Talos discovers Microsoft kernel mode driver vulnerabilities that could lead to SYSTEM privileges; Seven other critical issues disclosed
Summary: Microsoft's August Patch Tuesday fixed 87 vulnerabilities, seven rated critical, including six that were being actively exploited and one, CVE-2024-21302 in Microsoft Office, that had already been publicly disclosed. Cisco Talos found four of the patched flaws - CVE-2024-38184, CVE-2024-38185, CVE-2024-38186 and CVE-2024-38187 - elevation of privilege bugs in the Windows kernel-mode driver that could give an attacker SYSTEM-level privileges.
Why it matters: The most serious fix, CVE-2024-38063, is a Windows TCP/IP remote code execution flaw scored 9.8 out of 10 and listed as more likely to be exploited, and an unauthenticated attacker can trigger it by repeatedly sending crafted IPv6 packets - only systems with IPv6 disabled are not susceptible.