{"metadata": {"vulnerability": "cve-2024-38217", "count": 73, "kinds": {"milestone": 9, "sighting": 27, "kev": 11, "other": 26}}, "data": [{"timestamp": "2024-06-11T22:36:08.224Z", "date_only": false, "value": "2024-06-11T22:36:08.224Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-38217", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-09-10T00:00:00Z", "date_only": false, "value": "2024-09-10T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2024-38217", "field": "timestamps.asserted_at", "uuid": "06a2268a-f208-4d67-b79b-39a34d06d7a0", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-09-10T00:00:00Z", "date_only": false, "value": "2024-09-10T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2024-38217", "field": "timestamps.asserted_at", "uuid": "de0e6d43-0f20-4265-b3b7-f102adcf550c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-09-10T00:00:00Z", "date_only": true, "value": "2024-09-10", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-38217", "field": "containers.adp.1.metrics.1.other.content.dateAdded"}, {"timestamp": "2024-09-10T00:00:00Z", "date_only": false, "value": "2024-09-10T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2024-38217", "field": "evidence.0.details.added_date", "uuid": "de0e6d43-0f20-4265-b3b7-f102adcf550c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-09-10T00:00:00Z", "date_only": true, "value": "2024-09-10", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2024-38217", "field": "evidence.0.details.date_added", "uuid": "06a2268a-f208-4d67-b79b-39a34d06d7a0", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-09-10T00:00:00Z", "date_only": false, "value": "2024-09-10T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2024-38217", "field": "timestamps.first_seen_at", "uuid": "06a2268a-f208-4d67-b79b-39a34d06d7a0", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-09-10T00:00:00Z", "date_only": false, "value": "2024-09-10T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2024-38217", "field": "timestamps.first_seen_at", "uuid": "de0e6d43-0f20-4265-b3b7-f102adcf550c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-09-10T00:00:00Z", "date_only": true, "value": "2024-09-10", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0759", "record": "CERTFR-2024-AVI-0759", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2024-09-10T00:00:00Z", "date_only": false, "value": "2024-09-10T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2024-38217", "field": "status.status_updated_at", "uuid": "06a2268a-f208-4d67-b79b-39a34d06d7a0", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-09-10T00:00:00Z", "date_only": false, "value": "2024-09-10T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2024-38217", "field": "status.status_updated_at", "uuid": "de0e6d43-0f20-4265-b3b7-f102adcf550c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-09-10T00:00:00Z", "date_only": false, "value": "2024-09-10T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-38217", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2024-09-10T07:00:00Z", "date_only": false, "value": "2024-09-10T07:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-38217", "record": "MSRC_CVE-2024-38217", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-09-10T07:00:00Z", "date_only": false, "value": "2024-09-10T07:00:00.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-38217", "record": "MSRC_CVE-2024-38217", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2024-09-10T07:00:00Z", "date_only": false, "value": "2024-09-10T07:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "cve-2024-38217", "field": "containers.cna.datePublic"}, {"timestamp": "2024-09-10T07:00:00Z", "date_only": false, "value": "2024-09-10T07:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-38217", "record": "MSRC_CVE-2024-38217", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-09-10T07:00:00Z", "date_only": false, "value": "2024-09-10T07:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-38217", "record": "MSRC_CVE-2024-38217", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-09-10T16:53:55.994Z", "date_only": false, "value": "2024-09-10T16:53:55.994Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-38217", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-09-10T17:15:24Z", "date_only": false, "value": "2024-09-10T17:15:24Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-78V4-HXHF-XQQV", "record": "GHSA-78V4-HXHF-XQQV", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-09-10T17:15:24.640Z", "date_only": false, "value": "2024-09-10T17:15:24.640", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-38217", "record": "FKIE_CVE-2024-38217", "field": "published"}, {"timestamp": "2024-09-10T17:25:32Z", "date_only": false, "value": "2024-09-10T17:25:32.