Описание
WinDbg Remote Code Execution Vulnerability
Improper verification of cryptographic signature in .NET allows an authorized attacker to execute code over a network.
FAQ
According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?
Any authenticated attacker could trigger this vulnerability. It does not require admin or other elevated privileges.
According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to prepare the target environment to improve exploit reliability.
Возможность эксплуатации
Publicly Disclosed
Exploited
Latest Software Release
EPSS
7.5 High
CVSS3
Связанные уязвимости
Improper verification of cryptographic signature in .NET allows an authorized attacker to execute code over a network.
Microsoft Security Advisory CVE-2025-24043 | WinDbg Remote Code Execution Vulnerability
Уязвимость многоцелевого отладчика WinDbg, связанная с ошибками проверки криптографической подписи, позволяющая нарушителю выполнить удаленный код
EPSS
7.5 High
CVSS3