CVE-2024-21343

Summary

CVE-2024-21377 is a newly disclosed vulnerability affecting Windows DNS servers. This information disclosure issue allows attackers to obtain sensitive information by manipulating specific DNS requests. An unauthenticated attacker can potentially gain knowledge about the existence and configuration of various internal systems, increasing the risk of further exploitation. Microsoft has released a security advisory and patch to mitigate this vulnerability, urging administrators to apply the update promptly to safeguard their networks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.