{"metadata": {"vulnerability": "CVE-2024-21305", "count": 43, "kinds": {"milestone": 8, "sighting": 11, "kev": 0, "other": 24}}, "data": [{"timestamp": "2023-12-08T22:45:19.365Z", "date_only": false, "value": "2023-12-08T22:45:19.365Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-21305", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-12-13T01:21:42.613Z", "date_only": false, "value": "2023-12-13T01:21:42.613515Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-21305", "record": "GSD-2024-21305", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-01-09T08:00:00Z", "date_only": false, "value": "2024-01-09T08:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-21305", "record": "MSRC_CVE-2024-21305", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-01-09T08:00:00Z", "date_only": false, "value": "2024-01-09T08:00:00.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-21305", "record": "MSRC_CVE-2024-21305", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2024-01-09T08:00:00Z", "date_only": false, "value": "2024-01-09T08:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2024-21305", "field": "containers.cna.datePublic"}, {"timestamp": "2024-01-09T08:00:00Z", "date_only": false, "value": "2024-01-09T08:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-21305", "record": "MSRC_CVE-2024-21305", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-01-09T08:00:00Z", "date_only": false, "value": "2024-01-09T08:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-21305", "record": "MSRC_CVE-2024-21305", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-01-09T17:56:55.823Z", "date_only": false, "value": "2024-01-09T17:56:55.823Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-21305", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-01-09T18:15:53Z", "date_only": false, "value": "2024-01-09T18:15:53Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-PC6V-RJPX-V6RM", "record": "GHSA-PC6V-RJPX-V6RM", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-01-09T18:15:53.940Z", "date_only": false, "value": "2024-01-09T18:15:53.940", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-21305", "record": "FKIE_CVE-2024-21305", "field": "published"}, {"timestamp": "2024-01-09T18:15:53.940Z", "date_only": false, "value": "2024-01-09T18:15:53.940", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2024-21305", "record": "GSD-2024-21305", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2024-01-09T18:30:29Z", "date_only": false, "value": "2024-01-09T18:30:29Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-PC6V-RJPX-V6RM", "record": "GHSA-PC6V-RJPX-V6RM", "field": "published"}, {"timestamp": "2024-01-09T18:30:29Z", "date_only": false, "value": "2024-01-09T18:30:29Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-PC6V-RJPX-V6RM", "record": "GHSA-PC6V-RJPX-V6RM", "field": "modified"}, {"timestamp": "2024-01-09T20:16:40Z", "date_only": false, "value": "2024-01-09T20:16:40.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/165332", "record": "CVE-2024-21305", "field": "creation_timestamp", "uuid": "255a4fcc-62ef-46cf-b7cb-de582458aa48", "content": "https://ift.tt/qnBDkV1\nCVE-2024-21305 | Microsoft Windows up to Server 2022 23H2 Hypervisor-Protected Code Integrity unknown vulnerability", "url": "https://t.me/ctinow/165332"}, {"timestamp": "2024-01-09T23:00:00Z", "date_only": false, "value": "2024-01-09T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0036", "record": "WID-SEC-W-2024-0036", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-01-09T23:00:00Z", "date_only": false, "value": "2024-01-09T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0036", "record": "WID-SEC-W-2024-0036", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-01-09T23:00:00Z", "date_only": false, "value": "2024-01-09T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0036", "record": "WID-SEC-W-2024-0036", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-01-10T00:00:00Z", "date_only": false, "value": "2024-01-10T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0021", "record": "CERTFR-2024-AVI-0021", "field": "last_revision_date"}, {"timestamp": "2024-01-10T00:00:00Z", "date_only": false, "value": "2024-01-10T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0021", "record": "CERTFR-2024-AVI-0021", "field": "initial_release_date"}, {"timestamp": "2024-01-10T00:00:00Z", "date_only": false, "value": "2024-01-10T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0021", "record": "CERTFR-2024-AVI-0021