Aug 2024: Scripting Engine Memory Corruption Vulnerability
CVE-2024-38178 Published on August 13, 2024
Scripting Engine Memory Corruption Vulnerability
Scripting Engine Memory Corruption Vulnerability
Under Active Exploitation
This vulnerability is under active exploitation.Known Exploited Vulnerability
This Microsoft Windows Scripting Engine Memory Corruption Vulnerability is part of CISA's list of Known Exploited Vulnerabilities. Microsoft Windows Scripting Engine contains a memory corruption vulnerability that allows unauthenticated attacker to initiate remote code execution via a specially crafted URL.
The following remediation steps are recommended / required by September 3, 2024: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Vulnerability Analysis
Weakness Type
What is an Object Type Confusion Vulnerability?
The program allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.
CVE-2024-38178 has been classified to as an Object Type Confusion vulnerability or weakness.
Products Associated with CVE-2024-38178
Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.
