CVE-2024-43614: falha de média gravidade em Microsoft Defender for Endpoint for Linux
Microsoft Defender for Endpoint for Linux Spoofing Vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.5epss 0.6%
Relative path traversal in Microsoft Defender for Endpoint allows an authorized attacker to perform spoofing locally.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Produtos afetados
Microsoft · Microsoft Defender for Endpoint for LinuxCVEs relacionadas — Microsoft Defender for Endpoint for Linux
No mesmo produto, das mais perigosas para as menos.
CVE-2022-23278MEDIUMMicrosoft Defender for Endpoint Spoofing VulnerabilityEPSS 1.9%CVE-2022-33637MEDIUMMicrosoft Defender for Endpoint Tampering VulnerabilityEPSS 1.7%CVE-2025-47161HIGHMicrosoft Defender for Endpoint Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2026-21537HIGHMicrosoft Defender for Endpoint Linux Extension Remote Code Execution VulnerabilityEPSS 0.5%CVE-2025-26684MEDIUMMicrosoft Defender Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2025-59497HIGHMicrosoft Defender for Linux Denial of Service VulnerabilityEPSS 0.2%