VULNERABILITY INTELLIGENCE
CVE-2024-37284
CVSS score5.5 MEDIUM
EPSS probability0.16%
CISA KEVNot currently listed
Published2025-01-21
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Description
Improper handling of alternate encoding occurs when Elastic Defend on Windows systems attempts to scan a file or process encoded as a multibyte character. This leads to an uncaught exception causing Elastic Defend to crash which in turn will prevent it from quarantining the file and/or killing the process.
Weakness classification
- security@elastic.co: CWE-755