VULNERABILITY INTELLIGENCE

CVE-2024-49147

CVSS score9.3 CRITICAL

EPSS probability1.29%

CISA KEVNot currently listed

Published2024-12-12

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N

Description

Deserialization of untrusted data in Microsoft Update Catalog allows an unauthorized attacker to elevate privileges on the website’s webserver.