
               text: "Out-of-bounds Read",
               title: "CWE-125",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49098",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49098.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741405",
                  "CSAFPID-1741406",
                  "CSAFPID-1741407",
                  "CSAFPID-1741408",
                  "CSAFPID-1741409",
                  "CSAFPID-1741410",
                  "CSAFPID-1741411",
                  "CSAFPID-1741412",
                  "CSAFPID-1741413",
                  "CSAFPID-1741414",
                  "CSAFPID-1741415",
                  "CSAFPID-1741416",
                  "CSAFPID-1741417",
                  "CSAFPID-1741418",
                  "CSAFPID-1741419",
                  "CSAFPID-1741420",
                  "CSAFPID-1741421",
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
               ],
            },
         ],
         title: "CVE-2024-49098",
      },
      {
         cve: "CVE-2024-49099",
         cwe: {
            id: "CWE-125",
            name: "Out-of-bounds Read",
         },
         notes: [
            {
               category: "other",
               text: "Out-of-bounds Read",
               title: "CWE-125",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49099",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49099.json",
            },
         ],
         title: "CVE-2024-49099",
      },
      {
         cve: "CVE-2024-49101",
         cwe: {
            id: "CWE-125",
            name: "Out-of-bounds Read",
         },
         notes: [
            {
               category: "other",
               text: "Out-of-bounds Read",
               title: "CWE-125",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49101",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49101.json",
            },
         ],
         title: "CVE-2024-49101",
      },
      {
         cve: "CVE-2024-49102",
         cwe: {
            id: "CWE-122",
            name: "Heap-based Buffer Overflow",
         },
         notes: [
            {
               category: "other",
               text: "Heap-based Buffer Overflow",
               title: "CWE-122",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1741423",
               "CSAFPID-1741424",
               "CSAFPID-1741425",
               "CSAFPID-1741426",
               "CSAFPID-1741427",
               "CSAFPID-1741428",
               "CSAFPID-1741429",
               "CSAFPID-1741430",
               "CSAFPID-1741431",
               "CSAFPID-1741432",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1723936",
               "CSAFPID-1723937",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723941",
               "CSAFPID-1723942",
               "CSAFPID-1723943",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49102",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49102.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741405",
                  "CSAFPID-1741406",
                  "CSAFPID-1741407",
                  "CSAFPID-1741422",
                  "CSAFPID-1741408",
                  "CSAFPID-1741409",
                  "CSAFPID-1741410",
                  "CSAFPID-1741411",
                  "CSAFPID-1741412",
                  "CSAFPID-1741413",
                  "CSAFPID-1741414",
                  "CSAFPID-1741415",
                  "CSAFPID-1741416",
                  "CSAFPID-1741417",
                  "CSAFPID-1741418",
                  "CSAFPID-1741419",
                  "CSAFPID-1741420",
                  "CSAFPID-1741421",
                  "CSAFPID-1741423",
                  "CSAFPID-1741424",
                  "CSAFPID-1741425",
                  "CSAFPID-1741426",
                  "CSAFPID-1741427",
                  "CSAFPID-1741428",
                  "CSAFPID-1741429",
                  "CSAFPID-1741430",
                  "CSAFPID-1741431",
                  "CSAFPID-1741432",
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
                  "CSAFPID-1723936",
                  "CSAFPID-1723937",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
                  "CSAFPID-1723941",
                  "CSAFPID-1723942",
                  "CSAFPID-1723943",
                  "CSAFPID-1723944",
                  "CSAFPID-1723945",
                  "CSAFPID-1717820",
                  "CSAFPID-1717821",
                  "CSAFPID-1717822",
                  "CSAFPID-1717823",
               ],
            },
         ],
         title: "CVE-2024-49102",
      },
      {
         cve: "CVE-2024-49103",
         cwe: {
            id: "CWE-191",
            name: "Integer Underflow (Wrap or Wraparound)",
         },
         notes: [
            {
               category: "other",
               text: "Integer Underflow (Wrap or Wraparound)",
               title: "CWE-191",
            },
            {
               category: "other",
               text: "Out-of-bounds Read",
               title: "CWE-125",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49103",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49103.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741405",
                  "CSAFPID-1741406",
                  "CSAFPID-1741407",
                  "CSAFPID-1741408",
                  "CSAFPID-1741409",
                  "CSAFPID-1741410",
                  "CSAFPID-1741411",
                  "CSAFPID-1741412",
                  "CSAFPID-1741413",
                  "CSAFPID-1741414",
                  "CSAFPID-1741415",
                  "CSAFPID-1741416",
                  "CSAFPID-1741417",
                  "CSAFPID-1741418",
                  "CSAFPID-1741419",
                  "CSAFPID-1741420",
                  "CSAFPID-1741421",
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
               ],
            },
         ],
         title: "CVE-2024-49103",
      },
      {
         cve: "CVE-2024-49104",
         cwe: {
            id: "CWE-122",
            name: "Heap-based Buffer Overflow",
         },
         notes: [
            {
               category: "other",
               text: "Heap-based Buffer Overflow",
               title: "CWE-122",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1741423",
               "CSAFPID-1741424",
               "CSAFPID-1741425",
               "CSAFPID-1741426",
               "CSAFPID-1741427",
               "CSAFPID-1741428",
               "CSAFPID-1741429",
               "CSAFPID-1741430",
               "CSAFPID-1741431",
               "CSAFPID-1741432",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1723936",
               "CSAFPID-1723937",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723941",
               "CSAFPID-1723942",
               "CSAFPID-1723943",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49104",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49104.json",
            },
         ],
         title: "CVE-2024-49104",
      },
      {
         cve: "CVE-2024-49105",
         cwe: {
            id: "CWE-284",
            name: "Improper Access Control",
         },
         notes: [
            {
               category: "other",
               text: "Improper Access Control",
               title: "CWE-284",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1723936",
               "CSAFPID-1723937",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
               "CSAFPID-1741419",
               "CSAFPID-1741423",
               "CSAFPID-1741408",
               "CSAFPID-1741411",
               "CSAFPID-1741430",
               "CSAFPID-1741426",
               "CSAFPID-1741432",
               "CSAFPID-1741413",
               "CSAFPID-1741415",
               "CSAFPID-1741410",
               "CSAFPID-1741406",
               "CSAFPID-1741424",
               "CSAFPID-1741409",
               "CSAFPID-1741421",
               "CSAFPID-1741417",
               "CSAFPID-1741407",
               "CSAFPID-1741427",
               "CSAFPID-1741412",
               "CSAFPID-1741416",
               "CSAFPID-1741418",
               "CSAFPID-1741431",
               "CSAFPID-1741405",
               "CSAFPID-1741422",
               "CSAFPID-1741420",
               "CSAFPID-1741414",
               "CSAFPID-1741425",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49105",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49105.json",
            },
         ],
         title: "CVE-2024-49105",
      },
      {
         cve: "CVE-2024-49107",
         cwe: {
            id: "CWE-59",
            name: "Improper Link Resolution Before File Access ('Link Following')",
         },
         notes: [
            {
               category: "other",
               text: "Improper Link Resolution Before File Access ('Link Following')",
               title: "CWE-59",
            },
            {
               category: "other",
               text: "Improper Access Control",
               title: "CWE-284",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1741423",
               "CSAFPID-1741424",
               "CSAFPID-1741425",
               "CSAFPID-1741426",
               "CSAFPID-1741427",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1723936",
               "CSAFPID-1723937",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49107",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49107.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.3,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741405",
