{"metadata": {"vulnerability": "CVE-2024-43629", "count": 40, "kinds": {"milestone": 9, "sighting": 8, "kev": 0, "other": 23}}, "data": [{"timestamp": "2024-08-14T01:08:33.554Z", "date_only": false, "value": "2024-08-14T01:08:33.554Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-43629", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-11-12T00:00:00Z", "date_only": true, "value": "2024-11-12", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0975", "record": "CERTFR-2024-AVI-0975", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2024-11-12T08:00:00Z", "date_only": false, "value": "2024-11-12T08:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-43629", "record": "MSRC_CVE-2024-43629", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2024-11-12T08:00:00Z", "date_only": false, "value": "2024-11-12T08:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2024-43629", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-11-12T08:00:00Z", "date_only": false, "value": "2024-11-12T08:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-43629", "record": "MSRC_CVE-2024-43629", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-11-12T08:00:00Z", "date_only": false, "value": "2024-11-12T08:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-43629", "record": "MSRC_CVE-2024-43629", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2024-11-12T08:00:00Z", "date_only": false, "value": "2024-11-12T08:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-43629", "record": "MSRC_CVE-2024-43629", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-11-12T17:54:01.986Z", "date_only": false, "value": "2024-11-12T17:54:01.986Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-43629", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-11-12T18:15:31Z", "date_only": false, "value": "2024-11-12T18:15:31Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-93WW-RWV5-GJG4", "record": "GHSA-93WW-RWV5-GJG4", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2024-11-12T18:15:31.133Z", "date_only": false, "value": "2024-11-12T18:15:31.133", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-43629", "record": "FKIE_CVE-2024-43629", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-11-12T18:26:35Z", "date_only": false, "value": "2024-11-12T18:26:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.thezdi.com/blog/2024/11/12/the-november-2024-security-update-review", "record": "CVE-2024-43629", "field": "creation_timestamp", "uuid": "589d1f87-2bdd-4e0d-9125-3ad2e9c60de6", "url": "https://www.thezdi.com/blog/2024/11/12/the-november-2024-security-update-review"}, {"timestamp": "2024-11-12T18:30:58Z", "date_only": false, "value": "2024-11-12T18:30:58Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-93WW-RWV5-GJG4", "record": "GHSA-93WW-RWV5-GJG4", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-11-12T18:30:58Z", "date_only": false, "value": "2024-11-12T18:30:58Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-93WW-RWV5-GJG4", "record": "GHSA-93WW-RWV5-GJG4", "field": "modified", "linked_record": true}, {"timestamp": "2024-11-12T18:53:07.914Z", "date_only": false, "value": "2024-11-12T18:53:07.914094Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2024-0434", "record": "NCSC-2024-0434", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2024-11-12T18:53:07.914Z", "date_only": false, "value": "2024-11-12T18:53:07.914094Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2024-0434", "record": "NCSC-2024-0434", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-11-12T18:53:07.914Z", "date_only": false, "value": "2024-11-12T18:53:07.914094Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2024-0434", "record": "NCSC-2024-0434", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2024-11-12T19:25:56.352Z", "date_only": false, "value": "2024-11-12T19:25:56.352299Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113471622735534665", "record": "CVE-2024-43629", "field": "creation_timestamp", "uuid": "879c1b79-0cb7-4ccd-9ad8-b44b0df37073", "url": "https://infosec.exchange/users/cve/statuses/113471622735534665"}, {"timestamp": "2024-11-12T23:00:00Z", "date_only": false, "value": "2024-11-12T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3445", "record": "WID-SEC-W-2024-3445", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2024-11-12T23:00:00Z", "date_only": false, "value": "2024-11-12T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3445", "record": "WID-SEC-W-2024-3445", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-11-12T23:00:00Z", "date_only": false, "value": "2024-11-12T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3445", "record": "WID-SEC-W-2024-3445", "field": "vulnerabilities.17.