{"metadata": {"vulnerability": "cve-2024-26218", "count": 39, "kinds": {"milestone": 8, "sighting": 5, "kev": 0, "other": 26}}, "data": [{"timestamp": "2024-02-15T00:57:49.354Z", "date_only": false, "value": "2024-02-15T00:57:49.354Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-26218", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-02-15T06:02:25.100Z", "date_only": false, "value": "2024-02-15T06:02:25.100472Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-26218", "record": "GSD-2024-26218", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-04-09T07:00:00Z", "date_only": false, "value": "2024-04-09T07:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-26218", "record": "MSRC_CVE-2024-26218", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-04-09T07:00:00Z", "date_only": false, "value": "2024-04-09T07:00:00.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-26218", "record": "MSRC_CVE-2024-26218", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2024-04-09T07:00:00Z", "date_only": false, "value": "2024-04-09T07:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "cve-2024-26218", "field": "containers.cna.datePublic"}, {"timestamp": "2024-04-09T07:00:00Z", "date_only": false, "value": "2024-04-09T07:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-26218", "record": "MSRC_CVE-2024-26218", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-04-09T17:00:47.180Z", "date_only": false, "value": "2024-04-09T17:00:47.180Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-26218", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-04-09T17:15:40Z", "date_only": false, "value": "2024-04-09T17:15:40Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-GHHM-R8CF-62X2", "record": "GHSA-GHHM-R8CF-62X2", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-04-09T17:15:40.840Z", "date_only": false, "value": "2024-04-09T17:15:40.840", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-26218", "record": "FKIE_CVE-2024-26218", "field": "published"}, {"timestamp": "2024-04-09T17:15:40.840Z", "date_only": false, "value": "2024-04-09T17:15:40.840", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2024-26218", "record": "GSD-2024-26218", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2024-04-09T18:30:25Z", "date_only": false, "value": "2024-04-09T18:30:25Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-GHHM-R8CF-62X2", "record": "GHSA-GHHM-R8CF-62X2", "field": "published"}, {"timestamp": "2024-04-09T18:30:25Z", "date_only": false, "value": "2024-04-09T18:30:25Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-GHHM-R8CF-62X2", "record": "GHSA-GHHM-R8CF-62X2", "field": "modified"}, {"timestamp": "2024-04-09T22:00:00Z", "date_only": false, "value": "2024-04-09T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0841", "record": "WID-SEC-W-2024-0841", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-04-09T22:00:00Z", "date_only": false, "value": "2024-04-09T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0841", "record": "WID-SEC-W-2024-0841", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-04-09T22:00:00Z", "date_only": false, "value": "2024-04-09T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0841", "record": "WID-SEC-W-2024-0841", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-04-10T00:00:00Z", "date_only": false, "value": "2024-04-10T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0289", "record": "CERTFR-2024-AVI-0289", "field": "last_revision_date"}, {"timestamp": "2024-04-10T00:00:00Z", "date_only": false, "value": "2024-04-10T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0289", "record": "CERTFR-2024-AVI-0289", "field": "initial_release_date"}, {"timestamp": "2024-04-10T00:00:00Z", "date_only": false, "value": "2024-04-10T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0289", "record": "CERTFR-2024-AVI-0289", "field": "revisions.0.revision_date"}, {"timestamp": "2024-04-10T13:24:00.070Z", "date_only": false, "value": "2024-04-10T13:24:00.070", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-26218", "record": "GSD-2024-26218", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-04-11T09:44:18Z", "date_only": false, "value": "2024-04-11T09:44:18.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/4495", "record": "CVE-2024-26218", "field": "creation_timestamp", "uuid": "2e3f0f29-65cf-4a4d-94b6-82096213c3d7", "content": "#ExploitObserverAlert\n\nCVE-2024-26218\n\nDESCRIPTION: Exploit Observer has 3 entries in 2 file formats related to CVE-2024-26218. Windows Kernel Elevation of Privilege Vulnerability\n\nFIRST-EPSS: 0.000430000\nNVD-IS: 5.9\nNVD-ES: 1.8", "url": "https://t.me/arpsyndicate/4495"}, {"timestamp": "2024-04-27T06:38:23Z", "date_only": false, "value": "2024-04-27T06:38:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/2024", "record": "CVE-2024-26218", "field": "creation_timestamp", "uuid": "54ce0f1b-9d34-4f7c-bf71-fb627577b61e", "content": "\u0414\u043e\u0431\u0440\u043e\u0433\u043e \u0443\u0442\u0440\u0430\nCVE-2024-26218 Windows Kernel Elevation of Privilege Vulnerability\n*\nProof-of-Concept\n\n#win #lpe", "url": "https://t.me/proxy_bar/2024"}, {"timestamp": "2024-04-29T15:04:41Z", "date_only": false, "value": "2024-04-29T15:04:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/TheDarkWebInformer/116", "record": "CVE-2024-26218", "field": "creation_timestamp", "uuid": "3587466e-db31-4576-a585-84e1398d45d2", "content": "\ud83d\udea8EXPLOIT POC\ud83d\udea8PoC Exploit Released For Windows Kernel EoP Vulnerability.