CVE-2024-43487

MediumCVSS 6.5/10Last modified Aug 10, 2026

Description

Windows Mark of the Web Security Feature Bypass Vulnerability

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-693

Affected software

No affected versions have been published.

Timeline

Published
Sep 10, 2024
Last modified
Aug 10, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-434889.8Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remotCVE-2024-434898.8Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityCVE-2024-43497.3A vulnerability has been found in SourceCodester Pisay Online E-Learning System 1.0 and classified as critical. Affected by this vulnerabiliCVE-2024-434919.8Microsoft is aware of a vulnerability in Servicing Stack that has rolled back the fixes for some vulnerabilities affecting Optional ComponenCVE-2024-434927.8Microsoft AutoUpdate (MAU) Elevation of Privilege VulnerabilityCVE-2024-434957.3Windows libarchive Remote Code Execution VulnerabilityCVE-2024-434968.8Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityCVE-2024-434977.8DeepSpeed Remote Code Execution VulnerabilityCVE-2024-434989.8.NET and Visual Studio Remote Code Execution VulnerabilityCVE-2024-434997.5.NET and Visual Studio Denial of Service VulnerabilityCVE-2024-43504.8Concrete CMS versions 9.0.0 to 9.3.2 and below 8.5.18 are vulnerable to Stored XSS in RSS Displayer when user input is stored and later embeCVE-2024-435005.5Windows Resilient File System (ReFS) Information Disclosure Vulnerability
CVE-2024-43487: Medium severity, CVSS 6.5 | Vulnix