Unauthorized Elevation of Privileges in Microsoft Update Catalog via Deserialization of Untrusted Data

CVE-2024-49147

Summary

The vulnerability involves the deserialization of untrusted data within the Microsoft Update Catalog. This flaw could allow an unauthorized attacker to exploit the web server hosting the catalog, potentially enabling the attacker to elevate their privileges. As a result, it poses a significant security risk for users accessing the Update Catalog, with potential implications for system integrity and user data protection.

References