{"vulnerability": "cve-2024-43532", "sightings": [{"uuid": "2123ad4a-1a80-4816-8fc9-4d153f7a7f9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-435325", "type": "seen", "source": "https://www.thezdi.com/blog/2024/10/8/the-october-2024-security-update-review", "content": "", "creation_timestamp": "2024-10-08T17:54:47.000000Z"}, {"uuid": "e26516a8-3575-474e-b597-b971159868b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43532", "type": "seen", "source": "https://www.thezdi.com/blog/2024/10/8/the-october-2024-security-update-review", "content": "", "creation_timestamp": "2024-10-08T17:54:47.000000Z"}, {"uuid": "07b55f17-8640-475c-b6c7-e721014a9944", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43532", "type": "seen", "source": "https://infosec.exchange/users/0patch/statuses/113470701686773635", "content": "", "creation_timestamp": "2024-11-12T15:31:51.390593Z"}, {"uuid": "e0038487-46ff-43b1-abd3-6af56852e557", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43532", "type": "published-proof-of-concept", "source": "https://t.me/CyberBulletin/1199", "content": "\u26a1\ufe0fCritical EoP Flaw in Microsoft\u2019s Remote Registry: Researcher Publishes PoC for CVE-2024-43532.\n\n#CyberBulletin", "creation_timestamp": "2024-10-22T14:46:17.000000Z"}, {"uuid": "7cb06914-1445-4bad-a1d5-55b6cc0d9e52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43532", "type": "published-proof-of-concept", "source": "https://t.me/HackerArsenal/603", "content": "https://www.akamai.com/blog/security-research/winreg-relay-vulnerability\n\nCall and Register \u2014 Relay Attack on WinReg RPC Client\n\nhttps://github.com/akamai/akamai-security-research/tree/main/PoCs/cve-2024-43532\n\n#\u5206\u6790 #github #poc", "creation_timestamp": "2024-10-23T19:29:44.000000Z"}, {"uuid": "e507c325-fd81-4389-98d2-03b8bbcb5a0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43532", "type": "published-proof-of-concept", "source": "https://t.me/HackerArsenal/580", "content": "#Red_Team_Tactics\n1. Bypassing UAC with SSPI Datagram Contexts\nhttps://github.com/antonioCoco/SspiUacBypass\n2. Call and Register - Relay Attack on WinReg RPC Client\nhttps://www.akamai.com/blog/security-research/winreg-relay-vulnerability\n]-> https://github.com/akamai/akamai-security-research/tree/main/PoCs/cve-2024-43532", "creation_timestamp": "2024-10-20T16:48:45.000000Z"}, {"uuid": "7d086bea-91b3-4cef-96b0-e71b582d2fa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43532", "type": "published-proof-of-concept", "source": "Telegram/74XbNTyUwF2B4MXU61M5oBrjYfLE_ydB7RIx5kz_w3oA1w", "content": "", "creation_timestamp": "2024-10-26T07:01:58.000000Z"}, {"uuid": "e850046f-6c69-4994-867e-9a7abbd08a24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43532", "type": "published-proof-of-concept", "source": "https://t.me/paiddpam/5692", "content": "\ud83d\udd14Call and Register \u2014 Relay Attack on WinReg RPC Client\n\nA critical vulnerability (CVE-2024-43532) has been identified in Microsoft\u2019s Remote Registry client. This flaw allows attackers to exploit insecure fallback mechanisms in the WinReg client, enabling them to relay authentication details and make unauthorized certificate requests through Active Directory Certificate Services (ADCS).\n\n\ud83d\udd17 Research:\nhttps://www.akamai.com/blog/security-research/winreg-relay-vulnerability\n\n\ud83d\udd17 RPC Visibility Tool:\nhttps://github.com/akamai/akamai-security-research/tree/main/rpc_toolkit/rpc_visibility\n\n\ud83d\udd17 PoC: \nhttps://github.com/akamai/akamai-security-research/tree/main/PoCs/cve-2024-43532\n\n#ad #adcs #rpc #ntlm #relay #etw #advapi", "creation_timestamp": "2024-10-26T07:01:58.000000Z"}, {"uuid": "f774b477-f8d3-4467-8365-222e99cbbd5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43532", "type": "published-proof-of-concept", "source": "https://t.me/InfoSecInsider/24134", "content": "\u26a1\ufe0fCritical EoP Flaw in Microsoft\u2019s Remote Registry: Researcher Publishes PoC for CVE-2024-43532.\n\n#CyberBulletin", "creation_timestamp": "2024-10-22T15:06:25.000000Z"}, {"uuid": "ea34352e-6676-41bf-a30a-cbae69e329d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43532", "type": "seen", "source": "https://t.me/sysadm_in_up/2290", "content": "PoC cve-2024-43532\n\nhttps://github.com/akamai/akamai-security-research/tree/main/PoCs/cve-2024-43532", "creation_timestamp": "2026-07-30T00:03:01.406267Z"}, {"uuid": "cdbb8ca0-3052-4335-96af-b069b9c9daa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43532", "type": "published-proof-of-concept", "source": "https://t.me/CyberBulletin/26132", "content": "\u26a1\ufe0fCritical EoP Flaw in Microsoft\u2019s Remote Registry: Researcher Publishes PoC for CVE-2024-43532.