                  "CSAFPID-1741406",
                  "CSAFPID-1741407",
                  "CSAFPID-1741422",
                  "CSAFPID-1741408",
                  "CSAFPID-1741409",
                  "CSAFPID-1741410",
                  "CSAFPID-1741411",
                  "CSAFPID-1741412",
                  "CSAFPID-1741413",
                  "CSAFPID-1741414",
                  "CSAFPID-1741415",
                  "CSAFPID-1741416",
                  "CSAFPID-1741417",
                  "CSAFPID-1741418",
                  "CSAFPID-1741419",
                  "CSAFPID-1741420",
                  "CSAFPID-1741421",
                  "CSAFPID-1741423",
                  "CSAFPID-1741424",
                  "CSAFPID-1741425",
                  "CSAFPID-1741426",
                  "CSAFPID-1741427",
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
                  "CSAFPID-1723936",
                  "CSAFPID-1723937",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
               ],
            },
         ],
         title: "CVE-2024-49107",
      },
      {
         cve: "CVE-2024-49111",
         cwe: {
            id: "CWE-125",
            name: "Out-of-bounds Read",
         },
         notes: [
            {
               category: "other",
               text: "Out-of-bounds Read",
               title: "CWE-125",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49111",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49111.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.6,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741405",
                  "CSAFPID-1741406",
                  "CSAFPID-1741407",
                  "CSAFPID-1741408",
                  "CSAFPID-1741409",
                  "CSAFPID-1741410",
                  "CSAFPID-1741411",
                  "CSAFPID-1741412",
                  "CSAFPID-1741413",
                  "CSAFPID-1741414",
                  "CSAFPID-1741415",
                  "CSAFPID-1741416",
                  "CSAFPID-1741417",
                  "CSAFPID-1741418",
                  "CSAFPID-1741419",
                  "CSAFPID-1741420",
                  "CSAFPID-1741421",
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
               ],
            },
         ],
         title: "CVE-2024-49111",
      },
      {
         cve: "CVE-2024-49121",
         cwe: {
            id: "CWE-476",
            name: "NULL Pointer Dereference",
         },
         notes: [
            {
               category: "other",
               text: "NULL Pointer Dereference",
               title: "CWE-476",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1741423",
               "CSAFPID-1741424",
               "CSAFPID-1741425",
               "CSAFPID-1741426",
               "CSAFPID-1741427",
               "CSAFPID-1741428",
               "CSAFPID-1741429",
               "CSAFPID-1741430",
               "CSAFPID-1741431",
               "CSAFPID-1741432",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1723936",
               "CSAFPID-1723937",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723941",
               "CSAFPID-1723942",
               "CSAFPID-1723943",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49121",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49121.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741405",
                  "CSAFPID-1741406",
                  "CSAFPID-1741407",
                  "CSAFPID-1741422",
                  "CSAFPID-1741408",
                  "CSAFPID-1741409",
                  "CSAFPID-1741410",
                  "CSAFPID-1741411",
                  "CSAFPID-1741412",
                  "CSAFPID-1741413",
                  "CSAFPID-1741414",
                  "CSAFPID-1741415",
                  "CSAFPID-1741416",
                  "CSAFPID-1741417",
                  "CSAFPID-1741418",
                  "CSAFPID-1741419",
                  "CSAFPID-1741420",
                  "CSAFPID-1741421",
                  "CSAFPID-1741423",
                  "CSAFPID-1741424",
                  "CSAFPID-1741425",
                  "CSAFPID-1741426",
                  "CSAFPID-1741427",
                  "CSAFPID-1741428",
                  "CSAFPID-1741429",
                  "CSAFPID-1741430",
                  "CSAFPID-1741431",
                  "CSAFPID-1741432",
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
                  "CSAFPID-1723936",
                  "CSAFPID-1723937",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
                  "CSAFPID-1723941",
                  "CSAFPID-1723942",
                  "CSAFPID-1723943",
                  "CSAFPID-1723944",
                  "CSAFPID-1723945",
                  "CSAFPID-1717820",
                  "CSAFPID-1717821",
                  "CSAFPID-1717822",
                  "CSAFPID-1717823",
               ],
            },
         ],
         title: "CVE-2024-49121",
      },
      {
         cve: "CVE-2024-49122",
         cwe: {
            id: "CWE-416",
            name: "Use After Free",
         },
         notes: [
            {
               category: "other",
               text: "Use After Free",
               title: "CWE-416",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1741405",
               "CSAFPID-1741406",
               "CSAFPID-1741407",
               "CSAFPID-1741422",
               "CSAFPID-1741408",
               "CSAFPID-1741409",
               "CSAFPID-1741410",
               "CSAFPID-1741411",
               "CSAFPID-1741412",
               "CSAFPID-1741413",
               "CSAFPID-1741414",
               "CSAFPID-1741415",
               "CSAFPID-1741416",
               "CSAFPID-1741417",
               "CSAFPID-1741418",
               "CSAFPID-1741419",
               "CSAFPID-1741420",
               "CSAFPID-1741421",
               "CSAFPID-1741423",
               "CSAFPID-1741424",
               "CSAFPID-1741425",
               "CSAFPID-1741426",
               "CSAFPID-1741427",
               "CSAFPID-1741428",
               "CSAFPID-1741429",
               "CSAFPID-1741430",
               "CSAFPID-1741431",
               "CSAFPID-1741432",
               "CSAFPID-1720442",
               "CSAFPID-1717808",
               "CSAFPID-1717809",
               "CSAFPID-1717810",
               "CSAFPID-1741366",
               "CSAFPID-1741367",
               "CSAFPID-1741368",
               "CSAFPID-1741354",
               "CSAFPID-1741369",
               "CSAFPID-1741370",
               "CSAFPID-1741352",
               "CSAFPID-1741371",
               "CSAFPID-1741353",
               "CSAFPID-1723936",
               "CSAFPID-1723937",
               "CSAFPID-1717812",
               "CSAFPID-1717813",
               "CSAFPID-1723941",
               "CSAFPID-1723942",
               "CSAFPID-1723943",
               "CSAFPID-1723944",
               "CSAFPID-1723945",
               "CSAFPID-1717820",
               "CSAFPID-1717821",
               "CSAFPID-1717822",
               "CSAFPID-1717823",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49122",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49122.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1741405",
                  "CSAFPID-1741406",
                  "CSAFPID-1741407",
                  "CSAFPID-1741422",
                  "CSAFPID-1741408",
                  "CSAFPID-1741409",
                  "CSAFPID-1741410",
                  "CSAFPID-1741411",
                  "CSAFPID-1741412",
                  "CSAFPID-1741413",
                  "CSAFPID-1741414",
                  "CSAFPID-1741415",
                  "CSAFPID-1741416",
                  "CSAFPID-1741417",
                  "CSAFPID-1741418",
                  "CSAFPID-1741419",
                  "CSAFPID-1741420",
                  "CSAFPID-1741421",
                  "CSAFPID-1741423",
                  "CSAFPID-1741424",
                  "CSAFPID-1741425",
                  "CSAFPID-1741426",
                  "CSAFPID-1741427",
                  "CSAFPID-1741428",
                  "CSAFPID-1741429",
                  "CSAFPID-1741430",
                  "CSAFPID-1741431",
                  "CSAFPID-1741432",
                  "CSAFPID-1720442",
                  "CSAFPID-1717808",
                  "CSAFPID-1717809",
                  "CSAFPID-1717810",
                  "CSAFPID-1741366",
                  "CSAFPID-1741367",
                  "CSAFPID-1741368",
                  "CSAFPID-1741354",
                  "CSAFPID-1741369",
                  "CSAFPID-1741370",
                  "CSAFPID-1741352",
                  "CSAFPID-1741371",
                  "CSAFPID-1741353",
                  "CSAFPID-1723936",
                  "CSAFPID-1723937",
                  "CSAFPID-1717812",
                  "CSAFPID-1717813",
                  "CSAFPID-1723941",
                  "CSAFPID-1723942",
                  "CSAFPID-1723943",
                  "CSAFPID-1723944",
                  "CSAFPID-1723945",
                  "CSAFPID-1717820",
                  "CSAFPID-1717821",
                  "CSAFPID-1717822",
                  "CSAFPID-1717823",
               ],
            },
         ],
         title: "CVE-2024-49122",
      },
   ],
}

