{"metadata": {"vulnerability": "CVE-2024-38227", "count": 41, "kinds": {"milestone": 9, "sighting": 8, "kev": 0, "other": 24}}, "data": [{"timestamp": "2024-06-11T22:36:08.226Z", "date_only": false, "value": "2024-06-11T22:36:08.226Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-38227", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-09-10T00:00:00Z", "date_only": true, "value": "2024-09-10", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0761", "record": "CERTFR-2024-AVI-0761", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2024-09-10T07:00:00Z", "date_only": false, "value": "2024-09-10T07:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-38227", "record": "MSRC_CVE-2024-38227", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-09-10T07:00:00Z", "date_only": false, "value": "2024-09-10T07:00:00.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-38227", "record": "MSRC_CVE-2024-38227", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2024-09-10T07:00:00Z", "date_only": false, "value": "2024-09-10T07:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2024-38227", "field": "containers.cna.datePublic"}, {"timestamp": "2024-09-10T07:00:00Z", "date_only": false, "value": "2024-09-10T07:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-38227", "record": "MSRC_CVE-2024-38227", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-09-10T16:53:57.766Z", "date_only": false, "value": "2024-09-10T16:53:57.766Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-38227", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-09-10T17:15:25Z", "date_only": false, "value": "2024-09-10T17:15:25Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-3M4M-VGVW-3Q25", "record": "GHSA-3M4M-VGVW-3Q25", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-09-10T17:15:25.483Z", "date_only": false, "value": "2024-09-10T17:15:25.483", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-38227", "record": "FKIE_CVE-2024-38227", "field": "published"}, {"timestamp": "2024-09-10T17:25:32Z", "date_only": false, "value": "2024-09-10T17:25:32.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.thezdi.com/blog/2024/9/10/the-september-2024-security-update-review", "record": "CVE-2024-38227", "field": "creation_timestamp", "uuid": "06a94e43-fabe-4687-ac24-0d7beeaada71", "url": "https://www.thezdi.com/blog/2024/9/10/the-september-2024-security-update-review"}, {"timestamp": "2024-09-10T18:23:10.239Z", "date_only": false, "value": "2024-09-10T18:23:10.239728Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2024-0365", "record": "NCSC-2024-0365", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-09-10T18:23:10.239Z", "date_only": false, "value": "2024-09-10T18:23:10.239728Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2024-0365", "record": "NCSC-2024-0365", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-09-10T18:23:10.239Z", "date_only": false, "value": "2024-09-10T18:23:10.239728Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2024-0365", "record": "NCSC-2024-0365", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-09-10T18:30:45Z", "date_only": false, "value": "2024-09-10T18:30:45Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-3M4M-VGVW-3Q25", "record": "GHSA-3M4M-VGVW-3Q25", "field": "published"}, {"timestamp": "2024-09-10T18:30:45Z", "date_only": false, "value": "2024-09-10T18:30:45Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-3M4M-VGVW-3Q25", "record": "GHSA-3M4M-VGVW-3Q25", "field": "modified"}, {"timestamp": "2024-09-10T18:51:54.627Z", "date_only": false, "value": "2024-09-10T18:51:54.627659Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-38227", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-09-10T18:51:54.627Z", "date_only": false, "value": "2024-09-10T18:51:54.627659Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-38227", "record": "FKIE_CVE-2024-38227", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-09-10T18:54:38.415Z", "date_only": false, "value": "2024-09-10T18:54:38.415Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-38227", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-10T22:00:00Z", "date_only": false, "value": "2024-09-10T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-2121", "record": "WID-SEC-W-2024-2121", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-09-10T22:00:00Z", "date_only": false, "value": "2024-09-10T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-2121", "record": "WID-SEC-W-2024-2121", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-09-10T22:00:00Z", "date_only": false, "value": "2024-09-10T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-2121", "record": "WID-SEC-W-2024-2121", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-09-10T22:00:00Z", "date_only": false, "value": "2024-09-10T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-2121", "record": "WID-SEC-W-2024-2121", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-09-11T00:00:00Z", "date_only": false, "value": "2024-09-11T