{"metadata": {"vulnerability": "cve-2024-3566", "count": 34, "kinds": {"milestone": 8, "sighting": 9, "kev": 0, "other": 17}}, "data": [{"timestamp": "2024-04-02T07:00:00Z", "date_only": false, "value": "2024-04-02T07:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-3566", "record": "MSRC_CVE-2024-3566", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-04-10T04:58:27.982Z", "date_only": false, "value": "2024-04-10T04:58:27.982Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-3566", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-04-10T15:22:56.099Z", "date_only": false, "value": "2024-04-10T15:22:56.099Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-3566", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-04-10T15:26:52.009Z", "date_only": false, "value": "2024-04-10T15:26:52.009Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / certcc", "record": "cve-2024-3566", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-04-10T16:15:16Z", "date_only": false, "value": "2024-04-10T16:15:16Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-9XCH-XVJ3-FMF3", "record": "GHSA-9XCH-XVJ3-FMF3", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-04-10T16:15:16.083Z", "date_only": false, "value": "2024-04-10T16:15:16.083", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-3566", "record": "FKIE_CVE-2024-3566", "field": "published"}, {"timestamp": "2024-04-10T16:15:16.083Z", "date_only": false, "value": "2024-04-10T16:15:16.083", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2024-3566", "record": "GSD-2024-3566", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2024-04-10T18:30:47Z", "date_only": false, "value": "2024-04-10T18:30:47Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-9XCH-XVJ3-FMF3", "record": "GHSA-9XCH-XVJ3-FMF3", "field": "published"}, {"timestamp": "2024-04-10T19:49:51.183Z", "date_only": false, "value": "2024-04-10T19:49:51.183", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-3566", "record": "GSD-2024-3566", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-04-11T05:03:27.053Z", "date_only": false, "value": "2024-04-11T05:03:27.053396Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-3566", "record": "GSD-2024-3566", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-04-15T15:02:52Z", "date_only": false, "value": "2024-04-15T15:02:52.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cultofwire/1255", "record": "CVE-2024-3566", "field": "creation_timestamp", "uuid": "cf341b15-1bf5-460f-9e40-acd475b4aa77", "content": "BatBadBut: You can't securely execute commands on Windows\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 Vulnerability Note Multiple programming languages fail to escape arguments properly in Microsoft Windows \u043e\u0442 \u0430\u0432\u0442\u043e\u0440\u0430.\n\nBatBadBut \u2014 \u044d\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f Windows, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043a\u043e\u0441\u0432\u0435\u043d\u043d\u043e \u0437\u0430\u0432\u0438\u0441\u044f\u0442 \u043e\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 CreateProcess, \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u0439.\n\nCreateProcess() \u043d\u0435\u044f\u0432\u043d\u043e \u043f\u043e\u0440\u043e\u0436\u0434\u0430\u0435\u0442 cmd.exe \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u043f\u0430\u043a\u0435\u0442\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 (.bat, .cmd \u0438 \u0442. \u0434.), \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043d\u0435 \u0443\u043a\u0430\u0437\u0430\u043b\u043e \u0438\u0445 \u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0435.\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e cmd.exe \u0438\u043c\u0435\u0435\u0442 \u0441\u043b\u043e\u0436\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0440\u0430\u0437\u0431\u043e\u0440\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u044b\u0445 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u0430 \u0441\u0440\u0435\u0434\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u044f\u0437\u044b\u043a\u043e\u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u044b\u0435 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u044b.\n\u0418\u0437-\u0437\u0430 \u044d\u0442\u043e\u0433\u043e \u043c\u043e\u0436\u043d\u043e \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0435\u0441\u043b\u0438 \u043a\u0442\u043e-\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0447\u0430\u0441\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u044b\u0445 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430.\n\n\u0418\u043c\u043f\u0430\u043a\u0442:\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b. \u041f\u043e\u043b\u043d\u043e\u0435 \u0432\u043b\u0438\u044f\u043d\u0438\u0435 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0432\u0438\u0441\u0438\u0442 \u043e\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u044f\u0437\u044b\u043a \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u043b\u0438 \u0442\u0430\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u043c\u043e\u0434\u0443\u043b\u044c\n\n\u041a\u0430\u043a\u0438\u0435 \u044f\u0437\u044b\u043a\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442:\n- Haskell\n- Node.js\n- Rust\n- PHP\n\n\u041d\u043e \u0430\u0432\u0442\u043e\u0440 \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u044d\u0442\u043e \u0442\u0430\u043a \u0436\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u043c\u043e \u043a Erlang, Go, Java, Python \u0438 Ruby.