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-11-13T00:00:00Z", "date_only": false, "value": "2024-11-13T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0975", "record": "CERTFR-2024-AVI-0975", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2024-11-13T00:00:00Z", "date_only": false, "value": "2024-11-13T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0975", "record": "CERTFR-2024-AVI-0975", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-11-13T00:00:00Z", "date_only": false, "value": "2024-11-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0975", "record": "CERTFR-2024-AVI-0975", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2024-11-14T04:55:21.478Z", "date_only": false, "value": "2024-11-14T04:55:21.478289Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-43629", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-11-14T04:55:21.478Z", "date_only": false, "value": "2024-11-14T04:55:21.478289Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-43629", "record": "FKIE_CVE-2024-43629", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2024-11-15T18:00:06Z", "date_only": false, "value": "2024-11-15T18:00:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/6438", "record": "CVE-2024-43629", "field": "creation_timestamp", "uuid": "8aca3cec-e78c-42eb-8e71-c824bc2577c2", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c\u0438 \u0443\u0433\u0440\u043e\u0437\u044b.\n\n\u041d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0440\u0430\u0441\u043a\u043b\u0430\u0434 \u0442\u0430\u043a\u043e\u0439:\n\n1. \u041a\u0430\u043a \u043c\u044b \u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u043b\u0438, \u0434\u0430\u043d\u043d\u044b\u0435 \u0441 \u0442\u0435\u043b\u0435\u043c\u0435\u0442\u0440\u0438\u0438 Shadowserver Foundation \u0441\u0432\u0438\u0434\u0435\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0443\u044e\u0442 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u043c \u043d\u0430 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0445 \u043d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 D-Link NAS \u0438 Citrix Virtual Apps and Desktops.\n\n2. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Palo Alto Networks \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430, \u0447\u0442\u043e 0-day \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u043e\u0441\u043b\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0432\u0448\u0438\u0445\u0441\u044f \u0441\u043b\u0443\u0445\u043e\u0432 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435\u044f\u0441\u043d\u043e, \u043a\u0430\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430, \u043a\u0442\u043e \u0435\u044e \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u0438 \u043a\u0442\u043e \u0441\u0442\u0430\u043b \u0446\u0435\u043b\u044c\u044e \u0430\u0442\u0430\u043a. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE, \u043d\u043e \u0435\u0435 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 CVSS \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 9,3. \u041f\u043e\u043a\u0430 \u0436\u0435 Palo Alto \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u0430\u0434 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u0438 \u0441\u0438\u0433\u043d\u0430\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u043b\u044f \u0434\u0435\u0442\u0435\u043a\u0446\u0438\u0438.\n\n3. \u041f\u043e\u0437\u0438\u0442\u0438\u0432\u044b \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c \u0441 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u043e\u0439 \u043f\u043e \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u043d\u0430\u0447\u0438\u043c\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043b\u0438\u0431\u043e \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432\u0436\u0438\u0432\u0443\u044e, \u043b\u0438\u0431\u043e \u0431\u0443\u0434\u0443\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f.\n\n\u0412 \u0422\u041e\u041f\u0435 \u0437\u0430 \u043e\u043a\u0442\u044f\u0431\u0440\u044c: EoP \u0432 Windows Kernel Streaming (CVE-2024-30090), EoP \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 \u044f\u0434\u0440\u0430 Windows (CVE-2024-35250), \u043e\u0448\u0438\u0431\u043a\u0430 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Windows MSHTML (CVE-2024-43573), \u0430 \u0442\u0430\u043a\u0436\u0435 RCE \u0432 XWiki (CVE-2024-31982).\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043d\u0435 \u043c\u043e\u0436\u0435\u043c \u043d\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c CVE-2024-43629 \u0441 CVSS 7,8, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0443\u044e \u043a EoP, \u043a\u043e\u0442\u043e\u0440\u0443\u044e Microsoft \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0432 \u0442\u0435\u043a\u0443\u0449\u0435\u043c PatchTuesday \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 Positive Technologies.\n\n4. watchTowr Labs \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c EoP, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e Fortinet FortiManager FortiJump, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0443\u044e \u043f\u043e \u0438\u0442\u043e\u0433\u0443 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 FortiJump Higher.\n\n5. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Varonis \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438 \u044f\u0437\u044b\u043a\u0430 Perl \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 PostgreSQL.\n\n\u041e\u043d\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-10979 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u043a\u0442\u043e\u0440\u0430\u043c \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u044b.