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0761", "record": "CERTFR-2024-AVI-0761", "field": "last_revision_date"}, {"timestamp": "2024-09-11T00:00:00Z", "date_only": false, "value": "2024-09-11T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0761", "record": "CERTFR-2024-AVI-0761", "field": "initial_release_date"}, {"timestamp": "2024-09-11T00:00:00Z", "date_only": false, "value": "2024-09-11T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0761", "record": "CERTFR-2024-AVI-0761", "field": "revisions.0.revision_date"}, {"timestamp": "2024-09-11T10:38:46.526Z", "date_only": false, "value": "2024-09-11T10:38:46.526+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-2121", "record": "WID-SEC-W-2024-2121", "field": "document.tracking.generator.date"}, {"timestamp": "2024-09-12T00:00:00Z", "date_only": true, "value": "2024-09-12", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2024-39525", "record": "CNVD-2024-39525", "field": "submitTime"}, {"timestamp": "2024-09-29T00:00:00Z", "date_only": true, "value": "2024-09-29", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2024-39525", "record": "CNVD-2024-39525", "field": "openTime"}, {"timestamp": "2024-10-06T07:00:00Z", "date_only": false, "value": "2024-10-06T07:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-38227", "record": "MSRC_CVE-2024-38227", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-10-06T07:00:00Z", "date_only": false, "value": "2024-10-06T07:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-38227", "record": "MSRC_CVE-2024-38227", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-10-17T16:14:17Z", "date_only": false, "value": "2024-10-17T16:14:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/bizone_channel/1491", "record": "CVE-2024-38227", "field": "creation_timestamp", "uuid": "d1f406a4-81ca-4855-9224-f1d2a68fd351", "content": "\ud83d\udd0d \u0410\u043d\u0430\u043b\u0438\u0437 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Microsoft SharePoint\n\n\u0412 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044c\u0441\u043a\u043e\u043c Patch Tuesday \u043e\u0442 Microsoft \u0431\u044b\u043b\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u0430\u0442\u0447\u0435\u0439 \u0434\u043b\u044f Microsoft SharePoint \u2014 \u043e\u0431\u0448\u0438\u0440\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0430\u0439\u0442\u0430\u043c\u0438.\u00a0\n\n\u041d\u0430\u0448\u0438 \u043a\u043e\u043b\u043b\u0435\u0433\u0438 \u0438\u0437 \u0433\u0440\u0443\u043f\u043f\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u043e \u0438\u0437\u0443\u0447\u0438\u043b\u0438 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0443\u044e 7,2 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS (CVE-2024-38227).\u00a0\n\n\u0412 \u0441\u0442\u0430\u0442\u044c\u0435 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b\u0438, \u0441 \u043a\u0430\u043a\u0438\u043c\u0438 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u043c\u0438 \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0438\u0441\u044c \u043f\u0440\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0435 \u0438 \u0447\u0442\u043e \u043d\u043e\u0432\u043e\u0433\u043e \u0443\u0437\u043d\u0430\u043b\u0438 \u043e\u0431 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0435 Microsoft SharePoint.\u00a0\n\n\u0427\u0438\u0442\u0430\u0442\u044c \u043d\u0430 \u0441\u0430\u0439\u0442\u0435", "url": "https://t.me/bizone_channel/1491"}, {"timestamp": "2024-10-19T14:19:20Z", "date_only": false, "value": "2024-10-19T14:19:20.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/poxek/4480", "record": "CVE-2024-38227", "field": "creation_timestamp", "uuid": "269e6c7d-0fd1-4b4a-800f-3e7c0496627e", "content": "\ud83d\udd3a \u0410\u043d\u0430\u043b\u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-38227 \u0432 Microsoft SharePoint \ud83d\udd3a\n#bizone #windows #microsoft #sharepoint\n\n10 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u0443\u044e \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0443 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0432 79 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445. \u041d\u0430\u0448\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u043b\u0438 \u043f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f Microsoft SharePoint \u2014 \u043e\u0431\u0448\u0438\u0440\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0430\u0439\u0442\u0430\u043c\u0438 (content management system, CMS). \u0418\u0437 \u043f\u044f\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043e\u0448\u0435\u0434\u0448\u0438\u0445 \u0432 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044c\u0441\u043a\u0438\u0439 \u0432\u044b\u043f\u0443\u0441\u043a, \u0447\u0435\u0442\u044b\u0440\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0439 \u043a\u043e\u0434 (remote code execution, RCE), \u043e\u0434\u043d\u0430 \u2014 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u043b\u0430 \u0443\u0433\u0440\u043e\u0437\u0443 DoS. \u041c\u044b \u0432\u044b\u0431\u0440\u0430\u043b\u0438 \u0434\u043b\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430 CVE-2024-38227 \u2014 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0414\u043b\u044f \u043d\u0430\u0441 \u0442\u0430\u043a\u043e\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u2014 \u044d\u0442\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0437\u0443\u0447\u0438\u0442\u044c \u0441\u0430\u043c Microsoft SharePoint \u0438 \u043f\u043e\u043d\u044f\u0442\u044c \u0442\u0435\u043a\u0443\u0449\u0443\u044e \u0442\u0435\u043e\u0440\u0438\u044e \u0435\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 (state-of-the-art).