CVE-2024-43572—Microsoft Windows Management Console Remote Code Execution Vulnerability

Vulnerability Name

Microsoft Windows Management Console Remote Code Execution Vulnerability

Description

Microsoft Windows Management Console contains unspecified vulnerability that allows for remote code execution.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:

Unknown

Action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Additional Notes

• https://msrc.microsoft.com/update-guide/advisory/CVE-2024-43572
• https://nvd.nist.gov/vuln/detail/CVE-2024-43572

Related News Articles

• URGENT: Microsoft Patches 57 Security Flaws, Including 6 Actively Exploited Zero-DaysMarch 12, 2025
• New Malware Campaign Uses Cracked Software to Spread Lumma and ACR StealerFebruary 24, 2025
• Microsoft Issues Security Update Fixing 118 Flaws, Two Actively Exploited in the WildOctober 9, 2024
• Microsoft patches two zero-days exploited in the wild (CVE-2024-43573, CVE-2024-43572)October 8, 2024
• Microsoft October 2024 Patch Tuesday fixes 5 zero-days, 118 flawsOctober 8, 2024

Related Weaknesses

• CWE-707