\n\nVaronis \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u0431\u0430\u0437\u043e\u0432\u0443\u044e \u041e\u0421 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043a \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n6. \u0411\u0430\u0437\u0430 KEV\u00a0CISA \u043f\u043e\u043f\u043e\u043b\u043d\u0438\u043b\u0430\u0441\u044c \u0441\u0435\u043c\u044c\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0430 \u043d\u0443\u043b\u044f \u0432 Windows \u0438\u0437 \u043f\u0430\u0442\u0447\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0438, \u0434\u0432\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 PAN \u0438 Metabase GeoJSON, Cisco ASA \u0438 Atlassian Jira.\n\n\u0410 \u0432 NIST \u0441\u043c\u043e\u0433\u043b\u0438 \u043b\u0438\u0448\u044c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c NVD, \u0432\u043a\u043b\u044e\u0447\u0438\u0432 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431\u043e \u0432\u0441\u0435\u0445 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0437\u0430 \u044d\u0442\u043e\u0442 \u0433\u043e\u0434, \u043d\u043e \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044f \u043f\u0440\u043e\u0431\u0443\u043a\u0441\u043e\u0432\u044b\u0432\u0430\u0442\u044c \u0441 \u043e\u0433\u0440\u043e\u043c\u043d\u044b\u043c \u0431\u044d\u043a\u043b\u043e\u0433\u043e\u043c CVE, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043c\u0435\u0442\u0430\u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041c\u0430\u0439\u0441\u043a\u0438\u0435 \u043e\u0431\u0435\u0449\u0430\u043d\u0438\u044f \u0432\u0441\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043a \u043a\u043e\u043d\u0446\u0443 \u0433\u043e\u0434\u0430 \u0432\u0440\u044f\u0434 \u043b\u0438 \u0431\u0443\u0434\u0443\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u044b.\n\n7. Defiant \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e CVE-2024-10924 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 9,8) \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Really Simple Security \u0434\u043b\u044f WordPress, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043d\u0443\u0442\u044c 4 \u043c\u043b\u043d. \u0441\u0430\u0439\u0442\u043e\u0432 \u0440\u0438\u0441\u043a\u0443 \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0432 2FA.", "url": "https://t.me/true_secator/6438"}, {"timestamp": "2024-11-20T08:11:06Z", "date_only": false, "value": "2024-11-20T08:11:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ptescalator/163", "record": "CVE-2024-43629", "field": "creation_timestamp", "uuid": "3c0992a9-02a6-4420-b3b6-d79c490b597d", "content": "\ud83d\ude0f \u042d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u043e \u0434\u043b\u044f Escalator \u043a\u043e\u043c\u0430\u043d\u0434\u0430 ESC-VR \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043e \u0434\u0435\u0442\u0430\u043b\u044f\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2024-43629), \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u044b \u043d\u0430\u0448\u043b\u0438 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Desktop Window Manage, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u0430\u0441\u044c \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 dwmcore.dll \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 CPrimitiveGroupDrawListBrush::IsColorConversionRequired (\u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442 1). \u041f\u0440\u0438 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u043b\u0430\u0441\u0441\u043e\u0432 \u0421SurfaceBrush \u0438 CPrimitiveGroup \u043e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0434\u043e\u0441\u0442\u0438\u0447\u044c \u043a\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442 \u0432\u044b\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430 \u043a\u043b\u0430\u0441\u0441\u0430 CDrawListBitmap \u0432 \u043c\u0430\u0441\u0441\u0438\u0432\u0435 drawListBitmap_Vec, \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u043c\u0441\u044f, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0432 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0435 \u043a\u043b\u0430\u0441\u0441\u0430 CPrimitiveGroupDrawListGenerator. \n\n\u041f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u043c \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441\u0432\u043e\u0439\u0441\u0442\u0432 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 \u0421SurfaceBrush \u0438 CPrimitiveGroup \u043c\u043e\u0433\u043b\u0430 \u0441\u043b\u043e\u0436\u0438\u0442\u044c\u0441\u044f \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f, \u043f\u0440\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c drawListBitmap_Vec \u0431\u044b\u043b \u0431\u044b \u0440\u0430\u0432\u0435\u043d \u043d\u0443\u043b\u044e \u0438 \u0432\u0441\u0435 \u0432\u044b\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u044f \u0441\u0432\u0435\u043b\u0438\u0441\u044c \u0431\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u043a \u0440\u0430\u0431\u043e\u0442\u0435 \u0441 \u0438\u043d\u0434\u0435\u043a\u0441\u043e\u043c, \u0430 \u0435\u0433\u043e \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u0431\u044b \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0438 \u0438\u043c\u0435\u043b\u043e \u0440\u0430\u0437\u043c\u0435\u0440 DWORD. \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0431\u044b \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c \u043d\u0430 \u043e\u0431\u044a\u0435\u043a\u0442 CDrawListBitmap (\u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442 2).