Chromium: CVE-2024-11113 Use after free in Accessibility

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2024 ) for more information.


Chromium: CVE-2024-11115 Insufficient policy enforcement in Navigation

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2024 ) for more information.


Chromium: CVE-2024-11112 Use after free in Media

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2024 ) for more information.


Chromium: CVE-2024-11117 Inappropriate implementation in FileSystem

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2024 ) for more information.


Chromium: CVE-2024-11114 Inappropriate implementation in Views

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2024 ) for more information.


CVE-2024-43639 Windows KDC Proxy Remote Code Execution Vulnerability

Updated the CVE title to better reflect the affected protocol and added an FAQ to explain that only Windows Servers that are configured with the [[MS-KKDCP]: Kerberos Key Distribution Center (KDC) Proxy Protocol](https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-kkdcp/5bcebb8d-b747-4ee5-9453-428aec1c5c38) are affected.


CVE-2024-43628 Windows Telephony Service Remote Code Execution Vulnerability

Information published.


CVE-2024-38264 Microsoft Virtual Hard Disk (VHDX) Denial of Service Vulnerability

Information published.


CVE-2024-43620 Windows Telephony Service Remote Code Execution Vulnerability

Information published.


CVE-2024-49000 SQL Server Native Client Remote Code Execution Vulnerability

Information published.


This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

AbuseIPDB Contributor Badge