{"metadata": {"vulnerability": "CVE-2024-27443", "count": 55, "kinds": {"milestone": 4, "sighting": 28, "kev": 11, "other": 12}, "linked_omitted": 0}, "data": [{"timestamp": "2024-02-26T00:00:00Z", "date_only": false, "value": "2024-02-26T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-27443", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-02-26T06:02:26.699Z", "date_only": false, "value": "2024-02-26T06:02:26.699975Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-27443", "record": "GSD-2024-27443", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-02-28T00:00:00Z", "date_only": false, "value": "2024-02-28T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0172", "record": "CERTFR-2024-AVI-0172", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2024-08-12T00:00:00Z", "date_only": false, "value": "2024-08-12T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-27443", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-08-12T15:03:02.447Z", "date_only": false, "value": "2024-08-12T15:03:02.447Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2024-27443", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-12T15:15:20Z", "date_only": false, "value": "2024-08-12T15:15:20Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-QRVG-MG33-Q843", "record": "GHSA-QRVG-MG33-Q843", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2024-08-12T15:15:20.283Z", "date_only": false, "value": "2024-08-12T15:15:20.283", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-27443", "record": "FKIE_CVE-2024-27443", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-08-12T15:30:53Z", "date_only": false, "value": "2024-08-12T15:30:53Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-QRVG-MG33-Q843", "record": "GHSA-QRVG-MG33-Q843", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-08-12T18:27:16Z", "date_only": false, "value": "2024-08-12T18:27:16.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/2848", "record": "CVE-2024-27443", "field": "creation_timestamp", "uuid": "8c3d2b4b-2a9e-4a8c-9420-f69544b4e77c", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-27443 - Zimbra Collaboration ZCS Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-27443 \nPublished : Aug. 12, 2024, 3:15 p.m. | 42\u00a0minutes ago \nDescription : An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. A Cross-Site Scripting (XSS) vulnerability exists in the CalendarInvite feature of the Zimbra webmail classic user interface, because of improper input validation in the handling of the calendar header. An attacker can exploit this via an email message containing a crafted calendar header with an embedded XSS payload. When a victim views this message in the Zimbra webmail classic interface, the payload is executed in the context of the victim's session, potentially leading to execution of arbitrary JavaScript code. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/2848"}, {"timestamp": "2025-05-16T21:02:20.347Z", "date_only": false, "value": "2025-05-16T21:02:20.347084Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lpcwgiwche26", "record": "CVE-2024-27443", "field": "creation_timestamp", "uuid": "f6336a2f-48ab-4232-bf28-cc0d5e9f31da", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lpcwgiwche26"}, {"timestamp": "2025-05-19T00:00:00Z", "date_only": false, "value": "2025-05-19T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2024-27443", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "78c96cf4-f81c-44f5-9158-824c4191f9d0", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-05-19T00:00:00Z", "date_only": true, "value": "2025-05-19", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-27443", "field": "containers.adp.0.metrics.2.other.content.dateAdded"}, {"timestamp": "2025-05-19T00:00:00Z", "date_only": true, "value": "2025-05-19", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2024-27443", "field": "evidence.0.details.date_added", "uuid": "78c96cf4-f81c-44f5-9158-824c4191f9d0", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-05-19T00:00:00Z", "date_only": false, "value": "2025-05-19T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2024-27443", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "78c96cf4-f81c-44f5-9158-824c4191f9d0", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-05-19T00:00:00Z", "date_only": false, "value": "2025-05-19T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2024-27443", "field": "status.status_updated_at", "uuid": "78c96cf4-f81c-44f5-9158-824c4191f9d0", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-05-19T00:00:00Z", "date_only": false, "value": "2025-05-19T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-27443", "field": "containers.adp.0.timeline.0.time", "text": "CVE-2024-27443 added to CISA