CWE-670 CVEs · Exploited

Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 2 100.0% Withdrawn CVE 0 0.0%

Critical 0 0.0% High 1 50.0% Medium 1 50.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%

blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 2 100.0% not established 0 0.0% unrecorded 0 0.0%

Exploited 2 100.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%

split by StatusSeverityProtectionExploit maturity peak 1 / month

Aug 231 Not applicable1 Medium1 not blocked1 Exploited1 Sep 230 Oct 230 Nov 230 Dec 230 Jan 240 Feb 240 Mar 240 Apr 240 May 240 Jun 241 Not applicable1 High1 not blocked1 Exploited1

Aug 23Sep 23Oct 23Nov 23Dec 23Jan 24Feb 24Mar 24Apr 24May 24Jun 24

CVE	Severity	Published▾	Status	Exploitation	Description
CVE-2024-32896	High	2024-06-13	Not applicable	Exploited	there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
CVE-2023-28711	Medium	2023-08-11	Not applicable	Exploited	Insufficient control flow management in the Hyperscan Library maintained by Intel(R) before version 5.4.1 may allow an authenticated user to potentially enable denial of service via local access.

CVE

Severity

Published▾

Status

Exploitation

Description

CVE-2024-32896

High

2024-06-13

Not applicable

Exploited

there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

CVE-2023-28711

Medium

2023-08-11

Not applicable

Exploited

Insufficient control flow management in the Hyperscan Library maintained by Intel(R) before version 5.4.1 may allow an authenticated user to potentially enable denial of service via local access.