CVE-2024-26234 Analizi
Windows Proxy Driver imza spoofing acigi. Saldirganlar bu acigi kullanarak imzali gorunen sahte kernel suruculer yukluyebiliyor. Ursnif kampanyalarinda kernel-level persistence saglamak icin kullanilmistir.
CVE-2024-26234
Windows Proxy Driver Spoofing vulnerability. Vulnerability used to provide driver-based persistence through malicious driver signing. Technique used by commercial malware vendors.
Vulnerability Profile
CVSS Score
6.7 / 10.0
Severity
Medium
Exploitation Status
⚠ Active Exploitation
Patch Status
✓ Patch Available
Affected Software
Windows 10/11, Windows Server
Exploitation Method
Privilege Escalation
MITRE ATT&CK
T1554 - Compromise Client Software Binary