ZeroDay Findings
Sign inSign up

Every 24 hours

Tech

Original briefings on what changed in security. Each story has a small illustration matched to what it covers, a short structure, and links to the catalog records and public identifiers it discusses.

Filter by vulnerability, fix, incident, intel, or research.

  1. Research · Mar 12, 2024

    Critical Privilege Escalation Vulnerability in Microsoft Windows Error Reporting Service

    A serious vulnerability in the Microsoft Windows Error Reporting Service has been identified, allowing local attackers to escalate privileges to SYSTEM level.

    What changed

    A significant security flaw has been discovered in the Microsoft Windows Error Reporting Service. This vulnerability involves improper privilege management, which could enable local attackers with user permissions to escalate their privileges to SYSTEM level.

    This issue poses a substantial risk, as it could allow unauthorized users to execute arbitrary code with elevated privileges, potentially compromising the entire system.

    Who is affected

    The vulnerability primarily affects users of Microsoft Windows 10 version 1507. Organizations relying on this version of Windows should be particularly vigilant.

    Local attackers with user permissions could exploit this vulnerability, making it critical for users to assess their security posture.

    • Microsoft Windows 10 version 1507
    • Local users with standard permissions
    • Organizations using outdated Windows versions

    What to do

    To mitigate the risks associated with this vulnerability, users should ensure their systems are updated to the latest supported version of Windows. Regularly applying security patches is essential.

    Additionally, organizations should review their user permission settings and limit access rights to reduce the potential for exploitation.

    • Update to the latest version of Windows
    • Apply all relevant security patches
    • Review and restrict user permissions

  2. Research · Mar 12, 2024

    Critical SQL Injection Vulnerability in Fortinet FortiClient EMS

    A significant SQL injection vulnerability has been discovered in Fortinet's FortiClient EMS, affecting multiple versions and allowing unauthorized command execution.

    What changed

    Fortinet has identified a serious SQL injection vulnerability in its FortiClient Enterprise Management Server (EMS). This flaw, present in versions 7.2.0 through 7.2.2 and 7.0.1 through 7.0.10, allows attackers to execute unauthorized commands by sending specially crafted packets.

    This vulnerability underscores the importance of robust input validation and the need for organizations to stay updated with their software versions to mitigate potential risks.

    Who is affected

    Organizations utilizing Fortinet FortiClient EMS are at risk due to this vulnerability. The following groups should take immediate note:

    Companies relying on FortiClient EMS for endpoint management, particularly those using versions 7.2.0 through 7.2.2 and 7.0.1 through 7.0.10, are directly affected.

    • Fortinet FortiClient EMS version 7.2.0 to 7.2.2
    • Fortinet FortiClient EMS version 7.0.1 to 7.0.10
    • Organizations managing endpoints with Fortinet products

    What to do

    To protect against this vulnerability, it is crucial for affected organizations to take immediate action. Updating to the latest version of FortiClient EMS is highly recommended.

    Additionally, organizations should review their security policies and practices to ensure they are equipped to handle such vulnerabilities in the future.

    • Upgrade to the latest FortiClient EMS version immediately.
    • Implement strict input validation measures.
    • Regularly audit and monitor systems for vulnerabilities.