ACE vulnerabilities in Microsoft Open Source Software

Description

Remote code execution vulnerabilities were found in Microsoft Open Source Software. Malicious users can exploit these vulnerabilities to execute arbitrary code.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in TorchGeo can be exploited remotely to execute arbitrary code.
2. A remote code execution vulnerability in LightGBM can be exploited remotely to execute arbitrary code.

Original advisories

• CVE-2024-49048

• CVE-2024-43598

CVE list

• CVE-2024-49048
  high
• CVE-2024-43598
  high

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com