wid-sec-w-2024-3657

Vulnerability from csaf_certbund

Published

2024-12-10 23:00

Modified

2025-01-02 23:00

Summary

Microsoft Windows: Mehrere Schwachstellen

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung

Windows ist ein Betriebssystem von Microsoft.

Angriff

Ein Angreifer kann mehrere Schwachstellen in verschiedenen Versionen von Microsoft Windows und Microsoft Windows Server ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Situation zu erzeugen.

Betroffene Betriebssysteme

- Windows

JSON

To clipboard

{
   document: {
      aggregate_severity: {
         text: "kritisch",
      },
      category: "csaf_base",
      csaf_version: "2.0",
      distribution: {
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "de-DE",
      notes: [
         {
            category: "legal_disclaimer",
            text: "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.",
         },
         {
            category: "description",
            text: "Windows ist ein Betriebssystem von Microsoft.",
            title: "Produktbeschreibung",
         },
         {
            category: "summary",
            text: "Ein Angreifer kann mehrere Schwachstellen in verschiedenen Versionen von Microsoft Windows und Microsoft Windows Server ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Situation zu erzeugen.",
            title: "Angriff",
         },
         {
            category: "general",
            text: "- Windows",
            title: "Betroffene Betriebssysteme",
         },
      ],
      publisher: {
         category: "other",
         contact_details: "csaf-provider@cert-bund.de",
         name: "Bundesamt für Sicherheit in der Informationstechnik",
         namespace: "https://www.bsi.bund.de",
      },
      references: [
         {
            category: "self",
            summary: "WID-SEC-W-2024-3657 - CSAF Version",
            url: "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3657.json",
         },
         {
            category: "self",
            summary: "WID-SEC-2024-3657 - Portal Version",
            url: "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3657",
         },
         {
            category: "external",
            summary: "Microsoft Leitfaden für Sicherheitsupdates",
            url: "https://msrc.microsoft.com/update-guide/",
         },
         {
            category: "external",
            summary: "PoC CVE-2024-49112 vom 2025-01-01",
            url: "https://github.com/SafeBreach-Labs/CVE-2024-49112",
         },
         {
            category: "external",
            summary: "PoC CVE-2024-49113 vom 2025-01-02",
            url: "https://www.safebreach.com/blog/ldapnightmare-safebreach-labs-publishes-first-proof-of-concept-exploit-for-cve-2024-49113/",
         },
      ],
      source_lang: "en-US",
      title: "Microsoft Windows: Mehrere Schwachstellen",
      tracking: {
         current_release_date: "2025-01-02T23:00:00.000+00:00",
         generator: {
            date: "2025-01-03T09:12:19.873+00:00",
            engine: {
               name: "BSI-WID",
               version: "1.3.10",
            },
         },
         id: "WID-SEC-W-2024-3657",
         initial_release_date: "2024-12-10T23:00:00.000+00:00",
         revision_history: [
            {
               date: "2024-12-10T23:00:00.000+00:00",
               number: "1",
               summary: "Initiale Fassung",
            },
            {
               date: "2025-01-01T23:00:00.000+00:00",
               number: "2",
               summary: "PoC für CVE-2024-49112 ergänzt",
            },
            {
               date: "2025-01-02T23:00:00.000+00:00",
               number: "3",
               summary: "PoC für CVE-2024-49113 ergänzt",
            },
         ],
         status: "final",
         version: "3",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "Microsoft Windows 10",
                        product: {
                           name: "Microsoft Windows 10",
                           product_id: "T039740",
                           product_identification_helper: {
                              cpe: "cpe:/o:microsoft:windows_10:-",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "Version 1607",
                        product: {
                           name: "Microsoft Windows 10 Version 1607",
                           product_id: "T039742",
                           product_identification_helper: {
                              cpe: "cpe:/o:microsoft:windows_10:version_1607",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "Version 1809",
                        product: {
                           name: "Microsoft Windows 10 Version 1809",
                           product_id: "T039743",
                           product_identification_helper: {
                              cpe: "cpe:/o:microsoft:windows_10:version_1809",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "Version 21H2",
                        product: {
                           name: "Microsoft Windows 10 Version 21H2",
                           product_id: "T039746",
                           product_identification_helper: {
                              cpe: "cpe:/o:microsoft:windows_10:version_21h2",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "Version 22H2",
                        product: {
                           name: "Microsoft Windows 10 Version 22H2",
                           product_id: "T039748",
                           product_identification_helper: {
                              cpe: "cpe:/o:microsoft:windows_10:version_22h2",
                           },
                        },
                     },
                  ],
                  category: "product_name",
                  name: "Windows 10",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "Version 22H2",
                        product: {
                           name: "Microsoft Windows 11 Version 22H2",
                           product_id: "T039747",
                           product_identification_helper: {
                              cpe: "cpe:/o:microsoft:windows_11:version_22h2",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "Version 23H2",
                        product: {
                           name: "Microsoft Windows 11 Version 23H2",
                           product_id: "T039749",
                           product_identification_helper: {
                              cpe: "cpe:/o:microsoft:windows_11:version_23h2",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "Version 24H2",
                        product: {
                           name: "Microsoft Windows 11 Version 24H2",
                           product_id: "T039751",
                           product_identification_helper: {
                              cpe: "cpe:/o:microsoft:windows_11:version_24h2",
                           },
                        },
                     },
                  ],
                  category: "product_name",
                  name: "Windows 11",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "2008 R2 SP1",
                        product: {
                           name: "Microsoft Windows Server 2008 R2 SP1",
                           product_id: "T039736",
                           product_identification_helper: {
                              cpe: "cpe:/o:microsoft:windows_server:2008_r2_sp1",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "2008 SP2",
                        product: {
                           name: "Microsoft Windows Server 2008 SP2",
                           product_id: "T039737",
                           product_identification_helper: {
                              cpe: "cpe:/o:microsoft:windows_server:2008_sp2",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "2025",
                        product: {
                           name: "Microsoft Windows Server 2025",
                           product_id: "T039752",
                           product_identification_helper: {
                              cpe: "cpe:/o:microsoft:windows_server:2025",
                           },
                        },
                     },
                  ],
                  category: "product_name",
                  name: "Windows Server",
               },
               {
                  category: "product_name",
                  name: "Microsoft Windows Server 2012",
                  product: {
                     name: "Microsoft Windows Server 2012",
                     product_id: "T039738",
                     product_identification_helper: {
                        cpe: "cpe:/o:microsoft:windows_server_2012:-",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "Microsoft Windows Server 2012 R2",
                  product: {
                     name: "Microsoft Windows Server 2012 R2",
                     product_id: "T039739",
                     product_identification_helper: {
                        cpe: "cpe:/o:microsoft:windows_server_2012_r2:-",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "Microsoft Windows Server 2016",
                  product: {
                     name: "Microsoft Windows Server 2016",
                     product_id: "T039741",
                     product_identification_helper: {
                        cpe: "cpe:/o:microsoft:windows_server_2016:-",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "Microsoft Windows Server 2019",