\n\n#Clearnet #DarkWebInformer #DarkWeb #Exploit #Cyberattack #Cybercrime #Windows #Infosec #CTI #CVE202426218 #Vulnerability\n\nOne of the vulnerabilities addressed was CVE-2024-26218, associated with the Windows Kernel Privilege Escalation vulnerability, which had a severity of 7.8 (High).\n\nhttps://github.com/exploits-forsale/CVE-2024-26218\n\nX Link: https://twitter.com/DarkWebInformer/status/1784930649805029824", "url": "https://t.me/TheDarkWebInformer/116"}, {"timestamp": "2024-04-29T19:12:21.934Z", "date_only": false, "value": "2024-04-29T19:12:21.934547Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-26218", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-04-29T19:12:21.934Z", "date_only": false, "value": "2024-04-29T19:12:21.934547Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-26218", "record": "FKIE_CVE-2024-26218", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-05-01T13:09:31Z", "date_only": false, "value": "2024-05-01T13:09:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Teamx1945x/5565", "record": "CVE-2024-26218", "field": "creation_timestamp", "uuid": "dccbffb4-9354-4455-8f12-a816ed27945b", "content": "#exploit\n1. Telegram Web app XSS/Session Hijacking 1-click\nhttps://seclists.org/oss-sec/2024/q2/183\n\n2. CVE-2019-2703:\nVirtualBox VM Escape\nhttps://j0nathanj.github.io/Dusting-off-the-VM-Escape\n\n3. CVE-2024-26218:\nWindows PspBuildCreateProcessContext Double-Fetch / Buffer Overflow\nhttps://packetstormsecurity.com/files/178377/Windows-PspBuildCreateProcessContext-Double-Fetch-Buffer-Overflow.html", "url": "https://t.me/Teamx1945x/5565"}, {"timestamp": "2024-05-01T23:39:10Z", "date_only": false, "value": "2024-05-01T23:39:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/10428", "record": "CVE-2024-26218", "field": "creation_timestamp", "uuid": "f271a9a1-f96f-41b6-b5ad-09b83bc74f40", "content": "#exploit\n1. Telegram Web app XSS/Session Hijacking 1-click\nhttps://seclists.org/oss-sec/2024/q2/183\n\n2. CVE-2019-2703:\nVirtualBox VM Escape\nhttps://j0nathanj.github.io/Dusting-off-the-VM-Escape\n\n3. CVE-2024-26218:\nWindows PspBuildCreateProcessContext Double-Fetch / Buffer Overflow\nhttps://packetstormsecurity.com/files/178377/Windows-PspBuildCreateProcessContext-Double-Fetch-Buffer-Overflow.html", "url": "https://t.me/CyberSecurityTechnologies/10428"}, {"timestamp": "2024-05-13T22:00:00Z", "date_only": false, "value": "2024-05-13T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0841", "record": "WID-SEC-W-2024-0841", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-06-03T22:00:00Z", "date_only": false, "value": "2024-06-03T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0841", "record": "WID-SEC-W-2024-0841", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2024-06-04T17:48:14.618Z", "date_only": false, "value": "2024-06-04T17:48:14.618Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-26218", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-06-26T07:00:00Z", "date_only": false, "value": "2024-06-26T07:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-26218", "record": "MSRC_CVE-2024-26218", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-06-26T07:00:00Z", "date_only": false, "value": "2024-06-26T07:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-26218", "record": "MSRC_CVE-2024-26218", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-07-07T22:00:00Z", "date_only": false, "value": "2024-07-07T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0841", "record": "WID-SEC-W-2024-0841", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2024-07-07T22:00:00Z", "date_only": false, "value": "2024-07-07T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0841", "record": "WID-SEC-W-2024-0841", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-08-01T23:59:33.049Z", "date_only": false, "value": "2024-08-01T23:59:33.049Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2024-26218", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T18:07:31.047Z", "date_only": false, "value": "2024-08-15T18:07:31.047+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0841", "record": "WID-SEC-W-2024-0841", "field": "document.tracking.generator.date"}, {"timestamp": "2025-05-03T00:39:01.544Z", "date_only": false, "value": "2025-05-03T00:39:01.544Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-26218", "record": "MSRC_CVE-2024-26218", "field": "document.tracking.generator.date"}, {"timestamp": "2025-05-03T00:39:46.108Z", "date_only": false, "value": "2025-05-03T00:39:46.108Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-26218", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-05-03T00:39:46.108Z", "date_only": false, "value": "2025-05-03T00:39:46.108Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "cve-2024-26218", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T07:17:23.007Z", "date_only": false, "value": "2026-06-17T07:17:23.007", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-26218", "record": "FKIE_CVE-2024-26218", "field": "lastModified"}]}