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.thezdi.com/blog/2024/9/10/the-september-2024-security-update-review", "record": "CVE-2024-38217", "field": "creation_timestamp", "uuid": "f531867d-6c27-4f33-aba4-9294f2285f44", "url": "https://www.thezdi.com/blog/2024/9/10/the-september-2024-security-update-review"}, {"timestamp": "2024-09-10T18:10:22.377Z", "date_only": false, "value": "2024-09-10T18:10:22.377Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2024-38217", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-10T18:21:28.305Z", "date_only": false, "value": "2024-09-10T18:21:28.305189Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2024-0363", "record": "NCSC-2024-0363", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-09-10T18:21:28.305Z", "date_only": false, "value": "2024-09-10T18:21:28.305189Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2024-0363", "record": "NCSC-2024-0363", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-09-10T18:21:28.305Z", "date_only": false, "value": "2024-09-10T18:21:28.305189Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2024-0363", "record": "NCSC-2024-0363", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-09-10T18:30:45Z", "date_only": false, "value": "2024-09-10T18:30:45Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-78V4-HXHF-XQQV", "record": "GHSA-78V4-HXHF-XQQV", "field": "published"}, {"timestamp": "2024-09-10T22:00:00Z", "date_only": false, "value": "2024-09-10T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-2123", "record": "WID-SEC-W-2024-2123", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-09-10T22:00:00Z", "date_only": false, "value": "2024-09-10T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-2123", "record": "WID-SEC-W-2024-2123", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-09-10T22:00:00Z", "date_only": false, "value": "2024-09-10T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-2123", "record": "WID-SEC-W-2024-2123", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-09-11T00:00:00Z", "date_only": false, "value": "2024-09-11T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0759", "record": "CERTFR-2024-AVI-0759", "field": "last_revision_date"}, {"timestamp": "2024-09-11T00:00:00Z", "date_only": false, "value": "2024-09-11T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0759", "record": "CERTFR-2024-AVI-0759", "field": "initial_release_date"}, {"timestamp": "2024-09-11T00:00:00Z", "date_only": false, "value": "2024-09-11T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0759", "record": "CERTFR-2024-AVI-0759", "field": "revisions.0.revision_date"}, {"timestamp": "2024-09-11T04:00:00Z", "date_only": false, "value": "2024-09-11T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1368", "record": "CVE-2024-38217", "field": "creation_timestamp", "uuid": "778be77f-ddce-44d5-8c7c-f9e244d53fdd", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1368"}, {"timestamp": "2024-09-11T09:47:58Z", "date_only": false, "value": "2024-09-11T09:47:58.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/kasperskyb2b/1408", "record": "CVE-2024-38217", "field": "creation_timestamp", "uuid": "438ce8a1-e5ba-46f2-b384-e748403efb50", "content": "\ud83d\udd2c \u0421\u0435\u043d\u0442\u044f\u0431\u0440\u044c\u0441\u043a\u0438\u0439 \u0432\u0442\u043e\u0440\u043d\u0438\u043a \u043f\u0430\u0442\u0447\u0435\u0439: 3-5 \u0437\u0438\u0440\u043e\u0434\u0435\u0435\u0432 \u0438 79 CVE\n\n\u041f\u0435\u0440\u0432\u044b\u0439 \u043e\u0441\u0435\u043d\u043d\u0438\u0439 \u043f\u0430\u043a\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 Microsoft \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 79 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f 7 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445. \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e CVE (30) \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, RCE \u2014 23, \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u2014 11, DoS \u2014 8, \u043e\u0431\u0445\u043e\u0434 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u2014 4.\n\n4 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u044b \u043a\u0430\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0432\u0436\u0438\u0432\u0443\u044e, \u043d\u043e \u043f\u0440\u0438 \u0436\u0435\u043b\u0430\u043d\u0438\u0438 \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u0441\u0447\u0438\u0442\u0430\u0442\u044c \u0442\u0440\u0438 \u0438\u043b\u0438 \u043f\u044f\u0442\u044c \ud83e\udd21. CVE-2024-43491 (RCE, CVSS 9.8) \u044d\u0442\u043e \u00ab\u0441\u0430\u043c\u043e\u0441\u0442\u0440\u0435\u043b\u00bb \u2014 \u0434\u0435\u0444\u0435\u043a\u0442 \u0432 \u043c\u0430\u0440\u0442\u043e\u0432\u0441\u043a\u043e\u043c Patch Tuesday \u043f\u0440\u0438\u0432\u0451\u043b \u043a \u043e\u0442\u043a\u0430\u0442\u0443 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u043e\u043f\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0441\u043e \u0441\u0442\u0430\u0440\u043e\u0439 \u0441\u0431\u043e\u0440\u043a\u043e\u0439 Windows 10 (\u0432\u0435\u0440\u0441\u0438\u0438 1507, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Windows 10 Enterprise 2015 LTSB \u0438  IoT Enterprise 2015 LTSB). \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0441\u0430\u043c\u0430 CVE-2024-43491 \u0432\u0440\u043e\u0434\u0435 \u0431\u044b \u043d\u0438\u043a\u0435\u043c \u043d\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f, \u043d\u043e \u043e\u043d\u0430 \u0441\u043d\u043e\u0432\u0430 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0441\u0442\u0430\u0440\u044b\u0435, \u0440\u0430\u043d\u0435\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0432\u0448\u0438\u0435\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0431\u0430\u0433\u0438. \u0412 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u0443\u043a\u0430\u0437\u0430\u043d\u044b \u043e\u043f\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b Windows, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043b\u0438\u0441\u044c \u044d\u0442\u043e\u043c\u0443 \u0434\u0430\u0443\u043d\u0433\u0440\u0435\u0439\u0434\u0443, \u0430 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0434\u0432\u0430 \u043f\u0430\u043a\u0435\u0442\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439: KB5043936 \u0438 KB5043083.\n\n\u0414\u0440\u0443\u0433\u0438\u0435 \u0437\u0438\u0440\u043e\u0434\u0435\u0438:\n- CVE-2024-38217 (CVSS 5.4) \u2014 \u044d\u0442\u043e \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u0444\u0438\u043a\u0441 \u0434\u043b\u044f LNK stomping, \u043e\u0431\u0445\u043e\u0434\u0430 MotW. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u043d\u0430 \u0418\u0411-\u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430\u043c\u0438, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432\u0436\u0438\u0432\u0443\u044e, \u043f\u0440\u0438\u0447\u0451\u043c \u043c\u043d\u043e\u0433\u043e \u043b\u0435\u0442.\n- CVE-2024-38014 (CVSS 7.8) \u2014 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e system \u0447\u0435\u0440\u0435\u0437 Windows Installer, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432\u0436\u0438\u0432\u0443\u044e.\n- CVE-2024-38226 (CVSS 7.3) \u2014 \u043e\u0431\u0445\u043e\u0434 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Microsoft Publisher 2016, Microsoft Office LTSC 2021, Office 2019, \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442\u044c \u043a \u0437\u0430\u043f\u0443\u0441\u043a\u0443 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u043c\u0430\u043a\u0440\u043e\u0441\u043e\u0432 \u0432 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0435, \u043d\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043d\u0430\u0434\u043e \u0443\u0431\u0435\u0434\u0438\u0442\u044c \u0441\u043a\u0430\u0447\u0430\u0442\u044c \u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044c \u044d\u0442\u043e\u0442 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442. \u0427\u0435\u0440\u0435\u0437 \u043f\u0430\u043d\u0435\u043b\u044c \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430 \u0430\u0442\u0430\u043a\u0430 \u043d\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442.\n\n\u0411\u043e\u043d\u0443\u0441-\u0442\u0440\u0435\u043a: Zero Day Initiative \u0441\u0447\u0438\u0442\u0430\u044e\u0442, \u0447\u0442\u043e \u0435\u0449\u0451 \u043e\u0434\u0438\u043d \u0443\u0441\u0442\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u0439 \u0434\u0435\u0444\u0435\u043a\u0442 (CVE-2024-43461, CVSS 8.8, spoofing \u0432 MSHTML) \u0442\u043e\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432\u0436\u0438\u0432\u0443\u044e.\n\n\u0421\u0440\u0435\u0434\u0438 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432\u0436\u0438\u0432\u0443\u044e, \u0442\u0440\u0435\u0432\u043e\u0433\u0443 \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0442 \u0434\u0432\u0430 \u0431\u0430\u0433\u0430 \u0432 Sharepoint: CVE-2024-38018 (RCE, CVSS 8.8) \u0438 CVE-2024-43464 (RCE, CVSS 7.2) \u2014 \u043e\u0431\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043d\u043e \u043f\u0435\u0440\u0432\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u043d\u0438\u0437\u043a\u043e\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c. \u0413\u0440\u043e\u0437\u043d\u043e \u0432\u044b\u0433\u043b\u044f\u0434\u044f\u0449\u0438\u0439 \u0434\u0435\u0444\u0435\u043a\u0442 \u0432 Windows NAT (CVE-2024-38119, RCE, CVSS 7.5), \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u0430\u0442\u0430\u043a\u0443 \u0438\u0437 \u0442\u043e\u0439 \u0436\u0435 \u043f\u043e\u0434\u0441\u0435\u0442\u0438, \u0433\u0434\u0435 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0436\u0435\u0440\u0442\u0432\u0430, \u0438 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0433\u043e\u043d\u043a\u0443 (race condition).\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #Microsoft @\u041f2\u0422", "url": "https://t.me/kasperskyb2b/1408"}, {"timestamp": "2024-09-11T11:21:46Z", "date_only": false, "value": "2024-09-11T11:21:46.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/6189", "record": "CVE-2024-38217", "field": "creation_timestamp", "uuid": "d7c3d6f4-4b78-4605-85b6-e17f578a4aa0", "content": "\u041f\u043e\u0434\u043a\u0430\u0442\u0438\u043b \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044c\u0441\u043a\u0438\u0439 PatchTuesday \u043e\u0442 Microsoft \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u0434\u043b\u044f 79 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0447\u0435\u0442\u044b\u0440\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0438 \u043e\u0434\u043d\u0443 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0443\u044e 0-day.