                  product: {
                     name: "Microsoft Windows Server 2019",
                     product_id: "T039744",
                     product_identification_helper: {
                        cpe: "cpe:/o:microsoft:windows_server_2019:-",
                     },
                  },
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "Microsoft Windows Server 2022",
                        product: {
                           name: "Microsoft Windows Server 2022",
                           product_id: "T039745",
                           product_identification_helper: {
                              cpe: "cpe:/o:microsoft:windows_server_2022:-",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "23H2 Edition",
                        product: {
                           name: "Microsoft Windows Server 2022 23H2 Edition",
                           product_id: "T039750",
                           product_identification_helper: {
                              cpe: "cpe:/o:microsoft:windows_server_2022:23h2_edition",
                           },
                        },
                     },
                  ],
                  category: "product_name",
                  name: "Windows Server 2022",
               },
            ],
            category: "vendor",
            name: "Microsoft",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2024-49072",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49072",
      },
      {
         cve: "CVE-2024-49073",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49073",
      },
      {
         cve: "CVE-2024-49074",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49074",
      },
      {
         cve: "CVE-2024-49075",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49075",
      },
      {
         cve: "CVE-2024-49076",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49076",
      },
      {
         cve: "CVE-2024-49077",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49077",
      },
      {
         cve: "CVE-2024-49078",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49078",
      },
      {
         cve: "CVE-2024-49079",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49079",
      },
      {
         cve: "CVE-2024-49080",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49080",
      },
      {
         cve: "CVE-2024-49081",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49081",
      },
      {
         cve: "CVE-2024-49082",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49082",
      },
      {
         cve: "CVE-2024-49083",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49083",
      },
      {
         cve: "CVE-2024-49084",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49084",
      },
      {
         cve: "CVE-2024-49085",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49085",
      },
      {
         cve: "CVE-2024-49086",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49086",
      },
      {
         cve: "CVE-2024-49087",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49087",
      },
      {
         cve: "CVE-2024-49088",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49088",
      },
      {
         cve: "CVE-2024-49089",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49089",
      },
      {
         cve: "CVE-2024-49090",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49090",
      },
      {
         cve: "CVE-2024-49091",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49091",
      },
      {
         cve: "CVE-2024-49092",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49092",
      },
      {
         cve: "CVE-2024-49093",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49093",
      },
      {
         cve: "CVE-2024-49094",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49094",
      },
      {
         cve: "CVE-2024-49095",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49095",
      },
      {
         cve: "CVE-2024-49096",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49096",
      },
      {
         cve: "CVE-2024-49097",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49097",
      },
      {
         cve: "CVE-2024-49098",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49098",
      },
      {
         cve: "CVE-2024-49099",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49099",
      },
      {
         cve: "CVE-2024-49101",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49101",
      },
      {
         cve: "CVE-2024-49102",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49102",
      },
      {
         cve: "CVE-2024-49103",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49103",
      },
      {
         cve: "CVE-2024-49104",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49104",
      },
      {
         cve: "CVE-2024-49105",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49105",
      },
      {
         cve: "CVE-2024-49106",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49106",
      },
      {
         cve: "CVE-2024-49107",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49107",
      },
      {
         cve: "CVE-2024-49108",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49108",
      },
      {
         cve: "CVE-2024-49109",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49109",
      },
      {
         cve: "CVE-2024-49110",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49110",
      },
      {
         cve: "CVE-2024-49111",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49111",
      },
      {
         cve: "CVE-2024-49112",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49112",
      },
      {
         cve: "CVE-2024-49113",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49113",
      },
      {
         cve: "CVE-2024-49114",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49114",
      },
      {
         cve: "CVE-2024-49115",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49115",
      },
      {
         cve: "CVE-2024-49116",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49116",
      },
      {
         cve: "CVE-2024-49117",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49117",
      },
      {
         cve: "CVE-2024-49118",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49118",
      },
      {
         cve: "CVE-2024-49119",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49119",
      },
      {
         cve: "CVE-2024-49120",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49120",
      },
      {
         cve: "CVE-2024-49121",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49121",
      },
      {
         cve: "CVE-2024-49122",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49122",
      },
      {
         cve: "CVE-2024-49123",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49123",
      },
      {
         cve: "CVE-2024-49124",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49124",
      },
      {
         cve: "CVE-2024-49125",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49125",
      },
      {
         cve: "CVE-2024-49126",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49126",
      },
      {
         cve: "CVE-2024-49127",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49127",
      },
      {
         cve: "CVE-2024-49128",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49128",
      },
      {
         cve: "CVE-2024-49129",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49129",
      },
      {
         cve: "CVE-2024-49132",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49132",
      },
      {
         cve: "CVE-2024-49138",
         notes: [
            {
               category: "description",
               text: "In Microsoft Windows und Microsoft Windows Server existieren mehrere Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte, einschließlich SYSTEM-Rechten, zu erlangen, um beliebigen Code auszuführen - sogar im Kontext des SYSTEM-Kontos -, um vertrauliche persönliche Informationen und Speicherinhalte offenzulegen und um einen Denial-of-Service-Zustand herbeizuführen. Viele der Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden. Das Opfer muss eine bösartige Datei öffnen oder dazu gebracht werden, eine Anfrage an einen bösartigen Server zu senden. Bei einigen Schwachstellen müssen spezielle Bedingungen erfüllt sein: Der Angreifer muss eine Race-Condition gewinnen oder physischen Zugriff auf den Zielcomputer haben, um ein bösartiges USB-Laufwerk einstecken zu können. Einige Schwachstellen erfordern erweiterte Rechte, einschließlich Administratorrechten, um erfolgreich ausgenutzt zu werden. Einige Schwachstellen können sich über die betroffenen Komponenten hinaus auswirken.",
            },
         ],
         product_status: {
            known_affected: [
               "T039737",
               "T039748",
               "T039736",
               "T039747",
               "T039739",
               "T039738",
               "T039749",
               "T039744",
               "T039743",
               "T039746",
               "T039745",
               "T039740",
               "T039751",
               "T039750",
               "T039742",
               "T039741",
               "T039752",
            ],
         },
         release_date: "2024-12-10T23:00:00.000+00:00",
         title: "CVE-2024-49138",
      },
   ],
}