\n\n#CyberBulletin", "creation_timestamp": "2024-10-22T14:46:17.000000Z"}, {"uuid": "70dc37f3-4ac6-463b-996a-3f8a8b788956", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43532", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/3344", "content": "https://www.akamai.com/blog/security-research/winreg-relay-vulnerability\n\nCall and Register \u2014 Relay Attack on WinReg RPC Client\n\nhttps://github.com/akamai/akamai-security-research/tree/main/PoCs/cve-2024-43532\n\n#\u5206\u6790 #github #poc", "creation_timestamp": "2024-10-20T18:04:40.000000Z"}, {"uuid": "0a742597-c655-4d96-87ef-0d4d658d498a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43532", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11314", "content": "#Red_Team_Tactics\n1. Bypassing UAC with SSPI Datagram Contexts\nhttps://github.com/antonioCoco/SspiUacBypass\n2. Call and Register - Relay Attack on WinReg RPC Client\nhttps://www.akamai.com/blog/security-research/winreg-relay-vulnerability\n]-> https://github.com/akamai/akamai-security-research/tree/main/PoCs/cve-2024-43532", "creation_timestamp": "2024-10-23T00:48:15.000000Z"}, {"uuid": "68c02f12-e580-46fe-841d-9ba49be565ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43532", "type": "published-proof-of-concept", "source": "https://t.me/InfoSecInsider/521", "content": "\u26a1\ufe0fCritical EoP Flaw in Microsoft\u2019s Remote Registry: Researcher Publishes PoC for CVE-2024-43532.\n\n#CyberBulletin", "creation_timestamp": "2024-10-22T15:06:35.000000Z"}, {"uuid": "33f50d43-044b-4a00-8830-314953c56560", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43532", "type": "published-proof-of-concept", "source": "https://t.me/sysadm_in_up/2290", "content": "PoC cve-2024-43532\n\nhttps://github.com/akamai/akamai-security-research/tree/main/PoCs/cve-2024-43532", "creation_timestamp": "2026-08-04T00:00:06.643582Z"}, {"uuid": "6188ac1b-5a40-47af-b772-e4e01c38ea3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43532", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/1200", "content": "\u2728 Vulnerabilities & Exploits \u2728\n\nMicropatches Released for Remote Registry Service Elevation of Privilege Vulnerability (CVE-2024-43532)\n\n\u2014\n\nSummary:\n October 2024 Windows Updates brought a patch for CVE-2024-43532,\n a vulnerability in Windows Remote Registry Service that could \nallow an attacker with access to network communication between administrator's computer and computer under remote administration to hijack the network connection and obtain administrator's credentials. These could then be relayed to another server, for instance an Active Directory Certificate Server, and used for creating a new certificate for subsequent...\n\n\u2014\n\nSource: 0patch Blog\nPublished: 2024-11-12 14:58 | Author: Mitja Kolsek (noreply@blogger.com)\n\n#released #vulnerabilities__exploits #micropatches\n\nView Article", "creation_timestamp": "2026-08-09T05:00:04.836274Z"}, {"uuid": "af3a1d7d-38d1-41dd-acfd-b1dcdff892cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43532", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/1200", "content": "\u2728 Vulnerabilities & Exploits \u2728\n\nMicropatches Released for Remote Registry Service Elevation of Privilege Vulnerability (CVE-2024-43532)\n\n\u2014\n\nSummary:\n October 2024 Windows Updates brought a patch for CVE-2024-43532,\n a vulnerability in Windows Remote Registry Service that could \nallow an attacker with access to network communication between administrator's computer and computer under remote administration to hijack the network connection and obtain administrator's credentials. These could then be relayed to another server, for instance an Active Directory Certificate Server, and used for creating a new certificate for subsequent...\n\n\u2014\n\nSource: 0patch Blog\nPublished: 2024-11-12 14:58 | Author: Mitja Kolsek (noreply@blogger.com)\n\n#released #vulnerabilities__exploits #micropatches\n\nView Article", "creation_timestamp": "2026-08-10T00:00:33.794944Z"}, {"uuid": "4b426416-12a1-47dd-b60a-2292d08385f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43532", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpxs4bws3m2i", "content": "\ud83d\udccc CVE-2024-43532 - Remote Registry Service Elevation of Privilege Vulnerability https://www.cyberhub.blog/cves/CVE-2024-43532", "creation_timestamp": "2026-07-06T09:37:07.386418Z"}, {"uuid": "31c3636e-36c4-458a-b577-950eca634d70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43532", "type": "seen", "source": "https://t.me/sysadm_in_up/2290", "content": "PoC cve-2024-43532\n\nhttps://github.com/akamai/akamai-security-research/tree/main/PoCs/cve-2024-43532", "creation_timestamp": "2026-07-29T12:03:16.659613Z"}]}