← Database

CVE-2024-49147

CRITICAL CVSS: 9.3 Published: 2024-12-12 Modified: 2026-06-17

Description

Deserialization of untrusted data in Microsoft Update Catalog allows an unauthorized attacker to elevate privileges on the website’s webserver.

Affected Platforms

Microsoft Update Catalog

Weakness Type

CWE-502

References