Loading...
Market
Which organization will first issue an advisory about CVSS 9.8 vulnerability by end of 2024?
2
Resolution / Starting Odds
CISA (Cybersecurity and Infrastructure Security Agency) • 25%
NCSC (National Cyber Security Centre) • 25%
CERT (Computer Emergency Response Team) • 25%
Other • 25%
Public advisories or warnings from cybersecurity organizations or government agencies
Story
CVSS 9.8 Vulnerability Bypasses Windows Driver Signature Enforcement, Allows Unsigned Kernel Drivers
Oct 28, 2024, 12:10 AM
A newly discovered vulnerability allows attackers to bypass Microsoft's Driver Signature Enforcement on fully patched Windows systems, enabling the installation of unsigned kernel drivers. This security flaw, rated CVSS 9.8, compromises the integrity of the operating system's security. The issue, first reported by multiple sources, highlights a significant risk for Windows users, as it can potentially be exploited to install kernel rootkits. This vulnerability adds to a series of recent security concerns, including a critical authentication bypass flaw in the wpDiscuz plugin (CVE-2024-9488) affecting over 80,000 sites, and another critical RCE flaw in VMware vCenter (CVE-2024-38812). Additionally, a vulnerability in the Common Log File System (CLFS) driver allows a local user to gain elevated privileges on Windows 11.
View original story
Similar markets
Yes • 50%
No • 50%
Apple • 25%
Microsoft • 25%
Third-party cybersecurity firm • 25%
No patch released • 25%
Financial • 25%
Healthcare • 25%
Government • 25%
Other • 25%
FBI • 25%
NSA • 25%
CISA • 25%
Australian Federal Police • 25%
0-10 • 25%
11-50 • 25%
51-100 • 25%
101+ • 25%
Yes • 50%
No • 50%
Yes • 50%
No • 50%
Fortune 500 Company • 25%
Government Agency • 25%
Educational Institution • 25%
Other • 25%
Government Agency • 25%
Healthcare Organization • 25%
Financial Institution • 25%
Other • 25%
Yes • 50%
No • 50%
Google • 25%
Microsoft • 25%
Amazon • 25%
Other • 25%