Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2024-49147

Microsoft Update Catalog Elevation of Privilege Vulnerability

Description

Deserialization of untrusted data in Microsoft Update Catalog allows an unauthorized attacker to elevate privileges on the website’s webserver.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microsoft Microsoft Update Catalog

  • -affected

References