CVE-2024-20119

Summary

CVE-2024-20119 is a newly disclosed vulnerability in the mms software that allows for a potential out-of-bounds write issue. This flaw arises from an inaccurate bounds check, which could result in local privilege escalation with system-level execution privileges. Unlike some vulnerabilities, user interaction is not a prerequisite for exploitation. The patch for this issue is identified as ALPS09062301, and it has been assigned the internal reference number MSV-1620.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.