\n\n\u0412 \u0446\u0435\u043b\u043e\u043c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e \u0441\u0435\u043c\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 RCE \u0438 EoP. \u041e\u0431\u0449\u0435\u0435 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435: 30 - EoP, 4 - \u043e\u0431\u0445\u043e\u0434 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, 23 - RCE, 11 - \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, 8 - DoS \u0438 3 - \u0441\u043f\u0443\u0444\u0438\u043d\u0433.\n\n\u0421\u0440\u0435\u0434\u0438 \u0447\u0435\u0442\u044b\u0440\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u043d\u0443\u043b\u0435\u0439:\n\n- CVE-2024-38014: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a\u0435 Windows, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 SYSTEM \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Windows.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u041c\u0430\u0439\u043a\u043b\u043e\u043c \u0411\u044d\u0440\u043e\u043c \u0438\u0437 SEC Consult Vulnerability Lab. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0430\u044e\u0442\u0441\u044f.\n\n- CVE-2024-38217: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Windows Mark of the Web, \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430\u044f \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435\u00a0\u0414\u0436\u043e \u0414\u0435\u0441\u0438\u043c\u043e\u043d\u043e\u043c \u0438\u0437 Elastic Security \u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0441 2018 \u0433\u043e\u0434\u0430.\n\n\u0420\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u043c\u0435\u0442\u043e\u0434 LNK-stomping, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u043c LNK-\u0444\u0430\u0439\u043b\u0430\u043c \u0441 \u043d\u0435\u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u043c\u0438 \u0446\u0435\u043b\u0435\u0432\u044b\u043c\u0438 \u043f\u0443\u0442\u044f\u043c\u0438 \u0438\u043b\u0438 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c\u0438 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0432\u044b\u0437\u044b\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0435 \u0444\u0430\u0439\u043b\u0430, \u043e\u0431\u0445\u043e\u0434\u044f \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Smart App Control \u0438 Mark of the Web.\n\n- CVE-2024-38226: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Microsoft Publisher, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0445 \u043c\u0430\u043a\u0440\u043e\u0441\u043e\u0432 \u0432 Office. Microsoft \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430, \u043a\u0442\u043e \u0438\u043c\u0435\u043d\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438 \u043a\u0430\u043a \u043e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430.\n\n- CVE-2024-43491: RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0426\u0435\u043d\u0442\u0440\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Microsoft Windows. \u041e\u0448\u0438\u0431\u043a\u0430 Servicing Stack \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u043e\u0442\u043c\u0435\u043d\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043b\u0438\u044f\u044e\u0449\u0438\u0445 \u043d\u0430 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u0432 Windows 10 \u0432\u0435\u0440\u0441\u0438\u0438 1507.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0440\u0430\u043d\u0435\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Windows 10 \u0432\u0435\u0440\u0441\u0438\u0438 1507, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043e \u043c\u0430\u0440\u0442\u043e\u0432\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 KB5035858 \u0438\u043b\u0438 \u0434\u0440\u0443\u0433\u0438\u0435, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0435 \u0434\u043e \u0430\u0432\u0433\u0443\u0441\u0442\u0430 2024 \u0433\u043e\u0434\u0430. \u0412\u0441\u0435 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0435 \u043d\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u044b.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0442\u0435\u043a\u0430 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u0443\u0442\u0435\u043c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044c\u0441\u043a\u0438\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0441\u0442\u0435\u043a\u0430 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u044f (SSU KB5043936) \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Windows (KB5043083), \u0438\u043c\u0435\u043d\u043d\u043e \u0432 \u0442\u0430\u043a\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435.