\n\n#escvr #win #cve\n@ptescalator", "url": "https://t.me/ptescalator/163", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-12-22T23:00:00Z", "date_only": false, "value": "2024-12-22T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3445", "record": "WID-SEC-W-2024-3445", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2025-01-05T23:00:00Z", "date_only": false, "value": "2025-01-05T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3445", "record": "WID-SEC-W-2024-3445", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2025-01-05T23:00:00Z", "date_only": false, "value": "2025-01-05T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3445", "record": "WID-SEC-W-2024-3445", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2025-01-06T09:02:22.154Z", "date_only": false, "value": "2025-01-06T09:02:22.154+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3445", "record": "WID-SEC-W-2024-3445", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2025-01-09T16:37:05.975Z", "date_only": false, "value": "2025-01-09T16:37:05.975Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-43629", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-07-08T15:41:33.990Z", "date_only": false, "value": "2025-07-08T15:41:33.990Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-43629", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-07-08T15:41:33.990Z", "date_only": false, "value": "2025-07-08T15:41:33.990Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "CVE-2024-43629", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-01-06T16:33:33.624Z", "date_only": false, "value": "2026-01-06T16:33:33.624Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-43629", "record": "MSRC_CVE-2024-43629", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-06-17T07:51:26.263Z", "date_only": false, "value": "2026-06-17T07:51:26.263", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-43629", "record": "FKIE_CVE-2024-43629", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-07-25T15:00:19.378Z", "date_only": false, "value": "2026-07-25T15:00:19.378254Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/381", "record": "CVE-2024-43629", "field": "creation_timestamp", "uuid": "cabcc6b6-4cee-4453-a342-f92f4563cc08", "url": "https://t.me/ZerodayAlert/381"}, {"timestamp": "2026-07-26T00:00:43.704Z", "date_only": false, "value": "2026-07-26T00:00:43.704509Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/381", "record": "CVE-2024-43629", "field": "creation_timestamp", "uuid": "853433b5-ead6-4d38-a1af-81e63e0bb749", "url": "https://t.me/ZerodayAlert/381"}, {"timestamp": "2026-08-06T06:00:05.273Z", "date_only": false, "value": "2026-08-06T06:00:05.273041Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/381", "record": "CVE-2024-43629", "field": "creation_timestamp", "uuid": "79f675d2-f898-40ce-a13c-9d53be450da0", "url": "https://t.me/ZerodayAlert/381"}, {"timestamp": "2026-08-07T00:25:57.164Z", "date_only": false, "value": "2026-08-07T00:25:57.164319Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/381", "record": "CVE-2024-43629", "field": "creation_timestamp", "uuid": "553be2b3-e58f-4da9-84e3-ea9b31ac7e43", "url": "https://t.me/ZerodayAlert/381"}], "metrics": {"as_of": "2026-11-12T01:40:30.330Z", "anchors": {"origin": {"timestamp": "2024-11-12T08:00:00Z", "date_only": false, "value": "2024-11-12T08:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-43629", "record": "MSRC_CVE-2024-43629", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2024-11-12T08:00:00Z", "date_only": false, "value": "2024-11-12T08:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-43629", "record": "MSRC_CVE-2024-43629", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": {"timestamp": "2024-11-20T08:11:06Z", "date_only": false, "value": "2024-11-20T08:11:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ptescalator/163", "record": "CVE-2024-43629", "field": "creation_timestamp", "uuid": "3c0992a9-02a6-4420-b3b6-d79c490b597d", "content": "\ud83d\ude0f \u042d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u043e \u0434\u043b\u044f Escalator \u043a\u043e\u043c\u0430\u043d\u0434\u0430 ESC-VR \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043e \u0434\u0435\u0442\u0430\u043b\u044f\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2024-43629), \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u044b \u043d\u0430\u0448\u043b\u0438 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Desktop Window Manage, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u0430\u0441\u044c \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 dwmcore.dll \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 CPrimitiveGroupDrawListBrush::IsColorConversionRequired (\u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442 1). \u041f\u0440\u0438 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u043b\u0430\u0441\u0441\u043e\u0432 \u0421SurfaceBrush \u0438 CPrimitiveGroup \u043e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0434\u043e\u0441\u0442\u0438\u0447\u044c \u043a\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442 \u0432\u044b\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430 \u043a\u043b\u0430\u0441\u0441\u0430 CDrawListBitmap \u0432 \u043c\u0430\u0441\u0441\u0438\u0432\u0435 drawListBitmap_Vec, \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u043c\u0441\u044f, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0432 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0435 \u043a\u043b\u0430\u0441\u0441\u0430 CPrimitiveGroupDrawListGenerator. \n\n\u041f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u043c \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441\u0432\u043e\u0439\u0441\u0442\u0432 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 \u0421SurfaceBrush \u0438 CPrimitiveGroup \u043c\u043e\u0433\u043b\u0430 \u0441\u043b\u043e\u0436\u0438\u0442\u044c\u0441\u044f \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f, \u043f\u0440\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c drawListBitmap_Vec \u0431\u044b\u043b \u0431\u044b \u0440\u0430\u0432\u0435\u043d \u043d\u0443\u043b\u044e \u0438 \u0432\u0441\u0435 \u0432\u044b\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u044f \u0441\u0432\u0435\u043b\u0438\u0441\u044c \u0431\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u043a \u0440\u0430\u0431\u043e\u0442\u0435 \u0441 \u0438\u043d\u0434\u0435\u043a\u0441\u043e\u043c, \u0430 \u0435\u0433\u043e \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u0431\u044b \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0438 \u0438\u043c\u0435\u043b\u043e \u0440\u0430\u0437\u043c\u0435\u0440 DWORD. \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0431\u044b \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c \u043d\u0430 \u043e\u0431\u044a\u0435\u043a\u0442 CDrawListBitmap (\u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442 2).\n\n#escvr #win #cve\n@ptescalator", "url": "https://t.me/ptescalator/163", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": {"timestamp": "2024-11-12T08:00:00Z", "date_only": false, "value": "2024-11-12T08:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-43629", "record": "MSRC_CVE-2024-43629", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 691866.0, "hours": 192.185, "days": 8.007708333333333, "min_seconds": 691866.0, "max_seconds": 691866.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-11-12T08:00:00Z", "date_only": false, "value": "2024-11-12T08:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-43629", "record": "MSRC_CVE-2024-43629", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2024-11-20T08:11:06Z", "date_only": false, "value": "2024-11-20T08:11:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ptescalator/163", "record": "CVE-2024-43629", "field": "creation_timestamp", "uuid": "3c0992a9-02a6-4420-b3b6-d79c490b597d", "content": "\ud83d\ude0f \u042d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u043e \u0434\u043b\u044f Escalator \u043a\u043e\u043c\u0430\u043d\u0434\u0430 ESC-VR \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043e \u0434\u0435\u0442\u0430\u043b\u044f\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2024-43629), \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u044b \u043d\u0430\u0448\u043b\u0438 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Desktop Window Manage, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u0430\u0441\u044c \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 dwmcore.dll \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 CPrimitiveGroupDrawListBrush::IsColorConversionRequired (\u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442 1). \u041f\u0440\u0438 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u043b\u0430\u0441\u0441\u043e\u0432 \u0421SurfaceBrush \u0438 CPrimitiveGroup \u043e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0434\u043e\u0441\u0442\u0438\u0447\u044c \u043a\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442 \u0432\u044b\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430 \u043a\u043b\u0430\u0441\u0441\u0430 CDrawListBitmap \u0432 \u043c\u0430\u0441\u0441\u0438\u0432\u0435 drawListBitmap_Vec, \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u043c\u0441\u044f, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0432 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0435 \u043a\u043b\u0430\u0441\u0441\u0430 CPrimitiveGroupDrawListGenerator. \n\n\u041f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u043c \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441\u0432\u043e\u0439\u0441\u0442\u0432 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 \u0421SurfaceBrush \u0438 CPrimitiveGroup \u043c\u043e\u0433\u043b\u0430 \u0441\u043b\u043e\u0436\u0438\u0442\u044c\u0441\u044f \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f, \u043f\u0440\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c drawListBitmap_Vec \u0431\u044b\u043b \u0431\u044b \u0440\u0430\u0432\u0435\u043d \u043d\u0443\u043b\u044e \u0438 \u0432\u0441\u0435 \u0432\u044b\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u044f \u0441\u0432\u0435\u043b\u0438\u0441\u044c \u0431\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u043a \u0440\u0430\u0431\u043e\u0442\u0435 \u0441 \u0438\u043d\u0434\u0435\u043a\u0441\u043e\u043c, \u0430 \u0435\u0433\u043e \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u0431\u044b \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0438 \u0438\u043c\u0435\u043b\u043e \u0440\u0430\u0437\u043c\u0435\u0440 DWORD. \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0431\u044b \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c \u043d\u0430 \u043e\u0431\u044a\u0435\u043a\u0442 CDrawListBitmap (\u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442 2).