ghsa-78q2-767q-6x6v

Vulnerability from github

Published

2024-12-12 03:33

Modified

2024-12-12 03:33

Severity ?

8.1 (High) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability

Show details on source website

JSON

To clipboard

{
   affected: [],
   aliases: [
      "CVE-2024-49124",
   ],
   database_specific: {
      cwe_ids: [
         "CWE-362",
      ],
      github_reviewed: false,
      github_reviewed_at: null,
      nvd_published_at: "2024-12-12T02:04:39Z",
      severity: "HIGH",
   },
   details: "Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability",
   id: "GHSA-78q2-767q-6x6v",
   modified: "2024-12-12T03:33:05Z",
   published: "2024-12-12T03:33:05Z",
   references: [
      {
         type: "ADVISORY",
         url: "https://nvd.nist.gov/vuln/detail/CVE-2024-49124",
      },
      {
         type: "WEB",
         url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49124",
      },
   ],
   schema_version: "1.4.0",
   severity: [
      {
         score: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
         type: "CVSS_V3",
      },
   ],
}

fkie_cve-2024-49124

Vulnerability from fkie_nvd

Published

2024-12-12 02:04

Modified

2025-01-14 17:50

Severity ?

8.1 (High) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability

References

▼	URL	Tags
	secure@microsoft.com	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49124	Vendor Advisory

Impacted products

Vendor	Product	Version
microsoft	windows_10_1507	*
microsoft	windows_10_1507	*
microsoft	windows_10_1607	*
microsoft	windows_10_1607	*
microsoft	windows_10_1809	*
microsoft	windows_10_1809	*
microsoft	windows_10_21h2	*
microsoft	windows_10_22h2	*
microsoft	windows_11_22h2	*
microsoft	windows_11_24h2	*
microsoft	windows_server_2008	-
microsoft	windows_server_2008	r2
microsoft	windows_server_2012	-
microsoft	windows_server_2012	r2
microsoft	windows_server_2016	*
microsoft	windows_server_2019	*
microsoft	windows_server_2022	*
microsoft	windows_server_2022_23h2	*
microsoft	windows_server_2025	*

JSON

To clipboard

{
   configurations: [
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*",
                     matchCriteriaId: "10F567C3-3739-4F3D-B9E0-D2725D09CE0D",
                     versionEndExcluding: "10.0.10240.20857",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
                     matchCriteriaId: "04D1F48B-C323-4062-B5E1-9700ADBB153C",
                     versionEndExcluding: "10.0.10240.20857",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
                     matchCriteriaId: "29B44B5E-3D35-4A5B-A916-6E70923FAB7C",
                     versionEndExcluding: "10.0.14393.7606",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
                     matchCriteriaId: "77EAFFB9-3053-4197-B52D-69F4F86C8FBA",
                     versionEndExcluding: "10.0.14393.7606",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
                     matchCriteriaId: "5FA7C375-3A7C-4F34-B6E7-82C187B4F7AF",
                     versionEndExcluding: "10.0.17763.6659",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
                     matchCriteriaId: "576F141F-C874-4817-961A-2C4D2AB3DEA4",
                     versionEndExcluding: "10.0.17763.6659",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
                     matchCriteriaId: "F814C24B-FA54-4B97-8387-6EE9AC269178",
                     versionEndExcluding: "10.0.19044.5247",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
                     matchCriteriaId: "6CF40E59-FC32-4047-8A63-EE0819A32962",
                     versionEndExcluding: "10.0.19045.5247",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
                     matchCriteriaId: "0C3B0836-B782-4C1A-B0D1-B6111CBC8DED",
                     versionEndExcluding: "10.0.22621.4602",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
                     matchCriteriaId: "594D3E33-9ADE-47EF-8032-A5EDC948F92B",
                     versionEndExcluding: "10.0.26100.2605",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
                     matchCriteriaId: "5F422A8C-2C4E-42C8-B420-E0728037E15C",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
                     matchCriteriaId: "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
                     matchCriteriaId: "A7DF96F8-BA6A-4780-9CA3-F719B3F81074",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
                     matchCriteriaId: "DB18C4CE-5917-401E-ACF7-2747084FD36E",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
                     matchCriteriaId: "361D1B8E-6E56-4B5F-85D1-D47114A10A81",
                     versionEndExcluding: "10.0.14393.7606",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
                     matchCriteriaId: "11517523-F822-45BC-B347-C65F00B45202",
                     versionEndExcluding: "10.0.17763.6659",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
                     matchCriteriaId: "AECABB2C-DACB-4BBD-8739-DDB00285B0A7",
                     versionEndExcluding: "10.0.20348.2966",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
                     matchCriteriaId: "37977CFB-B259-49B8-B0C5-85ECB40FE429",
                     versionEndExcluding: "10.0.25398.1308",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
                     matchCriteriaId: "E013EA3C-6F18-4CA4-AF5B-664F869B9A6D",
                     versionEndExcluding: "10.0.26100.2605",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
      },
   ],
   cveTags: [],
   descriptions: [
      {
         lang: "en",
         value: "Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability",
      },
      {
         lang: "es",
         value: "Vulnerabilidad de ejecución remota de código en el cliente del Protocolo ligero de acceso a directorios (LDAP)",
      },
   ],
   id: "CVE-2024-49124",
   lastModified: "2025-01-14T17:50:19.017",
   metrics: {
      cvssMetricV31: [
         {
            cvssData: {
               attackComplexity: "HIGH",
               attackVector: "NETWORK",
               availabilityImpact: "HIGH",
               baseScore: 8.1,
               baseSeverity: "HIGH",
               confidentialityImpact: "HIGH",
               integrityImpact: "HIGH",
               privilegesRequired: "NONE",
               scope: "UNCHANGED",
               userInteraction: "NONE",
               vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
               version: "3.1",
            },
            exploitabilityScore: 2.2,
            impactScore: 5.9,
            source: "secure@microsoft.com",
            type: "Primary",
         },
      ],
   },
   published: "2024-12-12T02:04:39.233",
   references: [
      {
         source: "secure@microsoft.com",
         tags: [
            "Vendor Advisory",
         ],
         url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49124",
      },
   ],
   sourceIdentifier: "secure@microsoft.com",
   vulnStatus: "Analyzed",
   weaknesses: [
      {
         description: [
            {
               lang: "en",
               value: "CWE-362",
            },
         ],
         source: "secure@microsoft.com",
         type: "Primary",
      },
   ],
}

msrc_cve-2024-49124

Vulnerability from csaf_microsoft

Published

2024-12-10 08:00

Modified

2024-12-10 08:00

Summary

Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability

Notes

Additional Resources

To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle

Disclaimer

The information provided in the Microsoft Knowledge Base is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.

Customer Action

Required. The vulnerability documented by this CVE requires customer action to resolve.