\n\n\u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Windows 10 \u0432\u0435\u0440\u0441\u0438\u0438 1507 (\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430  \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u043b\u0430\u0441\u044c \u0432 2017 \u0433\u043e\u0434\u0443) \u0430 \u0442\u0430\u043a\u0436\u0435 \u0440\u0435\u0434\u0430\u043a\u0446\u0438\u0438 Windows 10 Enterprise 2015 LTSB \u0438 Windows 10 IoT Enterprise 2015 LTSB (\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u0441\u0435 \u0435\u0449\u0435 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u043d\u0430 \u0441\u0442\u0430\u0434\u0438\u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438).\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u0430 \u0442\u0435\u043c, \u0447\u0442\u043e \u043e\u043d\u0430 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0442\u043a\u0430\u0442\u0443 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Active Directory Lightweight Directory Services, XPS Viewer, Internet Explorer 11, LPD Print Service, IIS \u0438 Windows Media Player, \u043a \u0438\u0445 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u0432\u0435\u0440\u0441\u0438\u044f\u043c RTM.\n\n\u042d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u043c\u0443 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443 \u0432\u0441\u0435\u0445 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 CVE, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u0442\u0435\u043c \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u0411\u043e\u043b\u0435\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0438 \u043f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 - \u0437\u0434\u0435\u0441\u044c.", "url": "https://t.me/true_secator/6189"}, {"timestamp": "2024-09-11T14:58:07.792Z", "date_only": false, "value": "2024-09-11T14:58:07.792298Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-38217", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-09-11T14:58:07.792Z", "date_only": false, "value": "2024-09-11T14:58:07.792298Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-38217", "record": "FKIE_CVE-2024-38217", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-09-11T15:23:22Z", "date_only": false, "value": "2024-09-11T15:23:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberBulletin/614", "record": "CVE-2024-38217", "field": "creation_timestamp", "uuid": "d27c29b8-f789-479d-ba16-c79bc8ac6aab", "content": "\u26a1\ufe0fLNK Stomping (CVE-2024-38217): Microsoft Patches Years-Old Zero-Day Flaw.\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/614"}, {"timestamp": "2024-09-11T15:26:05Z", "date_only": false, "value": "2024-09-11T15:26:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberBulletin/618", "record": "CVE-2024-38217", "field": "creation_timestamp", "uuid": "a605b202-9e73-4537-a8fb-bd1a08a73331", "content": "\u26a1\ufe0f4 CVE exploited in the wild, on Microsoft's Patch      \n\nCVE-2024-43491 - 9.8 - Microsoft Windows Update Remote Code Execution Vulnerability\n    CVE-2024-38014 - 7.8 - Windows Installer Elevation of Privilege Vulnerability\n    CVE-2024-38226 - 7.3 - Microsoft Publisher Security Feature Bypass Vulnerability\n    CVE-2024-38217 - 5.4 - Windows Mark of the Web Security Feature Bypass Vulnerability\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/618"}, {"timestamp": "2024-09-11T15:26:51Z", "date_only": false, "value": "2024-09-11T15:26:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/InfoSecInsider/23749", "record": "CVE-2024-38217", "field": "creation_timestamp", "uuid": "829b357c-257c-46bd-a0a2-76e1ecd3b2ca", "content": "\u26a1\ufe0fLNK Stomping (CVE-2024-38217): Microsoft Patches Years-Old Zero-Day Flaw.\n\n#CyberBulletin", "url": "https://t.me/InfoSecInsider/23749"}, {"timestamp": "2024-09-11T15:26:53Z", "date_only": false, "value": "2024-09-11T15:26:53.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/InfoSecInsider/23753", "record": "CVE-2024-38217", "field": "creation_timestamp", "uuid": "02249624-bb4d-478a-80a2-b766bdfe09f4", "content": "\u26a1\ufe0f4 CVE exploited in the wild, on Microsoft's Patch      \n\nCVE-2024-43491 - 9.8 - Microsoft Windows Update Remote Code Execution Vulnerability\n    CVE-2024-38014 - 7.8 - Windows Installer Elevation of Privilege Vulnerability\n    CVE-2024-38226 - 7.3 - Microsoft Publisher Security Feature Bypass Vulnerability\n    CVE-2024-38217 - 5.4 - Windows Mark of the Web Security Feature Bypass Vulnerability\n\n#CyberBulletin", "url": "https://t.me/InfoSecInsider/23753"}, {"timestamp": "2024-09-11T15:26:53Z", "date_only": false, "value": "2024-09-11T15:26:53.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/InfoSecInsider/262", "record": "CVE-2024-38217", "field": "creation_timestamp", "uuid": "c3d624ff-92f9-4f18-9ef2-2fb9645da9b6", "content": "\u26a1\ufe0fLNK Stomping (CVE-2024-38217): Microsoft Patches Years-Old Zero-Day Flaw.\n\n#CyberBulletin", "url": "https://t.me/InfoSecInsider/262"}, {"timestamp": "2024-09-11T15:26:53Z", "date_only": false, "value": "2024-09-11T15:26:53.