{"metadata": {"vulnerability": "CVE-2024-43639", "count": 50, "kinds": {"milestone": 9, "sighting": 16, "kev": 0, "other": 25}}, "data": [{"timestamp": "2024-08-14T01:08:33.556Z", "date_only": false, "value": "2024-08-14T01:08:33.556Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-43639", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-11-12T00:00:00Z", "date_only": true, "value": "2024-11-12", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0975", "record": "CERTFR-2024-AVI-0975", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2024-11-12T08:00:00Z", "date_only": false, "value": "2024-11-12T08:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-43639", "record": "MSRC_CVE-2024-43639", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2024-11-12T08:00:00Z", "date_only": false, "value": "2024-11-12T08:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2024-43639", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-11-12T08:00:00Z", "date_only": false, "value": "2024-11-12T08:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-43639", "record": "MSRC_CVE-2024-43639", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-11-12T08:00:00Z", "date_only": false, "value": "2024-11-12T08:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-43639", "record": "MSRC_CVE-2024-43639", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-11-12T17:54:04.563Z", "date_only": false, "value": "2024-11-12T17:54:04.563Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-43639", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-11-12T18:15:33Z", "date_only": false, "value": "2024-11-12T18:15:33Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-2F2H-73PP-4P79", "record": "GHSA-2F2H-73PP-4P79", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2024-11-12T18:15:33.267Z", "date_only": false, "value": "2024-11-12T18:15:33.267", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-43639", "record": "FKIE_CVE-2024-43639", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-11-12T18:26:35Z", "date_only": false, "value": "2024-11-12T18:26:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.thezdi.com/blog/2024/11/12/the-november-2024-security-update-review", "record": "CVE-2024-43639", "field": "creation_timestamp", "uuid": "850a9c1e-3db9-42c9-9a2c-05e00cef26a6", "url": "https://www.thezdi.com/blog/2024/11/12/the-november-2024-security-update-review"}, {"timestamp": "2024-11-12T18:30:59Z", "date_only": false, "value": "2024-11-12T18:30:59Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2F2H-73PP-4P79", "record": "GHSA-2F2H-73PP-4P79", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-11-12T18:30:59Z", "date_only": false, "value": "2024-11-12T18:30:59Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-2F2H-73PP-4P79", "record": "GHSA-2F2H-73PP-4P79", "field": "modified", "linked_record": true}, {"timestamp": "2024-11-12T18:53:07.914Z", "date_only": false, "value": "2024-11-12T18:53:07.914094Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2024-0434", "record": "NCSC-2024-0434", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2024-11-12T18:53:07.914Z", "date_only": false, "value": "2024-11-12T18:53:07.914094Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2024-0434", "record": "NCSC-2024-0434", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-11-12T18:53:07.914Z", "date_only": false, "value": "2024-11-12T18:53:07.914094Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2024-0434", "record": "NCSC-2024-0434", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2024-11-12T19:55:59.821Z", "date_only": false, "value": "2024-11-12T19:55:59.821392Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113471740875187261", "record": "CVE-2024-43639", "field": "creation_timestamp", "uuid": "ef36fb0d-2aa5-4e3b-b467-7155f1676ee1", "url": "https://infosec.exchange/users/cve/statuses/113471740875187261"}, {"timestamp": "2024-11-12T23:00:00Z", "date_only": false, "value": "2024-11-12T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3445", "record": "WID-SEC-W-2024-3445", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2024-11-12T23:00:00Z", "date_only": false, "value": "2024-11-12T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3445", "record": "WID-SEC-W-2024-3445", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-11-12T23:00:00Z", "date_only": false, "value": "2024-11-12T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3445", "record": "WID-SEC-W-2024-3445", "field": "vulnerabilities.26.