", "field": "revisions.0.revision_date"}, {"timestamp": "2024-01-12T18:48:04.967Z", "date_only": false, "value": "2024-01-12T18:48:04.967", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-21305", "record": "GSD-2024-21305", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-01-18T04:20:15Z", "date_only": false, "value": "2024-01-18T04:20:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/1860", "record": "CVE-2024-21305", "field": "creation_timestamp", "uuid": "e9f8971a-20a6-4ea0-958d-d0545c8408ca", "content": "https://tandasat.github.io/blog/2024/01/15/CVE-2024-21305\nCVE-2024-21305\n\n#\u5206\u6790", "url": "https://t.me/CNArsenal/1860"}, {"timestamp": "2024-01-19T19:41:04Z", "date_only": false, "value": "2024-01-19T19:41:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/2954", "record": "CVE-2024-21305", "field": "creation_timestamp", "uuid": "8cab7e41-d2c0-404f-bf36-fea12cc45d15", "content": "#ExploitObserverAlert\n\nCVE-2024-21305\n\nDESCRIPTION: Exploit Observer has 3 entries in 2 file formats related to CVE-2024-21305. Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability\n\nFIRST-EPSS: 0.000480000\nNVD-IS: 3.6\nNVD-ES: 0.8", "url": "https://t.me/arpsyndicate/2954"}, {"timestamp": "2024-02-25T23:00:00Z", "date_only": false, "value": "2024-02-25T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0036", "record": "WID-SEC-W-2024-0036", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-08-01T22:13:42.694Z", "date_only": false, "value": "2024-08-01T22:13:42.694Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2024-21305", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-24T23:42:45Z", "date_only": false, "value": "2024-10-24T23:42:45.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/11333", "record": "CVE-2024-21305", "field": "creation_timestamp", "uuid": "85e1ea22-5836-4f90-8e20-957b342196cb", "content": "#exploit\n1. CVE-2024-46538:\nPfSense Stored XSS lead to RCE\nhttps://github.com/EQSTLab/CVE-2024-46538\n\n2. CVE-2024-8353:\nGiveWP PHP Object Injection\nhttps://github.com/EQSTLab/CVE-2024-8353\n\n3. CVE-2024-21305:\nHypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability\nhttps://github.com/tandasat/CVE-2024-21305", "url": "https://t.me/CyberSecurityTechnologies/11333"}, {"timestamp": "2024-10-25T04:45:13Z", "date_only": false, "value": "2024-10-25T04:45:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackerArsenal/630", "record": "CVE-2024-21305", "field": "creation_timestamp", "uuid": "504fce56-0a49-4eb2-b657-a605ea6aa4fe", "content": "#exploit\n1. CVE-2024-46538:\nPfSense Stored XSS lead to RCE\nhttps://github.com/EQSTLab/CVE-2024-46538\n\n2. CVE-2024-8353:\nGiveWP PHP Object Injection\nhttps://github.com/EQSTLab/CVE-2024-8353\n\n3. CVE-2024-21305:\nHypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability\nhttps://github.com/tandasat/CVE-2024-21305", "url": "https://t.me/HackerArsenal/630"}, {"timestamp": "2024-10-28T04:16:04Z", "date_only": false, "value": "2024-10-28T04:16:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberDilara/1119", "record": "CVE-2024-21305", "field": "creation_timestamp", "uuid": "c87e9325-0afe-48b5-b057-a53526875b9d", "content": "Exploit\n\n1. CVE-2024-46538:\nPfSense Stored XSS lead to RCE\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\n2. CVE-2024-8353:\nGiveWP PHP Object Injection\n\nhttps://github.com/EQSTLab/CVE-2024-8353\n\n3. CVE-2024-21305:\nHypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability\n\nhttps://github.com/tandasat/CVE-2024-21305\n\n#CyberDilara", "url": "https://t.me/CyberDilara/1119"}, {"timestamp": "2024-10-28T04:16:24Z", "date_only": false, "value": "2024-10-28T04:16:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/7554", "record": "CVE-2024-21305", "field": "creation_timestamp", "uuid": "8d6712d7-17f1-4ff9-ba4d-d0f21b0559a1", "content": "Exploit\n\n1. CVE-2024-46538:\nPfSense Stored XSS lead to RCE\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\n2. CVE-2024-8353:\nGiveWP PHP Object Injection\n\nhttps://github.com/EQSTLab/CVE-2024-8353\n\n3. CVE-2024-21305:\nHypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability\n\nhttps://github.com/tandasat/CVE-2024-21305\n\n#CyberDilara", "url": "https://t.me/GrayHatsHack/7554"}, {"timestamp": "2024-10-28T04:16:24Z", "date_only": false, "value": "2024-10-28T04:16:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/8928", "record": "CVE-2024-21305", "field": "creation_timestamp", "uuid": "04044c43-66a0-48bc-9793-99d8eb487899", "content": "Exploit\n\n1. CVE-2024-46538:\nPfSense