\n\n\u0421\u043f\u0438\u0441\u043e\u043a CVE:\nCVE-2024-1874\nCVE-2024-22423\nCVE-2024-24576\nCVE-2024-3566", "url": "https://t.me/cultofwire/1255"}, {"timestamp": "2024-04-15T16:13:02.290Z", "date_only": false, "value": "2024-04-15T16:13:02.290928Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-3566", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2024-04-15T16:13:02.290Z", "date_only": false, "value": "2024-04-15T16:13:02.290928Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-3566", "record": "FKIE_CVE-2024-3566", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-08-22T18:25:43.487Z", "date_only": false, "value": "2024-08-22T18:25:43.487Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-3566", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-06-18T14:56:46.820Z", "date_only": false, "value": "2025-06-18T14:56:46.820Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-NODE-2024-3566", "record": "BIT-NODE-2024-3566", "field": "published"}, {"timestamp": "2025-06-18T15:17:39.937Z", "date_only": false, "value": "2025-06-18T15:17:39.937Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-NODE-2024-3566", "record": "BIT-NODE-2024-3566", "field": "modified"}, {"timestamp": "2025-09-03T19:55:11Z", "date_only": false, "value": "2025-09-03T19:55:11.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-3566", "record": "MSRC_CVE-2024-3566", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-11-14T14:45:34Z", "date_only": false, "value": "2025-11-14T14:45:34Z", "kind": "milestone", "label": "Published", "source": "osv_haskell \u00b7 HSEC-2024-0003", "record": "HSEC-2024-0003", "field": "published"}, {"timestamp": "2025-11-14T14:45:34Z", "date_only": false, "value": "2025-11-14T14:45:34Z", "kind": "other", "label": "Updated", "source": "osv_haskell \u00b7 HSEC-2024-0003", "record": "HSEC-2024-0003", "field": "modified"}, {"timestamp": "2025-11-18T17:35:41.547Z", "date_only": false, "value": "2025-11-18T17:35:41.547Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-3566", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-11-18T17:35:41.547Z", "date_only": false, "value": "2025-11-18T17:35:41.547Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2024-3566", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-11-18T18:32:45Z", "date_only": false, "value": "2025-11-18T18:32:45Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-9XCH-XVJ3-FMF3", "record": "GHSA-9XCH-XVJ3-FMF3", "field": "modified"}, {"timestamp": "2026-02-10T19:10:06Z", "date_only": false, "value": "2026-02-10T19:10:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/alon710/c533b0ed39b2dd99fa8ad47f72c7f847", "record": "CVE-2024-3566", "field": "creation_timestamp", "uuid": "e30592bc-e678-4524-b241-12a71614137a", "url": "https://gist.github.com/alon710/c533b0ed39b2dd99fa8ad47f72c7f847"}, {"timestamp": "2026-02-18T15:02:20Z", "date_only": false, "value": "2026-02-18T15:02:20.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-3566", "record": "MSRC_CVE-2024-3566", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-02-18T15:02:20Z", "date_only": false, "value": "2026-02-18T15:02:20.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-3566", "record": "MSRC_CVE-2024-3566", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-04-14T18:32:12Z", "date_only": false, "value": "2026-04-14T18:32:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/stanibaj/f1eecd7ed798506a268661c2be536136", "record": "CVE-2024-3566", "field": "creation_timestamp", "uuid": "886807d8-e973-4de2-b473-df36be2ab603", "url": "https://gist.github.com/stanibaj/f1eecd7ed798506a268661c2be536136"}, {"timestamp": "2026-04-18T17:28:14Z", "date_only": false, "value": "2026-04-18T17:28:14.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/stanibaj/9c1b6c8cb546658ba97b0f661fddf7f9", "record": "CVE-2024-3566", "field": "creation_timestamp", "uuid": "1de3c22c-53de-41a5-a393-c2454b622eb2", "url": "https://gist.github.com/stanibaj/9c1b6c8cb546658ba97b0f661fddf7f9"}, {"timestamp": "2026-04-19T09:35:40Z", "date_only": false, "value": "2026-04-19T09:35:40.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/stanibaj/968e63fb6a027d6a3443f0de61b97279", "record": "CVE-2024-3566", "field": "creation_timestamp", "uuid": "adc74fe6-e139-4657-ad4c-4189f7a5f11a", "url": "https://gist.github.com/stanibaj/968e63fb6a027d6a3443f0de61b97279"}, {"timestamp": "2026-04-19T12:57:05Z", "date_only": false, "value": "2026-04-19T12:57:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/stanibaj/c568ae7bd5aee35ae501378f12e973ad", "record": "CVE-2024-3566", "field": "creation_timestamp", "uuid": "f9e15077-2bb9-4839-9de2-2c85a523d0a9", "url": "https://gist.github.com/stanibaj/c568ae7bd5aee35ae501378f12e973ad"}, {"timestamp": "2026-04-19T14:35:21Z", "date_only": false, "value": "2026-04-19T14:35:21.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/stanibaj/b9432d60d00ca372cc2cfc88f4bff31b", "record": "CVE-2024-3566", "field": "creation_timestamp", "uuid": "f51b97bf-0a41-48a0-a04b-c7cd916a7ecb", "url": "https://gist.github.com/stanibaj/b9432d60d00ca372cc2cfc88f4bff31b"}, {"timestamp": "2026-04-19T14:38:11Z", "date_only": false, "value": "2026-04-19T14:38:11.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/stanibaj/5954876e537c9aeb576b08ee0a0c53a2", "record": "CVE-2024-3566", "field": "creation_timestamp", "uuid": "10a8f4c2-b430-4948-bf7f-27251fbf786f", "url": "https://gist.github.com/stanibaj/5954876e537c9aeb576b08ee0a0c53a2"}, {"timestamp": "2026-05-22T07:47:24.655Z", "date_only": false, "value": "2026-05-22T07:47:24.655Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-3566", "record": "MSRC_CVE-2024-3566", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-17T07:44:31.710Z", "date_only": false, "value": "2026-06-17T07:44:31.710", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-3566", "record": "FKIE_CVE-2024-3566", "field": "lastModified"}, {"timestamp": "2026-08-28T13:00:06.050Z", "date_only": false, "value": "2026-08-28T13:00:06.050194Z", "kind": "sighting", "label": "Seen", "source": "Telegram/qayRtfbQ4ZVhw-5jHN2bNV_M_lvooIVVIYQUaXJa59_oxwU", "record": "CVE-2024-3566", "field": "creation_timestamp", "uuid": "337822ef-b7ca-4ad5-8b53-47f17f97c2f3"}]}