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-11-13T00:00:00Z", "date_only": false, "value": "2024-11-13T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0975", "record": "CERTFR-2024-AVI-0975", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2024-11-13T00:00:00Z", "date_only": false, "value": "2024-11-13T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0975", "record": "CERTFR-2024-AVI-0975", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-11-13T00:00:00Z", "date_only": false, "value": "2024-11-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0975", "record": "CERTFR-2024-AVI-0975", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2024-11-13T08:00:00Z", "date_only": false, "value": "2024-11-13T08:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-43639", "record": "MSRC_CVE-2024-43639", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2024-11-13T09:23:51.626Z", "date_only": false, "value": "2024-11-13T09:23:51.626497Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/patchnow24x7/statuses/113474917479791705", "record": "CVE-2024-43639", "field": "creation_timestamp", "uuid": "5c12c236-6ecd-4554-8207-4a7486cce58d", "url": "https://infosec.exchange/users/patchnow24x7/statuses/113474917479791705"}, {"timestamp": "2024-11-13T10:53:26Z", "date_only": false, "value": "2024-11-13T10:53:26.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/kasperskyb2b/1499", "record": "CVE-2024-43639", "field": "creation_timestamp", "uuid": "b802cabd-3404-49b7-894a-22fb81f715ea", "content": "\ud83d\udcbb \u041d\u043e\u044f\u0431\u0440\u044c\u0441\u043a\u0438\u0439 \u0432\u0442\u043e\u0440\u043d\u0438\u043a \u043f\u0430\u0442\u0447\u0435\u0439: \u0438\u0434\u0451\u043c \u043d\u0430 \u0440\u0435\u043a\u043e\u0440\u0434?\n\n\u0421\u0432\u0435\u0436\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Microsoft \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u0435\u0442 92 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0434\u0432\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0432\u0436\u0438\u0432\u0443\u044e \u0438 \u0447\u0435\u0442\u044b\u0440\u0435 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0451\u043d\u043d\u044b\u0435 \u0434\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f. \u0427\u0435\u0442\u044b\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u043c\u0435\u044e\u0442 \u0441\u0442\u0430\u0442\u0443\u0441 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445. 52 \u0434\u0435\u0444\u0435\u043a\u0442\u0430 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043b\u0438 \u043a  RCE, 26 \u2014 \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439,  1 \u2014 \u043a \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u0436\u0435 \u0435\u0441\u0442\u044c 4 DoS \u0438 2 \u043e\u0431\u0445\u043e\u0434\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0412 \u0446\u0435\u043b\u043e\u043c \u0437\u0430 \u044d\u0442\u043e\u0442 \u0433\u043e\u0434 \u0420\u0435\u0434\u043c\u043e\u043d\u0434 \u0432\u044b\u043a\u0430\u0442\u0438\u043b \u0443\u0436\u0435 \u043f\u043e\u0447\u0442\u0438 950 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0442\u0430\u043a \u0447\u0442\u043e \u043f\u043e\u0441\u043b\u0435 \u0434\u0435\u043a\u0430\u0431\u0440\u044c\u0441\u043a\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0433\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u043a\u043e\u0440\u0434\u043d\u044b\u043c \u043f\u043e \u0447\u0438\u0441\u043b\u0443 \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0445 \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432.\n\n\u0412 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f:\nCVE-2024-43451 (CVSS 6.5) \u2014 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u043f\u0440\u0438\u0432\u0435\u0442 \u043e\u0442 Internet Explorer, \u0443\u0442\u0435\u0447\u043a\u0430 \u0445\u044d\u0448\u0435\u0439 NTLMv2 \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 MSHTML. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0434\u043e\u043b\u0436\u0435\u043d \u043a\u043b\u0438\u043a\u043d\u0443\u0442\u044c \u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b (\u043d\u0435 \u043e\u0442\u043a\u0440\u044b\u0442\u044c, \u0430 \u043f\u0440\u043e\u0441\u0442\u043e \u0432\u044b\u0431\u0440\u0430\u0442\u044c \u0435\u0433\u043e).\nCVE-2024-49039 (CVSS 8.8)\u2014 \u043f\u043e\u0431\u0435\u0433 \u0438\u0437 AppContainer,  \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e Medium integrity.\n\u041f\u0440\u043e \u043e\u0431\u0430 \u0434\u0435\u0444\u0435\u043a\u0442\u0430 \u043f\u043e\u043a\u0430 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u043a\u0442\u043e \u0438\u043c\u0435\u043d\u043d\u043e \u0438 \u043a\u0430\u043a \u0438\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b, \u043d\u043e \u0432\u0442\u043e\u0440\u043e\u0439 \u0431\u044b\u043b \u043d\u0430\u0439\u0434\u0435\u043d \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u043c\u0438 \u0433\u0440\u0443\u043f\u043f\u0430\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043e\u0434\u043d\u0430 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u2014 Google TAG, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0441\u0432\u0438\u0434\u0435\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u043e\u0431 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0448\u0438\u0440\u043e\u043a\u043e\u043c \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0438 \u044d\u0442\u043e\u0433\u043e \u0437\u0438\u0440\u043e\u0434\u0435\u044f \u043a\u0430\u043a\u0438\u043c\u0438-\u0442\u043e \u043a\u0440\u0443\u043f\u043d\u044b\u043c\u0438 APT.  \n\n\u0420\u0430\u0437\u0433\u043b\u0430\u0448\u0451\u043d\u043d\u044b\u043c\u0438 Microsoft \u0441\u0447\u0438\u0442\u0430\u0435\u0442\nCVE-2024-49019 (CVSS 7.8) EoP \u0432 Active Directory Certificate Service, \u043e\u043d\u0430 \u0436\u0435 EKUwu.\nCVE-2024-49040 (CVSS 7.5) spoofing \u0432 Exchange. \u041f\u0438\u0441\u044c\u043c\u0430 \u0441 \u043d\u0435\u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u043c \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u043c P2 FROM \u043c\u043e\u0433\u0443\u0442 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0430\u0442\u044c\u0441\u044f \u0441 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u043c \u0430\u0434\u0440\u0435\u0441\u043e\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044f. Microsoft \u0441\u0447\u0438\u0442\u0430\u0435\u0442, \u0447\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u043e\u0433\u043e \u0434\u0435\u0444\u0435\u043a\u0442\u0430 \u043d\u0435 \u0437\u0430 \u0433\u043e\u0440\u0430\u043c\u0438 \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \n\n\u0412\u043f\u0440\u043e\u0447\u0435\u043c, ZDI \u0441\u0447\u0438\u0442\u0430\u044e\u0442 \u0442\u0430\u043a\u0436\u0435 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u043c\u0438 \u0435\u0449\u0451 \u0434\u0432\u0430 CVE \u0438\u0437 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f:\n\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e RCE \u0432 .NET \u0438 VSCode (CVE-2024-43498, CVSS 9.8) \u0438 RCE \u0432 OpenSSL ( CVE-2024-5535, CVSS 9.2).\n\n\u0421\u0440\u0435\u0434\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u0431\u044b\u043b\u0438 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u044b, \u043c\u0443\u0440\u0430\u0448\u043a\u0438 \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 CVE-2024-43639, RCE \u0432 Kerberos \u0441\u043e \u0441\u043a\u0440\u043e\u043c\u043d\u044b\u043c CVSS 9.8 \u2014 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0432\u0441\u0435 Windows Server, \u043a\u043e\u0434 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0441 \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u0430 \u0432\u043e\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043d\u0435 \u043d\u0443\u0436\u043d\u043e \u0434\u0430\u0436\u0435 \u0431\u044b\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c. \u041f\u0440\u0430\u0432\u0434\u0430, \u0420\u0435\u0434\u043c\u043e\u043d\u0434 \u043e\u0431\u043d\u0430\u0434\u0451\u0436\u0438\u0432\u0430\u0435\u0442, \u0447\u0442\u043e exploitation less likely.  \n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #Microsoft @\u041f2\u0422", "url": "https://t.me/kasperskyb2b/1499"}, {"timestamp": "2024-11-15T07:43:01.174Z", "date_only": false, "value": "2024-11-15T07:43:01.174603Z", "kind": "sighting", "label": "Seen", "source": "Source not specified", "record": "cve-2024-43639", "field": "creation_timestamp", "uuid": "ded234e4-18f8-4a8b-b40a-12ab13d27ee5"}, {"timestamp": "2024-11-18T08:00:00Z", "date_only": false, "value": "2024-11-18T08:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-43639", "record": "MSRC_CVE-2024-43639", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2024-11-18T08:00:00Z", "date_only": false, "value": "2024-11-18T08:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-43639", "record": "MSRC_CVE-2024-43639", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2024-11-21T05:25:04.986Z", "date_only": false, "value": "2024-11-21T05:25:04.986674Z", "kind": "sighting", "label": "Seen", "source": "https://social.cologne/users/pterlisten/statuses/113519277048451096", "record": "CVE-2024-43639", "field": "creation_timestamp", "uuid": "4eb3061d-1a1b-4a7c-a2c0-e28fb36f9054", "url": "https://social.cologne/users/pterlisten/statuses/113519277048451096"}, {"timestamp": "2024-11-22T04:55:08.156Z", "date_only": false, "value": "2024-11-22T04:55:08.156370Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-43639", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-11-22T04:55:08.156Z", "date_only": false, "value": "2024-11-22T04:55:08.156370Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-43639", "record": "FKIE_CVE-2024-43639", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2024-12-22T23:00:00Z", "date_only": false, "value": "2024-12-22T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3445", "record": "WID-SEC-W-2024-3445", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2025-01-05T23:00:00Z", "date_only": false, "value": "2025-01-05T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3445", "record": "WID-SEC-W-2024-3445", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2025-01-05T23:00:00Z", "date_only": false, "value": "2025-01-05T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3445", "record": "WID-SEC-W-2024-3445", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2025-01-06T09:02:22.154Z", "date_only": false, "value": "2025-01-06T09:02:22.154+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3445", "record": "WID-SEC-W-2024-3445", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2025-01-09T16:34:33.376Z", "date_only": false, "value": "2025-01-09T16:34:33.376Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-43639", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-04T16:02:27Z", "date_only": false, "value": "2025-03-04T16:02:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.thezdi.com/blog/2025/3/3/cve-2024-43639", "record": "CVE-2024-43639", "field": "creation_timestamp", "uuid": "010775c8-8962-457b-9a73-8f39e04ae2d0", "url": "https://www.thezdi.com/blog/2025/3/3/cve-2024-43639"}, {"timestamp": "2025-03-04T17:04:51.107Z", "date_only": false, "value": "2025-03-04T17:04:51.107326Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thezdi.bsky.social/post/3ljkx4mu7jc2h", "record": "CVE-2024-43639", "field": "creation_timestamp", "uuid": "6c463dfd-4a90-4723-aa88-6e9aff576550", "url": "https://bsky.app/profile/thezdi.bsky.social/post/3ljkx4mu7jc2h"}, {"timestamp": "2025-03-04T20:22:39.700Z", "date_only": false, "value": "2025-03-04T20:22:39.700026Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3ljlc6fo3dd2t", "record": "CVE-2024-43639", "field": "creation_timestamp", "uuid": "c24951f7-42fa-48e7-b058-28886e03a92c", "url": "https://bsky.app/profile/buherator.bsky.social/post/3ljlc6fo3dd2t"}, {"timestamp": "2025-03-04T23:01:43.968Z", "date_only": false, "value": "2025-03-04T23:01:43.968850Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3ljll2tvq532t", "record": "CVE-2024-43639", "field": "creation_timestamp", "uuid": "a38c8785-870f-4abb-a65d-4fc019dbc72d", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3ljll2tvq532t"}, {"timestamp": "2025-03-05T13:48:31Z", "date_only": false, "value": "2025-03-05T13:48:31.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberBulletin/2486", "record": "CVE-2024-43639", "field": "creation_timestamp", "uuid": "728c815a-4ea2-4cba-b3b1-00efc6e48f20", "content": "\u26a1CVE-2024-43639: Remote Code Execution in Microsoft Windows KDC Proxy.