KEV"}, {"timestamp": "2025-05-19T18:00:16.543Z", "date_only": false, "value": "2025-05-19T18:00:16.543424Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lpk5nr2fwx23", "record": "CVE-2024-27443", "field": "creation_timestamp", "uuid": "4d53c2ea-2e4b-4aa3-8f7b-a1c913a1d4a1", "url": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lpk5nr2fwx23"}, {"timestamp": "2025-05-19T18:05:16.930Z", "date_only": false, "value": "2025-05-19T18:05:16.930291Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lpk5wpwx3b2b", "record": "CVE-2024-27443", "field": "creation_timestamp", "uuid": "d73cf5d0-6ef8-448d-ab53-a16e2b5cfe67", "url": "https://bsky.app/profile/buherator.bsky.social/post/3lpk5wpwx3b2b"}, {"timestamp": "2025-05-19T19:16:30.207Z", "date_only": false, "value": "2025-05-19T19:16:30.207720Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/114536099967876264", "record": "CVE-2024-27443", "field": "creation_timestamp", "uuid": "599f226b-125d-4be8-9303-32d5096e3f3d", "url": "https://infosec.exchange/users/cR0w/statuses/114536099967876264"}, {"timestamp": "2025-05-19T19:56:24.036Z", "date_only": false, "value": "2025-05-19T19:56:24.036289Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/4040099", "record": "CVE-2024-27443", "field": "creation_timestamp", "uuid": "16013cdc-5237-46e5-82c8-47433e477e46", "url": "https://feedsin.space/feed/CISAKevBot/items/4040099"}, {"timestamp": "2025-05-19T22:39:46Z", "date_only": false, "value": "2025-05-19T22:39:46.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16947", "record": "CVE-2024-27443", "field": "creation_timestamp", "uuid": "461cc5dd-2d5e-4f0d-859e-38bec8b46cd0", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-27443\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. A Cross-Site Scripting (XSS) vulnerability exists in the CalendarInvite feature of the Zimbra webmail classic user interface, because of improper input validation in the handling of the calendar header. An attacker can exploit this via an email message containing a crafted calendar header with an embedded XSS payload. When a victim views this message in the Zimbra webmail classic interface, the payload is executed in the context of the victim's session, potentially leading to execution of arbitrary JavaScript code.\n\ud83d\udccf Published: 2024-08-12T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-19T22:20:23.027Z\n\ud83d\udd17 References:\n1. https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.7#Security_Fixes\n2. https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P39#Security_Fixes", "url": "https://t.me/DarkWebInformer_CVEAlerts/16947"}, {"timestamp": "2025-05-20T08:17:30.969Z", "date_only": false, "value": "2025-05-20T08:17:30.969090Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3lplnk5is3s2w", "record": "CVE-2024-27443", "field": "creation_timestamp", "uuid": "72a8dbd6-cec9-499a-b1ae-1f3c536f34ab", "url": "https://bsky.app/profile/basefortify.bsky.social/post/3lplnk5is3s2w"}, {"timestamp": "2025-05-20T08:17:32.496Z", "date_only": false, "value": "2025-05-20T08:17:32.496610Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3lplnkafeyc2w", "record": "CVE-2024-27443", "field": "creation_timestamp", "uuid": "fb54ee5e-5a6d-4877-8b91-1216c7e338b6", "url": "https://bsky.app/profile/basefortify.bsky.social/post/3lplnkafeyc2w"}, {"timestamp": "2025-05-20T08:17:33.975Z", "date_only": false, "value": "2025-05-20T08:17:33.975124Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3lplnkflv4c2w", "record": "CVE-2024-27443", "field": "creation_timestamp", "uuid": "3b6a7128-8c7c-4d4f-8787-4af021e26e7b", "url": "https://bsky.app/profile/basefortify.bsky.social/post/3lplnkflv4c2w"}, {"timestamp": "2025-05-20T21:02:21.417Z", "date_only": false, "value": "2025-05-20T21:02:21.417601Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lpmyc6cy4u2c", "record": "CVE-2024-27443", "field": "creation_timestamp", "uuid": "eb5d2b74-6366-437a-9b24-75d4d898efe7", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lpmyc6cy4u2c"}, {"timestamp": "2025-05-21T03:55:36.220Z", "date_only": false, "value": "2025-05-21T03:55:36.220790Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-27443", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2025-05-21T03:55:36.220Z", "date_only": false, "value": "2025-05-21T03:55:36.220790Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-27443", "record": "FKIE_CVE-2024-27443", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-05-21T13:10:32Z", "date_only": false, "value": "2025-05-21T13:10:32+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2024-27443", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "558f98b2-f184-4f1b-8757-222388801bdb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-05-21T13:10:32Z", "date_only": false, "value": "2025-05-21T13:10:32+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2024-27443", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "558f98b2-f184-4f1b-8757-222388801bdb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-05-21T13:10:32Z", "date_only": false, "value": "2025-05-21T13:10:32+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2024-27443", "field": "status.status_updated_at", "uuid": "558f98b2-f184-4f1b-8757-222388801bdb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-05-21T13:10:32.092Z", "date_only": false, "value": "2025-05-21T13:10:32.092Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2024-27443", "field": "evidence.0.details.added_date", "uuid": "558f98b2-f184-4f1b-8757-222388801bdb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-05-24T14:28:54Z", "date_only": false, "value": "2025-05-24T14:28:54.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_News/4830", "record": "CVE-2024-27443", "field": "creation_timestamp", "uuid": "ea5ba86f-194b-4ada-b304-1ec1ce84c4fc", "content": "\ud83d\udea8 News Alert!