JSON

To clipboard

{
   document: {
      acknowledgments: [
         {
            names: [
               "Wei in Kunlun Lab with <a href=\"https://www.cyberkl.com/\">Cyber KunLun</a>",
            ],
         },
      ],
      aggregate_severity: {
         namespace: "https://www.microsoft.com/en-us/msrc/security-update-severity-rating-system",
         text: "Critical",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Public",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en-US",
      notes: [
         {
            category: "general",
            text: "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
            title: "Additional Resources",
         },
         {
            category: "legal_disclaimer",
            text: "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
            title: "Disclaimer",
         },
         {
            category: "general",
            text: "Required. The vulnerability documented by this CVE requires customer action to resolve.",
            title: "Customer Action",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "secure@microsoft.com",
         name: "Microsoft Security Response Center",
         namespace: "https://msrc.microsoft.com",
      },
      references: [
         {
            category: "self",
            summary: "CVE-2024-49124 Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability - HTML",
            url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49124",
         },
         {
            category: "self",
            summary: "CVE-2024-49124 Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability - CSAF",
            url: "https://msrc.microsoft.com/csaf/2024/msrc_cve-2024-49124.json",
         },
         {
            category: "external",
            summary: "Microsoft Exploitability Index",
            url: "https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1",
         },
         {
            category: "external",
            summary: "Microsoft Support Lifecycle",
            url: "https://support.microsoft.com/lifecycle",
         },
         {
            category: "external",
            summary: "Common Vulnerability Scoring System",
            url: "https://www.first.org/cvss",
         },
      ],
      title: "Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability",
      tracking: {
         current_release_date: "2024-12-10T08:00:00.000Z",
         generator: {
            date: "2025-01-08T18:53:43.825Z",
            engine: {
               name: "MSRC Generator",
               version: "1.0",
            },
         },
         id: "msrc_CVE-2024-49124",
         initial_release_date: "2024-12-10T08:00:00.000Z",
         revision_history: [
            {
               date: "2024-12-10T08:00:00.000Z",
               legacy_version: "1",
               number: "1",
               summary: "Information published.",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.17763.6659",
                  product: {
                     name: "Windows 10 Version 1809 for 32-bit Systems <10.0.17763.6659",
                     product_id: "21",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.17763.6659",
                  product: {
                     name: "Windows 10 Version 1809 for 32-bit Systems 10.0.17763.6659",
                     product_id: "11568",
                  },
               },
            ],
            category: "product_name",
            name: "Windows 10 Version 1809 for 32-bit Systems",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.17763.6659",
                  product: {
                     name: "Windows 10 Version 1809 for x64-based Systems <10.0.17763.6659",
                     product_id: "20",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.17763.6659",
                  product: {
                     name: "Windows 10 Version 1809 for x64-based Systems 10.0.17763.6659",
                     product_id: "11569",
                  },
               },
            ],
            category: "product_name",
            name: "Windows 10 Version 1809 for x64-based Systems",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.17763.6659",
                  product: {
                     name: "Windows Server 2019 <10.0.17763.6659",
                     product_id: "19",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.17763.6659",
                  product: {
                     name: "Windows Server 2019 10.0.17763.6659",
                     product_id: "11571",
                  },
               },
            ],
            category: "product_name",
            name: "Windows Server 2019",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.17763.6659",
                  product: {
                     name: "Windows Server 2019 (Server Core installation) <10.0.17763.6659",
                     product_id: "18",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.17763.6659",
                  product: {
                     name: "Windows Server 2019 (Server Core installation) 10.0.17763.6659",
                     product_id: "11572",
                  },
               },
            ],
            category: "product_name",
            name: "Windows Server 2019 (Server Core installation)",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.20348.2966",
                  product: {
                     name: "Windows Server 2022 <10.0.20348.2966",
                     product_id: "17",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.20348.2966",
                  product: {
                     name: "Windows Server 2022 10.0.20348.2966",
                     product_id: "11923",
                  },
               },
            ],
            category: "product_name",
            name: "Windows Server 2022",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.20348.2966",
                  product: {
                     name: "Windows Server 2022 (Server Core installation) <10.0.20348.2966",
                     product_id: "16",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.20348.2966",
                  product: {
                     name: "Windows Server 2022 (Server Core installation) 10.0.20348.2966",
                     product_id: "11924",
                  },
               },
            ],
            category: "product_name",
            name: "Windows Server 2022 (Server Core installation)",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.19044.5247",
                  product: {
                     name: "Windows 10 Version 21H2 for 32-bit Systems <10.0.19044.5247",
                     product_id: "15",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.19044.5247",
                  product: {
                     name: "Windows 10 Version 21H2 for 32-bit Systems 10.0.19044.5247",
                     product_id: "11929",
                  },
               },
            ],
            category: "product_name",
            name: "Windows 10 Version 21H2 for 32-bit Systems",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.19044.5247",
                  product: {
                     name: "Windows 10 Version 21H2 for ARM64-based Systems <10.0.19044.5247",
                     product_id: "14",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.19044.5247",
                  product: {
                     name: "Windows 10 Version 21H2 for ARM64-based Systems 10.0.19044.5247",
                     product_id: "11930",
                  },
               },
            ],
            category: "product_name",
            name: "Windows 10 Version 21H2 for ARM64-based Systems",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.19044.5247",
                  product: {
                     name: "Windows 10 Version 21H2 for x64-based Systems <10.0.19044.5247",
                     product_id: "13",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.19044.5247",
                  product: {
                     name: "Windows 10 Version 21H2 for x64-based Systems 10.0.19044.5247",
                     product_id: "11931",
                  },
               },
            ],
            category: "product_name",
            name: "Windows 10 Version 21H2 for x64-based Systems",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.22621.4602",
                  product: {
                     name: "Windows 11 Version 22H2 for ARM64-based Systems <10.0.22621.4602",
                     product_id: "12",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.22621.4602",
                  product: {
                     name: "Windows 11 Version 22H2 for ARM64-based Systems 10.0.22621.4602",
                     product_id: "12085",
                  },
               },
            ],
            category: "product_name",
            name: "Windows 11 Version 22H2 for ARM64-based Systems",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.22621.4602",
                  product: {
                     name: "Windows 11 Version 22H2 for x64-based Systems <10.0.22621.4602",
                     product_id: "11",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.22621.4602",
                  product: {
                     name: "Windows 11 Version 22H2 for x64-based Systems 10.0.22621.4602",
                     product_id: "12086",
                  },
               },
            ],
            category: "product_name",
            name: "Windows 11 Version 22H2 for x64-based Systems",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.19045.5247",
                  product: {
                     name: "Windows 10 Version 22H2 for x64-based Systems <10.0.19045.5247",
                     product_id: "10",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.19045.5247",
                  product: {
                     name: "Windows 10 Version 22H2 for x64-based Systems 10.0.19045.5247",
                     product_id: "12097",
                  },
               },
            ],
            category: "product_name",
            name: "Windows 10 Version 22H2 for x64-based Systems",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.19045.5247",
                  product: {
                     name: "Windows 10 Version 22H2 for ARM64-based Systems <10.0.19045.5247",
                     product_id: "9",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.19045.5247",
                  product: {
                     name: "Windows 10 Version 22H2 for ARM64-based Systems 10.0.19045.5247",
                     product_id: "12098",
                  },
               },
            ],
            category: "product_name",
            name: "Windows 10 Version 22H2 for ARM64-based Systems",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.19045.5247",
                  product: {
                     name: "Windows 10 Version 22H2 for 32-bit Systems <10.0.19045.5247",
                     product_id: "8",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.19045.5247",
                  product: {
                     name: "Windows 10 Version 22H2 for 32-bit Systems 10.0.19045.5247",
                     product_id: "12099",
                  },
               },
            ],
            category: "product_name",
            name: "Windows 10 Version 22H2 for 32-bit Systems",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.26100.2605",
                  product: {
                     name: "Windows Server 2025 (Server Core installation) <10.0.26100.2605",
                     product_id: "1",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.26100.2605",
                  product: {
                     name: "Windows Server 2025 (Server Core installation) 10.0.26100.2605",
                     product_id: "12437",
                  },
               },
            ],
            category: "product_name",
            name: "Windows Server 2025 (Server Core installation)",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.22631.4602",
                  product: {
                     name: "Windows 11 Version 23H2 for ARM64-based Systems <10.0.22631.4602",
                     product_id: "7",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.22631.4602",
                  product: {
                     name: "Windows 11 Version 23H2 for ARM64-based Systems 10.0.22631.4602",
                     product_id: "12242",
                  },
               },
            ],
            category: "product_name",
            name: "Windows 11 Version 23H2 for ARM64-based Systems",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.22631.4602",
                  product: {
                     name: "Windows 11 Version 23H2 for x64-based Systems <10.0.22631.4602",
                     product_id: "6",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.22631.4602",
