CVE-2024-0771

Summary

CVE-2024-0771 is a newly disclosed vulnerability affecting Nsasoft Product Key Explorer version 4.0.9. This issue lies within the Registration Handler component and arises from a memory corruption flaw triggered by manipulating the Name/Key argument. An attacker must be in a local environment to exploit this vulnerability, which has already been made public. Despite early contact, the vendor has not responded to disclosure attempts. This vulnerability, identified as VDB-251671, poses a significant risk to users who have not yet patched their systems.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.