\n\n\ud83d\udd25 \u0427\u0438\u0442\u0430\u0442\u044c \u0434\u0430\u043b\u0435\u0435\n\n\ud83c\udf1a @poxek | \ud83d\udcfa Youtube | \ud83d\udcfa RuTube | \ud83d\udcfa VK \u0412\u0438\u0434\u0435\u043e | \ud83c\udf1a \u041c\u0430\u0433\u0430\u0437\u0438\u043d \u043c\u0435\u0440\u0447\u0430", "url": "https://t.me/poxek/4480"}, {"timestamp": "2024-12-25T13:51:30Z", "date_only": false, "value": "2024-12-25T13:51:30.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bizone_channel/1661", "record": "CVE-2024-38227", "field": "creation_timestamp", "uuid": "51330ebd-18d6-4605-8b12-aec4a6a72f89", "content": "\u2699\ufe0f \u0412\u0441\u0435 \u0445\u0430\u0431\u0440\u0430\u0441\u0442\u0430\u0442\u044c\u0438 \u0437\u0430 2024 \u0433\u043e\u0434\n\n\u0412 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443 \u043c\u044b \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 9 \u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0439 \u0441\u0440\u0435\u0434\u043d\u0435\u0433\u043e \u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438. \u0421\u043e\u0431\u0440\u0430\u043b\u0438 \u0438\u0445 \u0432 \u043e\u0434\u0438\u043d \u043f\u043e\u0441\u0442, \u0447\u0442\u043e\u0431\u044b \u0432\u044b \u0442\u043e\u0447\u043d\u043e \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u0435 \u043f\u0440\u043e\u043f\u0443\u0441\u0442\u0438\u043b\u0438.\n\n\ud83d\udd35\u0421\u043a\u0430\u0437 \u043e \u0442\u043e\u043c, \u043a\u0430\u043a \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u044b \u0442\u0440\u0430\u0444\u0438\u043a \u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442\n\u0413\u043e\u0432\u043e\u0440\u0438\u043c \u043e \u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u043a\u0435 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043c\u0435\u0436\u0434\u0443 \u04212-\u0430\u0433\u0435\u043d\u0442\u043e\u043c \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e \u043d\u0435\u0442\u0440\u0438\u0432\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u043f\u043e\u0441\u043e\u0431\u0430\u0445 \u044d\u0442\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c.\n\n\ud83d\udd35\u041d\u043e\u0432\u0430\u044f \u0442\u0435\u0445\u043d\u0438\u043a\u0430 \u0441\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0440\u0435\u0435\u0441\u0442\u0440\u0430: \u0430\u043d\u0430\u043b\u0438\u0437 \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435\n\u0421\u0442\u0430\u0442\u044c\u044f \u043e\u0431 \u0443\u0442\u0438\u043b\u0438\u0442\u0435, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u0440\u0435\u0435\u0441\u0442\u0440\u0430 Windows \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439. \u0420\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c \u043e \u0441\u043f\u043e\u0441\u043e\u0431\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0435\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0438 \u0440\u0430\u0437\u043d\u044b\u0445 \u043f\u043e\u0434\u0445\u043e\u0434\u0430\u0445 \u043a \u0437\u0430\u0449\u0438\u0442\u0435.\n\n\ud83d\udd35\u041f\u043e\u0434 \u043a\u0430\u043f\u043e\u0442\u043e\u043c DarkGate: \u0440\u0430\u0437\u0431\u0438\u0440\u0430\u0435\u043c \u0412\u041f\u041e-\u043c\u0443\u043b\u044c\u0442\u0438\u0442\u0443\u043b\n\u0420\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c \u043f\u0440\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0441\u043e\u0447\u0435\u0442\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430, \u0441\u0442\u0438\u043b\u0435\u0440\u0430 \u0438 RAT. \u041a\u0430\u043a \u043e\u043d\u043e \u0431\u044b\u043b\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043e, \u0434\u043b\u044f \u0447\u0435\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0438 \u043f\u043e\u0447\u0435\u043c\u0443 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0432\u043e\u043f\u0440\u0435\u043a\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044e \u043e\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430.