CVE-2024-8067: falha de média gravidade em Helix Core
Unicode "best fit" argument injection
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.8epss 0.2%
In versions of Helix Core prior to 2024.1 Patch 2 (2024.1/2655224) a Windows ANSI API Unicode "best fit" argument injection was identified.
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N
Produtos afetados
Helix · Helix CoreCVEs relacionadas — Helix Core
No mesmo produto, das mais perigosas para as menos.
CVE-2023-45849CRITICALArbitrary Code Execution in Helix CoreEPSS 1.1%CVE-2023-5759HIGHUnauthenticated Remote Denial-of-Service via Buffer in Helix CoreEPSS 0.9%CVE-2023-35767HIGHUnauthenticated Remote Denial-of-Service via Shutdown Function in Helix CoreEPSS 0.9%CVE-2023-45319HIGHUnauthenticated Remote Denial-of-Service (Commit) in Helix Core EPSS 0.9%CVE-2024-10314HIGHUnauthenticated Denial of Service via Auto Generation FunctionEPSS 0.5%CVE-2024-10344HIGHUnauthenticated Denial of Service via Refuse FunctionEPSS 0.5%