                  product: {
                     name: "Windows 11 Version 23H2 for x64-based Systems 10.0.22631.4602",
                     product_id: "12243",
                  },
               },
            ],
            category: "product_name",
            name: "Windows 11 Version 23H2 for x64-based Systems",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.25398.1308",
                  product: {
                     name: "Windows Server 2022, 23H2 Edition (Server Core installation) <10.0.25398.1308",
                     product_id: "5",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.25398.1308",
                  product: {
                     name: "Windows Server 2022, 23H2 Edition (Server Core installation) 10.0.25398.1308",
                     product_id: "12244",
                  },
               },
            ],
            category: "product_name",
            name: "Windows Server 2022, 23H2 Edition (Server Core installation)",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.26100.2605",
                  product: {
                     name: "Windows 11 Version 24H2 for ARM64-based Systems <10.0.26100.2605",
                     product_id: "4",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.26100.2605",
                  product: {
                     name: "Windows 11 Version 24H2 for ARM64-based Systems 10.0.26100.2605",
                     product_id: "12389",
                  },
               },
            ],
            category: "product_name",
            name: "Windows 11 Version 24H2 for ARM64-based Systems",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.26100.2605",
                  product: {
                     name: "Windows 11 Version 24H2 for x64-based Systems <10.0.26100.2605",
                     product_id: "3",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.26100.2605",
                  product: {
                     name: "Windows 11 Version 24H2 for x64-based Systems 10.0.26100.2605",
                     product_id: "12390",
                  },
               },
            ],
            category: "product_name",
            name: "Windows 11 Version 24H2 for x64-based Systems",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.26100.2605",
                  product: {
                     name: "Windows Server 2025 <10.0.26100.2605",
                     product_id: "2",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.26100.2605",
                  product: {
                     name: "Windows Server 2025 10.0.26100.2605",
                     product_id: "12436",
                  },
               },
            ],
            category: "product_name",
            name: "Windows Server 2025",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.10240.20857",
                  product: {
                     name: "Windows 10 for 32-bit Systems <10.0.10240.20857",
                     product_id: "27",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.10240.20857",
                  product: {
                     name: "Windows 10 for 32-bit Systems 10.0.10240.20857",
                     product_id: "10729",
                  },
               },
            ],
            category: "product_name",
            name: "Windows 10 for 32-bit Systems",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.10240.20857",
                  product: {
                     name: "Windows 10 for x64-based Systems <10.0.10240.20857",
                     product_id: "26",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.10240.20857",
                  product: {
                     name: "Windows 10 for x64-based Systems 10.0.10240.20857",
                     product_id: "10735",
                  },
               },
            ],
            category: "product_name",
            name: "Windows 10 for x64-based Systems",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.14393.7606",
                  product: {
                     name: "Windows 10 Version 1607 for 32-bit Systems <10.0.14393.7606",
                     product_id: "24",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.14393.7606",
                  product: {
                     name: "Windows 10 Version 1607 for 32-bit Systems 10.0.14393.7606",
                     product_id: "10852",
                  },
               },
            ],
            category: "product_name",
            name: "Windows 10 Version 1607 for 32-bit Systems",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.14393.7606",
                  product: {
                     name: "Windows 10 Version 1607 for x64-based Systems <10.0.14393.7606",
                     product_id: "23",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.14393.7606",
                  product: {
                     name: "Windows 10 Version 1607 for x64-based Systems 10.0.14393.7606",
                     product_id: "10853",
                  },
               },
            ],
            category: "product_name",
            name: "Windows 10 Version 1607 for x64-based Systems",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.14393.7606",
                  product: {
                     name: "Windows Server 2016 <10.0.14393.7606",
                     product_id: "25",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.14393.7606",
                  product: {
                     name: "Windows Server 2016 10.0.14393.7606",
                     product_id: "10816",
                  },
               },
            ],
            category: "product_name",
            name: "Windows Server 2016",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<10.0.14393.7606",
                  product: {
                     name: "Windows Server 2016 (Server Core installation) <10.0.14393.7606",
                     product_id: "22",
                  },
               },
               {
                  category: "product_version",
                  name: "10.0.14393.7606",
                  product: {
                     name: "Windows Server 2016 (Server Core installation) 10.0.14393.7606",
                     product_id: "10855",
                  },
               },
            ],
            category: "product_name",
            name: "Windows Server 2016 (Server Core installation)",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<6.0.6003.23016",
                  product: {
                     name: "Windows Server 2008 for 32-bit Systems Service Pack 2 <6.0.6003.23016",
                     product_id: "37",
                  },
               },
               {
                  category: "product_version",
                  name: "6.0.6003.23016",
                  product: {
                     name: "Windows Server 2008 for 32-bit Systems Service Pack 2 6.0.6003.23016",
                     product_id: "9312",
                  },
               },
            ],
            category: "product_name",
            name: "Windows Server 2008 for 32-bit Systems Service Pack 2",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<6.0.6003.23016",
                  product: {
                     name: "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) <6.0.6003.23016",
                     product_id: "32",
                  },
               },
               {
                  category: "product_version",
                  name: "6.0.6003.23016",
                  product: {
                     name: "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) 6.0.6003.23016",
                     product_id: "10287",
                  },
               },
            ],
            category: "product_name",
            name: "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<6.0.6003.23016",
                  product: {
                     name: "Windows Server 2008 for x64-based Systems Service Pack 2 <6.0.6003.23016",
                     product_id: "36",
                  },
               },
               {
                  category: "product_version",
                  name: "6.0.6003.23016",
                  product: {
                     name: "Windows Server 2008 for x64-based Systems Service Pack 2 6.0.6003.23016",
                     product_id: "9318",
                  },
               },
            ],
            category: "product_name",
            name: "Windows Server 2008 for x64-based Systems Service Pack 2",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<6.0.6003.23016",
                  product: {
                     name: "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) <6.0.6003.23016",
                     product_id: "35",
                  },
               },
               {
                  category: "product_version",
                  name: "6.0.6003.23016",
                  product: {
                     name: "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) 6.0.6003.23016",
                     product_id: "9344",
                  },
               },
            ],
            category: "product_name",
            name: "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<6.1.7601.27467",
                  product: {
                     name: "Windows Server 2008 R2 for x64-based Systems Service Pack 1 <6.1.7601.27467",
                     product_id: "33",
                  },
               },
               {
                  category: "product_version",
                  name: "6.1.7601.27467",
                  product: {
                     name: "Windows Server 2008 R2 for x64-based Systems Service Pack 1 6.1.7601.27467",
                     product_id: "10051",
                  },
               },
            ],
            category: "product_name",
            name: "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<6.1.7601.27467",
                  product: {
                     name: "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) <6.1.7601.27467",
                     product_id: "34",
                  },
               },
               {
                  category: "product_version",
                  name: "6.1.7601.27467",
                  product: {
                     name: "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 6.1.7601.27467",
                     product_id: "10049",
                  },
               },
            ],
            category: "product_name",
            name: "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<6.2.9200.25222",
                  product: {
                     name: "Windows Server 2012 <6.2.9200.25222",
                     product_id: "31",
                  },
               },
               {
                  category: "product_version",
                  name: "6.2.9200.25222",
                  product: {
                     name: "Windows Server 2012 6.2.9200.25222",
                     product_id: "10378",
                  },
               },
            ],
            category: "product_name",
            name: "Windows Server 2012",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<6.2.9200.25222",
                  product: {
                     name: "Windows Server 2012 (Server Core installation) <6.2.9200.25222",
                     product_id: "30",
                  },
               },
               {
                  category: "product_version",
                  name: "6.2.9200.25222",
                  product: {
                     name: "Windows Server 2012 (Server Core installation) 6.2.9200.25222",
                     product_id: "10379",
                  },
               },
            ],
            category: "product_name",
            name: "Windows Server 2012 (Server Core installation)",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<6.3.9600.22318",
                  product: {
                     name: "Windows Server 2012 R2 <6.3.9600.22318",
                     product_id: "29",
                  },
               },
               {
                  category: "product_version",
                  name: "6.3.9600.22318",
                  product: {
                     name: "Windows Server 2012 R2 6.3.9600.22318",
                     product_id: "10483",
                  },
               },
            ],
            category: "product_name",
            name: "Windows Server 2012 R2",
         },
         {
            branches: [
               {
                  category: "product_version_range",
                  name: "<6.3.9600.22318",
                  product: {
                     name: "Windows Server 2012 R2 (Server Core installation) <6.3.9600.22318",
                     product_id: "28",
                  },
               },
               {
                  category: "product_version",
