CVE-2024-23441

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Jan 29, 2024
Updated: Feb 5, 2024
CWE ID 400
CWE ID 476

Summary

CVE-2024-23441: A Denial of Service vulnerability has been identified in Vba32 Antivirus v3.36.0. This issue arises due to the software's susceptibility to triggering the 0x2220A7 IOCTL code of the Vba32m64.sys driver, leading to a denial of service condition. Exploitation of this vulnerability may result in the targeted system becoming unresponsive or ceasing to function, preventing legitimate use. Users are advised to apply the necessary patches as soon as they become available to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share