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/InfoSecInsider/266", "record": "CVE-2024-38217", "field": "creation_timestamp", "uuid": "90a355ba-ffdf-4247-8a95-d12c5a5941e2", "content": "\u26a1\ufe0f4 CVE exploited in the wild, on Microsoft's Patch      \n\nCVE-2024-43491 - 9.8 - Microsoft Windows Update Remote Code Execution Vulnerability\n    CVE-2024-38014 - 7.8 - Windows Installer Elevation of Privilege Vulnerability\n    CVE-2024-38226 - 7.3 - Microsoft Publisher Security Feature Bypass Vulnerability\n    CVE-2024-38217 - 5.4 - Windows Mark of the Web Security Feature Bypass Vulnerability\n\n#CyberBulletin", "url": "https://t.me/InfoSecInsider/266"}, {"timestamp": "2024-09-11T16:34:35Z", "date_only": false, "value": "2024-09-11T16:34:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/itsec_news/4689", "record": "CVE-2024-38217", "field": "creation_timestamp", "uuid": "434a4ee3-5778-4c81-b706-96918ab2c7e5", "content": "\u200b\u26a1\ufe0f79 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 4 0Day: \u043a\u0430\u043a \u043f\u0440\u043e\u0448\u0435\u043b Patch Tuesday \u0443 Microsoft\n\n\ud83d\udcac Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044c\u0441\u043a\u043e\u0433\u043e Patch Tuesday 2024, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 79 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u2014 4 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445, (\u0432 \u0442.\u0447. 1 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430\u044f) \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f (zero-day).\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f 7 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430 \u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u0412 \u0447\u0438\u0441\u043b\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c:\n\n30 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439;\n4 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438;\n23 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430;\n11 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438;\n8 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0442\u0438\u043f\u0430 \u00ab\u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\u00bb;\n3 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u043f\u0443\u0444\u0438\u043d\u0433\u0430.\n\n\u0412\u0430\u0436\u043d\u043e\u0439 \u0447\u0430\u0441\u0442\u044c\u044e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0442\u0430\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f 4-\u0451\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043e\u0434\u043d\u0430 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430\u044f.\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f:\n\nCVE-2024-38014 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 Windows Installer\n\n\u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441 Windows. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e \u043c\u0435\u0442\u043e\u0434\u0430\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f Microsoft \u043f\u043e\u043a\u0430 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430.\n\nCVE-2024-38217 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Mark of the Web (MotW)\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2024 \u0433\u043e\u0434\u0430. \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u043e\u0448\u0438\u0431\u043a\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0441 2018 \u0433\u043e\u0434\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 LNK Stomping, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u043c LNK-\u0444\u0430\u0439\u043b\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Smart App Control \u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u043e\u0442 Mark of the Web (MotW).\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0431\u0445\u043e\u0434\u044f\u0442 \u0437\u0430\u0449\u0438\u0442\u0443 MotW, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043f\u043e\u0442\u0435\u0440\u0435 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0442\u0430\u043a\u0438\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043a\u0430\u043a SmartScreen Application Reputation \u0438 Windows Attachment Services.\n\nCVE-2024-38226 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Microsoft Publisher\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u0443 \u043e\u0442 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0445 \u043c\u0430\u043a\u0440\u043e\u0441\u043e\u0432 \u0432 \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0445. \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u043b\u0438 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 Office, \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e \u0442\u043e\u043c, \u043a\u0430\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c, \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f.\n\nCVE-2024-43491 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 \u0426\u0435\u043d\u0442\u0440\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0442\u0435\u043a\u0435 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u043a\u043e\u0434. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0430 Windows 10 \u0432\u0435\u0440\u0441\u0438\u0438 1507, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0434\u043e\u0441\u0442\u0438\u0433\u043b\u0430 \u043a\u043e\u043d\u0446\u0430 \u0436\u0438\u0437\u043d\u0435\u043d\u043d\u043e\u0433\u043e \u0446\u0438\u043a\u043b\u0430 \u0432 2017 \u0433\u043e\u0434\u0443, \u043d\u043e \u0442\u0430\u043a\u0436\u0435 \u043e\u0441\u0442\u0430\u0451\u0442\u0441\u044f \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0434\u043b\u044f Windows 10 Enterprise 2015 LTSB \u0438 Windows 10 IoT Enterprise 2015 LTSB, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u0441\u0451 \u0435\u0449\u0451 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0442\u0435\u043c, \u0447\u0442\u043e \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441 Windows 10 1507 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0440\u0430\u043d\u0435\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u043d\u043e\u0432\u0430 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0438\u0441\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u043c\u0438. \u0414\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441\u0442\u0435\u043a\u0430 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0437\u0430 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044c 2024 \u0433\u043e\u0434\u0430 \u0438 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u0430\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u0439\u0442\u0438 \u0432 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438 Microsoft. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Windows 11 23H2 KB5043076, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0435\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Patch Tuesday \u0437\u0430 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044c. \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b BleepingComputer \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 Microsoft \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 Patch Tuesday.\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/4689"}, {"timestamp": "2024-09-12T10:08:53Z", "date_only": false, "value": "2024-09-12T10:08:53.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/HackingInsights/12823", "record": "CVE-2024-38217", "field": "creation_timestamp", "uuid": "c245072f-82b4-49b4-a7bc-1928d3fb47b1", "content": "\u200aLNK Stomping (CVE-2024-38217): Microsoft Patches Years-Old Zero-Day Flaw\n\nhttps://securityonline.info/lnk-stomping-cve-2024-38217-microsoft-patches-years-old-zero-day-flaw/", "url": "https://t.me/HackingInsights/12823"}, {"timestamp": "2024-09-15T22:00:00Z", "date_only": false, "value": "2024-09-15T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-2123", "record": "WID-SEC-W-2024-2123", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-09-18T20:36:59Z", "date_only": false, "value": "2024-09-18T20:36:59.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/O_WqqhCz6WnuYwdlEJBtUXPpClOAwSrSScBQj38ptqd8Vh3J", "record": "CVE-2024-38217", "field": "creation_timestamp", "uuid": "e05dab62-a362-4a8d-acc8-a4bfe8df87b7"}, {"timestamp": "2024-09-20T18:10:03Z", "date_only": false, "value": "2024-09-20T18:10:03.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2024-38217", "field": "creation_timestamp", "uuid": "fbf2436b-70d6-45a6-9a03-3c58dfaf257c"}, {"timestamp": "2024-10-01T00:00:00Z", "date_only": true, "value": "2024-10-01", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2024-38217", "field": "evidence.0.details.due_date", "uuid": "06a2268a-f208-4d67-b79b-39a34d06d7a0", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-10-10T22:00:00Z", "date_only": false, "value": "2024-10-10T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-2123", "record": "WID-SEC-W-2024-2123", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2024-10-10T22:00:00Z", "date_only": false, "value": "2024-10-10T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-2123", "record": "WID-SEC-W-2024-2123", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-10-11T08:12:11.929Z", "date_only": false, "value": "2024-10-11T08:12:11.929+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-2123", "record": "WID-SEC-W-2024-2123", "field": "document.tracking.generator.date"}, {"timestamp": "2024-11-28T22:53:03.562Z", "date_only": false, "value": "2024-11-28T22:53:03.562084Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/0patch/statuses/113563033835028845", "record": "CVE-2024-38217", "field": "creation_timestamp", "uuid": "b078f02a-1ef0-4762-a01f-88a4d9c1c91a", "url": "https://infosec.exchange/users/0patch/statuses/113563033835028845"}, {"timestamp": "2024-11-28T22:54:35.658Z", "date_only": false, "value": "2024-11-28T22:54:35.658778Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/verbrecher/statuses/113563040148435127", "record": "CVE-2024-38217", "field": "creation_timestamp", "uuid": "b09fb840-f65c-441b-9b5f-33f8cf1b22e9", "url": "https://mastodon.social/users/verbrecher/statuses/113563040148435127"}, {"timestamp": "2024-12-31T23:02:29.801Z", "date_only": false, "value": "2024-12-31T23:02:29.801Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-38217", "record": "MSRC_CVE-2024-38217", "field": "document.tracking.generator.date"}, {"timestamp": "2025-02-23T02:10:59Z", "date_only": false, "value": "2025-02-23T02:10:59.