                  name: "6.3.9600.22318",
                  product: {
                     name: "Windows Server 2012 R2 (Server Core installation) 6.3.9600.22318",
                     product_id: "10543",
                  },
               },
            ],
            category: "product_name",
            name: "Windows Server 2012 R2 (Server Core installation)",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2024-49124",
         cwe: {
            id: "CWE-362",
            name: "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')",
         },
         notes: [
            {
               category: "general",
               text: "Microsoft",
               title: "Assigning CNA",
            },
            {
               category: "faq",
               text: "Successful exploitation of this vulnerability requires an attacker to win a race condition.",
               title: "According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?",
            },
            {
               category: "faq",
               text: "An unauthenticated attacker could send a specially crafted request to a vulnerable server. Successful exploitation could result in the attacker's code running in the context of the SYSTEM account.",
               title: "How could an attacker exploit this vulnerability?",
            },
         ],
         product_status: {
            fixed: [
               "9312",
               "9318",
               "9344",
               "10049",
               "10051",
               "10287",
               "10378",
               "10379",
               "10483",
               "10543",
               "10729",
               "10735",
               "10816",
               "10852",
               "10853",
               "10855",
               "11568",
               "11569",
               "11571",
               "11572",
               "11923",
               "11924",
               "11929",
               "11930",
               "11931",
               "12085",
               "12086",
               "12097",
               "12098",
               "12099",
               "12242",
               "12243",
               "12244",
               "12389",
               "12390",
               "12436",
               "12437",
            ],
            known_affected: [
               "1",
               "2",
               "3",
               "4",
               "5",
               "6",
               "7",
               "8",
               "9",
               "10",
               "11",
               "12",
               "13",
               "14",
               "15",
               "16",
               "17",
               "18",
               "19",
               "20",
               "21",
               "22",
               "23",
               "24",
               "25",
               "26",
               "27",
               "28",
               "29",
               "30",
               "31",
               "32",
               "33",
               "34",
               "35",
               "36",
               "37",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-49124 Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability - HTML",
               url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49124",
            },
            {
               category: "self",
               summary: "CVE-2024-49124 Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability - CSAF",
               url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49124",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               date: "2024-12-10T08:00:00.000Z",
               details: "10.0.17763.6659:Security Update:https://support.microsoft.com/help/5048661",
               product_ids: [
                  "21",
                  "20",
                  "19",
                  "18",
               ],
               url: "https://support.microsoft.com/help/5048661",
            },
            {
               category: "vendor_fix",
               date: "2024-12-10T08:00:00.000Z",
               details: "10.0.20348.2966:Security Update:https://support.microsoft.com/help/5048654",
               product_ids: [
                  "17",
                  "16",
               ],
               url: "https://support.microsoft.com/help/5048654",
            },
            {
               category: "vendor_fix",
               date: "2024-12-10T08:00:00.000Z",
               details: "10.0.20348.2908:SecurityHotpatchUpdate:https://support.microsoft.com/help/5048800",
               product_ids: [
                  "17",
                  "16",
               ],
               url: "https://support.microsoft.com/help/5048800",
            },
            {
               category: "vendor_fix",
               date: "2024-12-10T08:00:00.000Z",
               details: "10.0.19044.5247:Security Update:https://support.microsoft.com/help/5048652",
               product_ids: [
                  "15",
                  "14",
                  "13",
               ],
               url: "https://support.microsoft.com/help/5048652",
            },
            {
               category: "vendor_fix",
               date: "2024-12-10T08:00:00.000Z",
               details: "10.0.22621.4602:Security Update:https://support.microsoft.com/help/5048685",
               product_ids: [
                  "12",
                  "11",
               ],
               url: "https://support.microsoft.com/help/5048685",
            },
            {
               category: "vendor_fix",
               date: "2024-12-10T08:00:00.000Z",
               details: "10.0.19045.5247:Security Update:https://support.microsoft.com/help/5048652",
               product_ids: [
                  "10",
                  "9",
                  "8",
               ],
               url: "https://support.microsoft.com/help/5048652",
            },
            {
               category: "vendor_fix",
               date: "2024-12-10T08:00:00.000Z",
               details: "10.0.26100.2605:Security Update:https://support.microsoft.com/help/5048667",
               product_ids: [
                  "1",
                  "4",
                  "3",
                  "2",
               ],
               url: "https://support.microsoft.com/help/5048667",
            },
            {
               category: "vendor_fix",
               date: "2024-12-10T08:00:00.000Z",
               details: "10.0.26100.2528:SecurityHotpatchUpdate:https://support.microsoft.com/help/5048794",
               product_ids: [
                  "1",
                  "4",
                  "3",
                  "2",
               ],
               url: "https://support.microsoft.com/help/5048794",
            },
            {
               category: "vendor_fix",
               date: "2024-12-10T08:00:00.000Z",
               details: "10.0.22631.4602:Security Update:https://support.microsoft.com/help/5048685",
               product_ids: [
                  "7",
                  "6",
               ],
               url: "https://support.microsoft.com/help/5048685",
            },
            {
               category: "vendor_fix",
               date: "2024-12-10T08:00:00.000Z",
               details: "10.0.25398.1308:Security Update:https://support.microsoft.com/help/5048653",
               product_ids: [
                  "5",
               ],
               url: "https://support.microsoft.com/help/5048653",
            },
            {
               category: "vendor_fix",
               date: "2024-12-10T08:00:00.000Z",
               details: "10.0.10240.20857:Security Update:https://support.microsoft.com/help/5048703",
               product_ids: [
                  "27",
                  "26",
               ],
               url: "https://support.microsoft.com/help/5048703",
            },
            {
               category: "vendor_fix",
               date: "2024-12-10T08:00:00.000Z",
               details: "10.0.14393.7606:Security Update:https://support.microsoft.com/help/5048671",
               product_ids: [
                  "24",
                  "23",
                  "25",
                  "22",
               ],
               url: "https://support.microsoft.com/help/5048671",
            },
            {
               category: "vendor_fix",
               date: "2024-12-10T08:00:00.000Z",
               details: "6.0.6003.23016:Monthly Rollup:https://support.microsoft.com/help/5048710",
               product_ids: [
                  "37",
                  "32",
                  "36",
                  "35",
               ],
               url: "https://support.microsoft.com/help/5048710",
            },
            {
               category: "vendor_fix",
               date: "2024-12-10T08:00:00.000Z",
               details: "6.0.6003.23016:Security Only:https://support.microsoft.com/help/5048744",
               product_ids: [
                  "37",
                  "32",
                  "36",
                  "35",
               ],
               url: "https://support.microsoft.com/help/5048744",
            },
            {
               category: "vendor_fix",
               date: "2024-12-10T08:00:00.000Z",
               details: "6.1.7601.27467:Monthly Rollup:https://support.microsoft.com/help/5048695",
               product_ids: [
                  "33",
                  "34",
               ],
               url: "https://support.microsoft.com/help/5048695",
            },
            {
               category: "vendor_fix",
               date: "2024-12-10T08:00:00.000Z",
               details: "6.1.7601.27467:Security Only:https://support.microsoft.com/help/5048676",
               product_ids: [
                  "33",
                  "34",
               ],
               url: "https://support.microsoft.com/help/5048676",
            },
            {
               category: "vendor_fix",
               date: "2024-12-10T08:00:00.000Z",
               details: "6.2.9200.25222:Monthly Rollup:https://support.microsoft.com/help/5048699",
               product_ids: [
                  "31",
                  "30",
               ],
               url: "https://support.microsoft.com/help/5048699",
            },
            {
               category: "vendor_fix",
               date: "2024-12-10T08:00:00.000Z",
               details: "6.3.9600.22318:Monthly Rollup:https://support.microsoft.com/help/5048735",
               product_ids: [
                  "29",
                  "28",
               ],
               url: "https://support.microsoft.com/help/5048735",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "HIGH",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 8.1,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  environmentalsScore: 0,
                  exploitCodeMaturity: "UNPROVEN",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  remediationLevel: "OFFICIAL_FIX",
                  reportConfidence: "CONFIRMED",
                  scope: "UNCHANGED",
                  temporalScore: 7.1,
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "1",
                  "2",
                  "3",
                  "4",
                  "5",
                  "6",
                  "7",
                  "8",
                  "9",
                  "10",
                  "11",
                  "12",
                  "13",
                  "14",
                  "15",
                  "16",
                  "17",
                  "18",
                  "19",
                  "20",
                  "21",
                  "22",
                  "23",
                  "24",
                  "25",
                  "26",
                  "27",
                  "28",
                  "29",
                  "30",
                  "31",
                  "32",
                  "33",
                  "34",
                  "35",
                  "36",
                  "37",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Remote Code Execution",
            },
            {
               category: "exploit_status",
               details: "Exploited:No;Latest Software Release:Exploitation Less Likely",
            },
         ],
         title: "Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability",
      },
   ],
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CVE-2024-49124

Vulnerability from cvelistv5

NCSC-2024-0470

Vulnerability from csaf_ncscnl

ncsc-2024-0470

Vulnerability from csaf_ncscnl

wid-sec-w-2024-3657

Vulnerability from csaf_certbund

ghsa-78q2-767q-6x6v

Vulnerability from github

fkie_cve-2024-49124

Vulnerability from fkie_nvd

msrc_cve-2024-49124

Vulnerability from csaf_microsoft

Tags

Sightings

Nomenclature