Stored XSS lead to RCE\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\n2. CVE-2024-8353:\nGiveWP PHP Object Injection\n\nhttps://github.com/EQSTLab/CVE-2024-8353\n\n3. CVE-2024-21305:\nHypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability\n\nhttps://github.com/tandasat/CVE-2024-21305\n\n#CyberDilara", "url": "https://t.me/GrayHatsHack/8928"}, {"timestamp": "2024-10-29T04:16:04Z", "date_only": false, "value": "2024-10-29T04:16:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3827", "record": "CVE-2024-21305", "field": "creation_timestamp", "uuid": "1d516ccb-10e8-486c-a3e0-e0d42ce30269", "content": "Exploit\n\n1. CVE-2024-46538:\nPfSense Stored XSS lead to RCE\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\n2. CVE-2024-8353:\nGiveWP PHP Object Injection\n\nhttps://github.com/EQSTLab/CVE-2024-8353\n\n3. CVE-2024-21305:\nHypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability\n\nhttps://github.com/tandasat/CVE-2024-21305\n\n#CyberDilara", "url": "https://t.me/dilagrafie/3827"}, {"timestamp": "2024-10-29T12:21:04Z", "date_only": false, "value": "2024-10-29T12:21:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/InfoSecInsider/24219", "record": "CVE-2024-21305", "field": "creation_timestamp", "uuid": "ea07052f-9466-40bc-aae2-9da13122aa76", "content": "Exploit\n\n1. CVE-2024-46538:\nPfSense Stored XSS lead to RCE\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\n2. CVE-2024-8353:\nGiveWP PHP Object Injection\n\nhttps://github.com/EQSTLab/CVE-2024-8353\n\n3. CVE-2024-21305:\nHypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability\n\nhttps://github.com/tandasat/CVE-2024-21305\n\n#CyberDilara", "url": "https://t.me/InfoSecInsider/24219"}, {"timestamp": "2024-10-29T12:21:04Z", "date_only": false, "value": "2024-10-29T12:21:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/InfoSecInsider/587", "record": "CVE-2024-21305", "field": "creation_timestamp", "uuid": "1ec1cbcd-ae05-4950-a885-11b588a9005f", "content": "Exploit\n\n1. CVE-2024-46538:\nPfSense Stored XSS lead to RCE\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\n2. CVE-2024-8353:\nGiveWP PHP Object Injection\n\nhttps://github.com/EQSTLab/CVE-2024-8353\n\n3. CVE-2024-21305:\nHypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability\n\nhttps://github.com/tandasat/CVE-2024-21305\n\n#CyberDilara", "url": "https://t.me/InfoSecInsider/587"}, {"timestamp": "2025-03-23T23:00:00Z", "date_only": false, "value": "2025-03-23T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0036", "record": "WID-SEC-W-2024-0036", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-03-23T23:00:00Z", "date_only": false, "value": "2025-03-23T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0036", "record": "WID-SEC-W-2024-0036", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-03-24T09:09:42.114Z", "date_only": false, "value": "2025-03-24T09:09:42.114+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0036", "record": "WID-SEC-W-2024-0036", "field": "document.tracking.generator.date"}, {"timestamp": "2025-05-03T01:46:23.022Z", "date_only": false, "value": "2025-05-03T01:46:23.022Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-21305", "record": "MSRC_CVE-2024-21305", "field": "document.tracking.generator.date"}, {"timestamp": "2025-05-03T01:46:35.021Z", "date_only": false, "value": "2025-05-03T01:46:35.021Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "CVE-2024-21305", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-08T15:56:27.297Z", "date_only": false, "value": "2025-05-08T15:56:27.297770Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-21305", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-05-08T15:56:27.297Z", "date_only": false, "value": "2025-05-08T15:56:27.297770Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-21305", "record": "FKIE_CVE-2024-21305", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-06-03T14:30:46.972Z", "date_only": false, "value": "2025-06-03T14:30:46.972Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-21305", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-06-03T14:30:46.972Z", "date_only": false, "value": "2025-06-03T14:30:46.972Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-21305", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T07:08:57.570Z", "date_only": false, "value": "2026-06-17T07:08:57.570", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-21305", "record": "FKIE_CVE-2024-21305", "field": "lastModified"}]}