Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2024-38028: Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability

How could an attacker exploit this vulnerability?

To exploit this vulnerability, a victim machine must be running a performance counter collection tool such as Performance Monitor to collect performance counter data from an attacker machine. An attacker with local admin authority on the attacker machine could run malicious code remotely in the victim machine’s performance counter data collector process.

Microsoft Security Response Center
#vulnerability#mac#windows#microsoft#rce#auth#Windows Performance Monitor#Security Vulnerability

Microsoft Security Response Center: Latest News

CVE-2024-11395: Chromium: CVE-2024-11395 Type Confusion in V8