\n\n#escvr #win #cve\n@ptescalator", "url": "https://t.me/ptescalator/163", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": false, "missing": ["start"]}, "disclosure_to_patch": {"available": true, "seconds": 0.0, "hours": 0.0, "days": 0.0, "min_seconds": 0.0, "max_seconds": 0.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-11-12T08:00:00Z", "date_only": false, "value": "2024-11-12T08:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-43629", "record": "MSRC_CVE-2024-43629", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2024-11-12T08:00:00Z", "date_only": false, "value": "2024-11-12T08:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-43629", "record": "MSRC_CVE-2024-43629", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "time_unpatched": {"available": true, "seconds": 0.0, "hours": 0.0, "days": 0.0, "min_seconds": 0.0, "max_seconds": 0.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-11-12T08:00:00Z", "date_only": false, "value": "2024-11-12T08:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-43629", "record": "MSRC_CVE-2024-43629", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2024-11-12T08:00:00Z", "date_only": false, "value": "2024-11-12T08:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-43629", "record": "MSRC_CVE-2024-43629", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": -691866.0, "hours": -192.185, "days": -8.007708333333333, "min_seconds": -691866.0, "max_seconds": -691866.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2024-11-20T08:11:06Z", "date_only": false, "value": "2024-11-20T08:11:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ptescalator/163", "record": "CVE-2024-43629", "field": "creation_timestamp", "uuid": "3c0992a9-02a6-4420-b3b6-d79c490b597d", "content": "\ud83d\ude0f \u042d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u043e \u0434\u043b\u044f Escalator \u043a\u043e\u043c\u0430\u043d\u0434\u0430 ESC-VR \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043e \u0434\u0435\u0442\u0430\u043b\u044f\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2024-43629), \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u044b \u043d\u0430\u0448\u043b\u0438 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Desktop Window Manage, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u0430\u0441\u044c \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 dwmcore.dll \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 CPrimitiveGroupDrawListBrush::IsColorConversionRequired (\u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442 1). \u041f\u0440\u0438 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u043b\u0430\u0441\u0441\u043e\u0432 \u0421SurfaceBrush \u0438 CPrimitiveGroup \u043e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0434\u043e\u0441\u0442\u0438\u0447\u044c \u043a\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442 \u0432\u044b\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430 \u043a\u043b\u0430\u0441\u0441\u0430 CDrawListBitmap \u0432 \u043c\u0430\u0441\u0441\u0438\u0432\u0435 drawListBitmap_Vec, \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u043c\u0441\u044f, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0432 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0435 \u043a\u043b\u0430\u0441\u0441\u0430 CPrimitiveGroupDrawListGenerator. \n\n\u041f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u043c \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441\u0432\u043e\u0439\u0441\u0442\u0432 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 \u0421SurfaceBrush \u0438 CPrimitiveGroup \u043c\u043e\u0433\u043b\u0430 \u0441\u043b\u043e\u0436\u0438\u0442\u044c\u0441\u044f \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f, \u043f\u0440\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c drawListBitmap_Vec \u0431\u044b\u043b \u0431\u044b \u0440\u0430\u0432\u0435\u043d \u043d\u0443\u043b\u044e \u0438 \u0432\u0441\u0435 \u0432\u044b\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u044f \u0441\u0432\u0435\u043b\u0438\u0441\u044c \u0431\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u043a \u0440\u0430\u0431\u043e\u0442\u0435 \u0441 \u0438\u043d\u0434\u0435\u043a\u0441\u043e\u043c, \u0430 \u0435\u0433\u043e \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u0431\u044b \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0438 \u0438\u043c\u0435\u043b\u043e \u0440\u0430\u0437\u043c\u0435\u0440 DWORD. \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0431\u044b \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c \u043d\u0430 \u043e\u0431\u044a\u0435\u043a\u0442 CDrawListBitmap (\u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442 2).\n\n#escvr #win #cve\n@ptescalator", "url": "https://t.me/ptescalator/163", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2024-11-12T08:00:00Z", "date_only": false, "value": "2024-11-12T08:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-43629", "record": "MSRC_CVE-2024-43629", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}}}