\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/2486"}, {"timestamp": "2025-03-06T12:59:52Z", "date_only": false, "value": "2025-03-06T12:59:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/11893", "record": "CVE-2024-43639", "field": "creation_timestamp", "uuid": "aef8c4f2-949b-4d4a-bc2e-fc4ee382d7db", "content": "#exploit\n1. SSHNuke Exploit\nhttps://blog.doyensec.com/2025/03/04/exploitable-sshd.html\n\n2. CVE-2024-43639:\nRCE in Microsoft Windows KDC Proxy\nhttps://www.zerodayinitiative.com/blog/2025/3/3/cve-2024-43639\n\n3. Private key extraction in ECDSA upon signing a malformed input\u00a0\nhttps://github.com/indutny/elliptic/security/advisories/GHSA-vjh7-7g9h-fjfh", "url": "https://t.me/CyberSecurityTechnologies/11893", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-03-07T05:49:30Z", "date_only": false, "value": "2025-03-07T05:49:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ton618cyber/7140", "record": "CVE-2024-43639", "field": "creation_timestamp", "uuid": "f86dc604-ea9d-4e21-913a-ae7a34e0b6b8", "content": "#exploit\n1. SSHNuke Exploit\nhttps://blog.doyensec.com/2025/03/04/exploitable-sshd.html\n\n2. CVE-2024-43639:\nRCE in Microsoft Windows KDC Proxy\nhttps://www.zerodayinitiative.com/blog/2025/3/3/cve-2024-43639\n\n3. Private key extraction in ECDSA upon signing a malformed input\u00a0\nhttps://github.com/indutny/elliptic/security/advisories/GHSA-vjh7-7g9h-fjfh", "url": "https://t.me/ton618cyber/7140", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-03-07T05:49:31Z", "date_only": false, "value": "2025-03-07T05:49:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ton618cyber/2690", "record": "CVE-2024-43639", "field": "creation_timestamp", "uuid": "f68a6be2-380b-4899-91fa-619be7806066", "content": "#exploit\n1. SSHNuke Exploit\nhttps://blog.doyensec.com/2025/03/04/exploitable-sshd.html\n\n2. CVE-2024-43639:\nRCE in Microsoft Windows KDC Proxy\nhttps://www.zerodayinitiative.com/blog/2025/3/3/cve-2024-43639\n\n3. Private key extraction in ECDSA upon signing a malformed input\u00a0\nhttps://github.com/indutny/elliptic/security/advisories/GHSA-vjh7-7g9h-fjfh", "url": "https://t.me/ton618cyber/2690", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-07-08T15:41:36.468Z", "date_only": false, "value": "2025-07-08T15:41:36.468Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-43639", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-07-08T15:41:36.468Z", "date_only": false, "value": "2025-07-08T15:41:36.468Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "CVE-2024-43639", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-08-18T18:31:00Z", "date_only": false, "value": "2025-08-18T18:31:00.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/fc16b923-3a13-4e9d-9aac-10a57cac12c7", "record": "CVE-2024-43639", "field": "creation_timestamp", "uuid": "a2c8405f-b604-46ff-8ffb-63b65c8f4d87"}, {"timestamp": "2026-01-06T16:33:33.627Z", "date_only": false, "value": "2026-01-06T16:33:33.627Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-43639", "record": "MSRC_CVE-2024-43639", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-06-17T07:51:27.760Z", "date_only": false, "value": "2026-06-17T07:51:27.760", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-43639", "record": "FKIE_CVE-2024-43639", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-06-21T21:37:06.728Z", "date_only": false, "value": "2026-06-21T21:37:06.728076Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3motddwaelt2m", "record": "CVE-2024-43639", "field": "creation_timestamp", "uuid": "d4fc3676-a9f6-413d-a0fc-ca7e0014f076", "url": "https://bsky.app/profile/cyberhub.blog/post/3motddwaelt2m"}], "metrics": {"as_of": "2026-11-11T22:35:51.508Z", "anchors": {"origin": {"timestamp": "2024-11-12T08:00:00Z", "date_only": false, "value": "2024-11-12T08:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-43639", "record": "MSRC_CVE-2024-43639", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2024-11-12T08:00:00Z", "date_only": false, "value": "2024-11-12T08:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-43639", "record": "MSRC_CVE-2024-43639", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": {"timestamp": "2025-03-06T12:59:52Z", "date_only": false, "value": "2025-03-06T12:59:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/11893", "record": "CVE-2024-43639", "field": "creation_timestamp", "uuid": "aef8c4f2-949b-4d4a-bc2e-fc4ee382d7db", "content": "#exploit\n1. SSHNuke