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2024-38217", "field": "creation_timestamp", "uuid": "c3a8d6a4-1486-4a4e-8155-4babf6f5b6f2"}, {"timestamp": "2025-10-21T22:55:45.497Z", "date_only": false, "value": "2025-10-21T22:55:45.497Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-38217", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:33:06Z", "date_only": false, "value": "2025-10-22T00:33:06Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-78V4-HXHF-XQQV", "record": "GHSA-78V4-HXHF-XQQV", "field": "modified"}, {"timestamp": "2026-02-02T12:26:29.353Z", "date_only": false, "value": "2026-02-02T12:26:29.353558Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/90d730d2-db0a-40f2-9804-cc8b774af21d", "record": "CVE-2024-38217", "field": "creation_timestamp", "uuid": "4a5dea23-baf1-4724-a7ea-5b81eeef8366", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/90d730d2-db0a-40f2-9804-cc8b774af21d"}, {"timestamp": "2026-02-02T12:26:29.353Z", "date_only": false, "value": "2026-02-02T12:26:29.353558Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/90d730d2-db0a-40f2-9804-cc8b774af21d", "record": "CVE-2024-38217", "field": "creation_timestamp", "uuid": "a01cbef3-8621-4e82-8b50-98439da8afd1", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/90d730d2-db0a-40f2-9804-cc8b774af21d"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2024-38217", "field": "timestamps.recorded_at", "uuid": "06a2268a-f208-4d67-b79b-39a34d06d7a0", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-15T18:12:54.379Z", "date_only": false, "value": "2026-06-15T18:12:54.379228Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/wdormann/statuses/116755475429413960", "record": "CVE-2024-38217", "field": "creation_timestamp", "uuid": "5affcf60-f6ad-4027-be32-7bbf42bc671c", "url": "https://infosec.exchange/users/wdormann/statuses/116755475429413960"}, {"timestamp": "2026-06-19T12:46:35.305Z", "date_only": false, "value": "2026-06-19T12:46:35.305288Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6beac309-017e-459a-9769-1f50c38b8406", "record": "CVE-2024-38217", "field": "creation_timestamp", "uuid": "9b39e973-325a-4eac-b751-b2559e794868", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6beac309-017e-459a-9769-1f50c38b8406"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2024-38217", "field": "timestamps.recorded_at", "uuid": "de0e6d43-0f20-4265-b3b7-f102adcf550c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:14:24.721Z", "date_only": false, "value": "2026-06-23T11:14:24.721163Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/de0e6d43-0f20-4265-b3b7-f102adcf550c", "record": "CVE-2024-38217", "field": "creation_timestamp", "uuid": "bfc516ca-fea5-4b9e-8246-7c2ad9dfda44", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/de0e6d43-0f20-4265-b3b7-f102adcf550c"}, {"timestamp": "2026-06-23T14:05:57.869Z", "date_only": false, "value": "2026-06-23T14:05:57.869399Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9da293dd-7718-495f-b1f5-2f5b030346f9", "record": "CVE-2024-38217", "field": "creation_timestamp", "uuid": "c93f0be5-8d2c-4039-83dd-f299700a88f8", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9da293dd-7718-495f-b1f5-2f5b030346f9"}, {"timestamp": "2026-07-26T02:02:03.213Z", "date_only": false, "value": "2026-07-26T02:02:03.213041Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/3158", "record": "CVE-2024-38217", "field": "creation_timestamp", "uuid": "22fb07eb-9adc-4509-9deb-f2858891e4f8", "url": "https://t.me/EchelonEyes/3158"}, {"timestamp": "2026-07-27T00:00:43.346Z", "date_only": false, "value": "2026-07-27T00:00:43.346150Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/3158", "record": "CVE-2024-38217", "field": "creation_timestamp", "uuid": "bb8ce018-046a-4765-bc79-b5cad98fe79d", "url": "https://t.me/EchelonEyes/3158"}, {"timestamp": "2026-07-28T00:00:46.162Z", "date_only": false, "value": "2026-07-28T00:00:46.162795Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/3158", "record": "CVE-2024-38217", "field": "creation_timestamp", "uuid": "081e092b-c407-4184-a445-53f3d5684aaf", "url": "https://t.me/EchelonEyes/3158"}, {"timestamp": "2026-08-10T15:10:33.882Z", "date_only": false, "value": "2026-08-10T15:10:33.882Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-38217", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-10T15:10:33.882Z", "date_only": false, "value": "2026-08-10T15:10:33.882Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "cve-2024-38217", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-10T16:19:03.400Z", "date_only": false, "value": "2026-08-10T16:19:03.400", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-38217", "record": "FKIE_CVE-2024-38217", "field": "lastModified"}, {"timestamp": "2026-08-27T09:00:04.052Z", "date_only": false, "value": "2026-08-27T09:00:04.052612Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehaking/2801", "record": "CVE-2024-38217", "field": "creation_timestamp", "uuid": "fe2cea95-e749-49ce-8ce2-5035d8cee1f8", "url": "https://t.me/thehaking/2801"}]}