CVE-2024-20099

Summary

CVE-2024-20099 is a newly discovered cybersecurity vulnerability affecting the Power software. This issue involves a missing bounds check leading to a possible out-of-bounds write, which can result in local privilege escalation with system execution privileges required. No user interaction is needed for exploitation, making it a serious concern for affected systems. The patch ID for mitigation is ALPS08997492, and the internal issue identifier is MSV-1625. Organizations using the Power software are urged to apply the patch as soon as possible to prevent potential exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.