Loading...
Market
Which vulnerability will Microsoft prioritize for patching after CVSS 9.8 issue by February 2025?
2
Resolution / Starting Odds
wpDiscuz plugin flaw (CVE-2024-9488) • 25%
VMware vCenter RCE flaw (CVE-2024-38812) • 25%
CLFS driver privilege escalation • 25%
Other • 25%
Microsoft's official patch release notes or security bulletins
Story
CVSS 9.8 Vulnerability Bypasses Windows Driver Signature Enforcement, Allows Unsigned Kernel Drivers
Oct 28, 2024, 12:10 AM
A newly discovered vulnerability allows attackers to bypass Microsoft's Driver Signature Enforcement on fully patched Windows systems, enabling the installation of unsigned kernel drivers. This security flaw, rated CVSS 9.8, compromises the integrity of the operating system's security. The issue, first reported by multiple sources, highlights a significant risk for Windows users, as it can potentially be exploited to install kernel rootkits. This vulnerability adds to a series of recent security concerns, including a critical authentication bypass flaw in the wpDiscuz plugin (CVE-2024-9488) affecting over 80,000 sites, and another critical RCE flaw in VMware vCenter (CVE-2024-38812). Additionally, a vulnerability in the Common Log File System (CLFS) driver allows a local user to gain elevated privileges on Windows 11.
View original story
Similar markets
Kernel Rootkit • 25%
SSDT Hook • 25%
Infinityhook • 25%
Other • 25%
macOS • 33%
Linux • 33%
Both simultaneously • 33%
August 2024 Update • 25%
September 2024 Update • 25%
October 2024 Update • 25%
Later Update • 25%
Yes • 50%
No • 50%
Yes • 50%
No • 50%
Yes • 50%
No • 50%
Yes • 50%
No • 50%
Apple • 25%
Microsoft • 25%
Third-party cybersecurity firm • 25%
No patch released • 25%
