CVE-2024-38178 Analizi
Windows Scripting Engine (JScript9) bellek bozulmasi acigi. RisePro ve BlackGuard gibi stealerlar bu acigi kotu amacli web siteleri araciligiyla kurban makinelerine yuklenmek icin kullanmistir.
CVE-2024-38178
Windows Scripting Engine Memory Corruption vulnerability. JavaScript engine vulnerability in Edge browser in Internet Explorer mode. Drive-by download vector for stealers.
Vulnerability Profile
CVSS Score
7.5 / 10.0
Severity
High
Exploitation Status
⚠ Active Exploitation
Patch Status
✓ Patch Available
Affected Software
Windows Edge (IE Mode), Internet Explorer 11
Exploitation Method
Remote Code Execution
MITRE ATT&CK
T1189 - Drive-by Compromise