Exploit\nhttps://blog.doyensec.com/2025/03/04/exploitable-sshd.html\n\n2. CVE-2024-43639:\nRCE in Microsoft Windows KDC Proxy\nhttps://www.zerodayinitiative.com/blog/2025/3/3/cve-2024-43639\n\n3. Private key extraction in ECDSA upon signing a malformed input\u00a0\nhttps://github.com/indutny/elliptic/security/advisories/GHSA-vjh7-7g9h-fjfh", "url": "https://t.me/CyberSecurityTechnologies/11893", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": {"timestamp": "2024-11-12T08:00:00Z", "date_only": false, "value": "2024-11-12T08:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-43639", "record": "MSRC_CVE-2024-43639", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 9867592.0, "hours": 2740.9977777777776, "days": 114.20824074074073, "min_seconds": 9867592.0, "max_seconds": 9867592.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-11-12T08:00:00Z", "date_only": false, "value": "2024-11-12T08:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-43639", "record": "MSRC_CVE-2024-43639", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2025-03-06T12:59:52Z", "date_only": false, "value": "2025-03-06T12:59:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/11893", "record": "CVE-2024-43639", "field": "creation_timestamp", "uuid": "aef8c4f2-949b-4d4a-bc2e-fc4ee382d7db", "content": "#exploit\n1. SSHNuke Exploit\nhttps://blog.doyensec.com/2025/03/04/exploitable-sshd.html\n\n2. CVE-2024-43639:\nRCE in Microsoft Windows KDC Proxy\nhttps://www.zerodayinitiative.com/blog/2025/3/3/cve-2024-43639\n\n3. Private key extraction in ECDSA upon signing a malformed input\u00a0\nhttps://github.com/indutny/elliptic/security/advisories/GHSA-vjh7-7g9h-fjfh", "url": "https://t.me/CyberSecurityTechnologies/11893", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": false, "missing": ["start"]}, "disclosure_to_patch": {"available": true, "seconds": 0.0, "hours": 0.0, "days": 0.0, "min_seconds": 0.0, "max_seconds": 0.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-11-12T08:00:00Z", "date_only": false, "value": "2024-11-12T08:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-43639", "record": "MSRC_CVE-2024-43639", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2024-11-12T08:00:00Z", "date_only": false, "value": "2024-11-12T08:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-43639", "record": "MSRC_CVE-2024-43639", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "time_unpatched": {"available": true, "seconds": 0.0, "hours": 0.0, "days": 0.0, "min_seconds": 0.0, "max_seconds": 0.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-11-12T08:00:00Z", "date_only": false, "value": "2024-11-12T08:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-43639", "record": "MSRC_CVE-2024-43639", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2024-11-12T08:00:00Z", "date_only": false, "value": "2024-11-12T08:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-43639", "record": "MSRC_CVE-2024-43639", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": -9867592.0, "hours": -2740.9977777777776, "days": -114.20824074074073, "min_seconds": -9867592.0, "max_seconds": -9867592.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2025-03-06T12:59:52Z", "date_only": false, "value": "2025-03-06T12:59:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/11893", "record": "CVE-2024-43639", "field": "creation_timestamp", "uuid": "aef8c4f2-949b-4d4a-bc2e-fc4ee382d7db", "content": "#exploit\n1. SSHNuke Exploit\nhttps://blog.doyensec.com/2025/03/04/exploitable-sshd.html\n\n2. CVE-2024-43639:\nRCE in Microsoft Windows KDC Proxy\nhttps://www.zerodayinitiative.com/blog/2025/3/3/cve-2024-43639\n\n3. Private key extraction in ECDSA upon signing a malformed input\u00a0\nhttps://github.com/indutny/elliptic/security/advisories/GHSA-vjh7-7g9h-fjfh", "url": "https://t.me/CyberSecurityTechnologies/11893", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2024-11-12T08:00:00Z", "date_only": false, "value": "2024-11-12T08:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-43639", "record": "MSRC_CVE-2024-43639", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}}}