CISA ADDS MICROSOFT WINDOWS KERNEL BUG USED BY LAZARUS APT TO ITS KNOWN EXPLOITED VULNERABILITIES CATALOG

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a Microsoft Windows Kernel vulnerability to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the CVE-2024-21338 (CVSS Score 7.8) Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control vulnerability to its Known Exploited Vulnerabilities (KEV) catalog. An attacker can exploit this vulnerability to gain SYSTEM privileges. […]

access access control agency apt breaking news bug catalog cisa control cve cve-2024-21338 cvss cvss score cybersecurity exploited exploited vulnerabilities exposed hacking information security news infrastructure infrastructure security it information security kernel kernel bug known exploited known exploited vulnerabilities known exploited vulnerabilities catalog lazarus lazarus apt malware microsoft microsoft windows pierluigi paganini score security vulnerabilities vulnerability windows windows kernel