CVE-2024-37968

Summary

CVE-2024-37968 is a newly disclosed Windows DNS spoofing vulnerability. Malicious actors can exploit this flaw to redirect users to fraudulent websites, potentially leading to data theft or other cyberattacks. The vulnerability resides in the way the DNS server in Windows handles certain types of queries, allowing an attacker to forge responses and manipulate DNS traffic. Successful exploitation does not require user interaction or advanced privileges, making it a significant threat to organizations and individuals using unpatched Windows systems. Microsoft is expected to release a patch to address this vulnerability soon. Until then, it is recommended that users apply workarounds or configure their networks to mitigate the risk of DNS spoofing attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.