\n\n\ud83d\udd35\u0410\u043d\u0430\u043b\u0438\u0437 CVE-2024-38063: \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044f\u0434\u0440\u0430 Windows\n\u0420\u0430\u0437\u0431\u0438\u0440\u0430\u0435\u043c, \u043a\u0430\u043a \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043e\u0448\u0438\u0431\u043a\u0430 \u0432 \u0441\u0435\u0442\u0435\u0432\u043e\u043c \u0441\u0442\u0435\u043a\u0435 Windows, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0435\u0437 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \n\n\ud83d\udd35\u041a\u0430\u043a \u044f \u00ab\u041a\u0430\u043f\u0441\u0443\u043b\u0443 \u041d\u0435\u043e\u00bb \u043e\u0442 VK \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u043c\u043d\u043e\u0439 \u043a\u043e\u043b\u043e\u043d\u043a\u0438 VK. \u0427\u0438\u0442\u0430\u0439\u0442\u0435 \u0432 \u0441\u0442\u0430\u0442\u044c\u0435 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043d\u0430\u0439\u0442\u0438 \u0438 \u0441 \u0447\u0435\u043c \u043f\u0440\u0438\u0448\u043b\u043e\u0441\u044c \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u0442\u044c\u0441\u044f \u0437\u0430 \u0432\u0440\u0435\u043c\u044f \u043f\u0440\u043e\u0435\u043a\u0442\u0430.\n\n\ud83d\udd35\u0410\u043d\u0430\u043b\u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-7965\n\u041f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u043b\u0430 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443. \n\n\ud83d\udd35\u042d\u0432\u043e\u043b\u044e\u0446\u0438\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u0432\u0435\u0431-\u0440\u0435\u0441\u0443\u0440\u0441\u044b: \u0447\u0442\u043e \u043f\u043e\u043c\u0435\u043d\u044f\u043b\u043e\u0441\u044c \u0441 2011 \u0433\u043e\u0434\u0430\n\u0412 \u044d\u0442\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c, \u043a\u0430\u043a \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u043b\u0438\u0441\u044c \u043c\u0435\u0442\u043e\u0434\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0432 \u043f\u0435\u0440\u0438\u043e\u0434 \u0441 2011 \u043f\u043e 2018 \u0433\u043e\u0434.\n\n\ud83d\udd35\u0410\u043d\u0430\u043b\u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-38227 \u0432 Microsoft SharePoint\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043f\u043e\u043c\u043e\u0433\u043b\u043e \u043d\u0430\u043c \u0438\u0437\u0443\u0447\u0438\u0442\u044c Microsoft SharePoint \u0438 \u043f\u043e\u043d\u044f\u0442\u044c \u0442\u0435\u043a\u0443\u0449\u0443\u044e \u0442\u0435\u043e\u0440\u0438\u044e \u0435\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 (state-of-the-art).\n\n\ud83d\udd35Another client side: \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0433\u043b\u0430\u0437\u0430\u043c\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e\n\u0420\u0430\u0437\u0431\u0438\u0440\u0430\u0435\u043c \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0435 \u043a\u0435\u0439\u0441\u044b, \u043a\u043e\u0433\u0434\u0430 \u0431\u0430\u0433\u0438 \u0432 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u0432\u0435\u043b\u0438 \u043a \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c.\n\n\u041f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u0442\u0435, \u0447\u0438\u0442\u0430\u0439\u0442\u0435 \u0438 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0438\u0440\u0443\u0439\u0442\u0435.", "url": "https://t.me/bizone_channel/1661"}, {"timestamp": "2024-12-31T23:02:29.802Z", "date_only": false, "value": "2024-12-31T23:02:29.802Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-38227", "record": "MSRC_CVE-2024-38227", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-17T07:39:43.670Z", "date_only": false, "value": "2026-06-17T07:39:43.670", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-38227", "record": "FKIE_CVE-2024-38227", "field": "lastModified"}, {"timestamp": "2026-07-26T07:01:45.982Z", "date_only": false, "value": "2026-07-26T07:01:45.982291Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/mephictf/790", "record": "CVE-2024-38227", "field": "creation_timestamp", "uuid": "12ae3175-1c6d-4944-80f4-410a7eb75176", "url": "https://t.me/mephictf/790"}, {"timestamp": "2026-07-27T00:01:30.570Z", "date_only": false, "value": "2026-07-27T00:01:30.570761Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/mephictf/790", "record": "CVE-2024-38227", "field": "creation_timestamp", "uuid": "5a302e15-7564-496f-b7d3-091701eef2e0", "url": "https://t.me/mephictf/790"}, {"timestamp": "2026-07-28T21:00:05.335Z", "date_only": false, "value": "2026-07-28T21:00:05.335688Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/mephictf/790", "record": "CVE-2024-38227", "field": "creation_timestamp", "uuid": "f97cd2d1-b0b1-4b91-9cda-f1df43b065d1", "url": "https://t.me/mephictf/790"}, {"timestamp": "2026-07-29T00:00:12.760Z", "date_only": false, "value": "2026-07-29T00:00:12.760374Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/mephictf/790", "record": "CVE-2024-38227", "field": "creation_timestamp", "uuid": "9c0d24d6-aa7d-4ef9-a7d6-e7e763cbf1c3", "url": "https://t.me/mephictf/790"}, {"timestamp": "2026-08-10T15:10:35.017Z", "date_only": false, "value": "2026-08-10T15:10:35.017Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-38227", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-10T15:10:35.017Z", "date_only": false, "value": "2026-08-10T15:10:35.017Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "CVE-2024-38227", "field": "containers.cna.providerMetadata.dateUpdated"}]}