\n\nSource: Hackread \u2013 Latest Cybersecurity, Hacking News, Tech, AI & Crypto\nTitle: Zimbra CVE-2024-27443 XSS Flaw Hits 129K Servers, Sednit Suspected\nLink: https://hackread.com/zimbra-cve-2024-27443-xss-flaw-hit-sednit-servers/", "url": "https://t.me/DarkWebInformer_News/4830"}, {"timestamp": "2025-05-24T15:11:12.775Z", "date_only": false, "value": "2025-05-24T15:11:12.775891Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lpwgk2cixd2f", "record": "CVE-2024-27443", "field": "creation_timestamp", "uuid": "0282b75e-efd2-4e48-841e-f008a01deebf", "url": "https://bsky.app/profile/nimblenerd.social/post/3lpwgk2cixd2f"}, {"timestamp": "2025-05-24T16:03:13Z", "date_only": false, "value": "2025-05-24T16:03:13.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/TengkorakCyberCrewzz/2537", "record": "CVE-2024-27443", "field": "creation_timestamp", "uuid": "9663b666-5a7d-4439-8931-24e11cfe3ce2", "content": "Zimbra CVE-2024-27443 XSS Flaw Hits 129K Servers, Sednit Suspected \u2013 hackread.com\n\nSat, 24 May 2025 22:28:08", "url": "https://t.me/TengkorakCyberCrewzz/2537", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-05-24T18:03:13Z", "date_only": false, "value": "2025-05-24T18:03:13.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/MalaysiaHacktivistz/13415", "record": "CVE-2024-27443", "field": "creation_timestamp", "uuid": "908c6896-aa7f-4309-a907-d24e4726666c", "content": "Zimbra CVE-2024-27443 XSS Flaw Hits 129K Servers, Sednit Suspected \u2013 hackread.com\n\nSat, 24 May 2025 22:28:08", "url": "https://t.me/MalaysiaHacktivistz/13415", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-05-24T18:03:13Z", "date_only": false, "value": "2025-05-24T18:03:13.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/MalaysiaHacktivistz/4396", "record": "CVE-2024-27443", "field": "creation_timestamp", "uuid": "5cfb5b68-d0b4-4414-8a76-7bb039357a26", "content": "Zimbra CVE-2024-27443 XSS Flaw Hits 129K Servers, Sednit Suspected \u2013 hackread.com\n\nSat, 24 May 2025 22:28:08", "url": "https://t.me/MalaysiaHacktivistz/4396", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-05-25T04:12:24.532Z", "date_only": false, "value": "2025-05-25T04:12:24.532839Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lpxs367z5ot2", "record": "cve-2024-27443", "field": "creation_timestamp", "uuid": "f371afe4-f8b5-4ade-b26c-23bf6b8d7af2", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lpxs367z5ot2"}, {"timestamp": "2025-05-25T09:15:36.155Z", "date_only": false, "value": "2025-05-25T09:15:36.155166Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lpyd4tr747o2", "record": "cve-2024-27443", "field": "creation_timestamp", "uuid": "98066a4d-d0eb-4936-b051-ed342584eea1", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lpyd4tr747o2"}, {"timestamp": "2025-05-25T23:10:57.768Z", "date_only": false, "value": "2025-05-25T23:10:57.768741Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lpzrstjd4c2k", "record": "CVE-2024-27443", "field": "creation_timestamp", "uuid": "a18daa2b-e0fd-433c-9e52-89931582ebfe", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lpzrstjd4c2k"}, {"timestamp": "2025-05-27T13:12:14.671Z", "date_only": false, "value": "2025-05-27T13:12:14.671094Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/patrickcmiller/statuses/114579966132944084", "record": "cve-2024-27443", "field": "creation_timestamp", "uuid": "c970af17-08dc-48ba-b255-2f0a0b068846", "url": "https://infosec.exchange/users/patrickcmiller/statuses/114579966132944084"}, {"timestamp": "2025-05-27T13:12:15.994Z", "date_only": false, "value": "2025-05-27T13:12:15.994750Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3lq5rc4opmz26", "record": "CVE-2024-27443", "field": "creation_timestamp", "uuid": "ec410002-c40f-4ba1-bfc2-812b045d278d", "url": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3lq5rc4opmz26"}, {"timestamp": "2025-06-09T00:00:00Z", "date_only": true, "value": "2025-06-09", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2024-27443", "field": "evidence.0.details.due_date", "uuid": "78c96cf4-f81c-44f5-9158-824c4191f9d0", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-09-28T08:23:31Z", "date_only": false, "value": "2025-09-28T08:23:31.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2024-27443", "field": "creation_timestamp", "uuid": "7eb95cbc-c891-4c75-b6a9-daebe674d876"}, {"timestamp": "2025-09-29T03:12:14Z", "date_only": false, "value": "2025-09-29T03:12:14.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2024-27443", "field": "creation_timestamp", "uuid": "abb2da53-2ccd-4890-97f8-1c791b8b96a6"}, {"timestamp": "2025-10-21T22:55:48.688Z", "date_only": false, "value": "2025-10-21T22:55:48.688Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-27443", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T22:55:48.688Z", "date_only": false, "value": "2025-10-21T22:55:48.688Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-27443", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:33:05Z", "date_only": false, "value": "2025-10-22T00:33:05Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-QRVG-MG33-Q843", "record": "GHSA-QRVG-MG33-Q843", "field": "modified", "linked_record": true}, {"timestamp": "2025-10-31T21:02:46.759Z", "date_only": false, "value": "2025-10-31T21:02:46.759249Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m4jern46tk2j", "record": "CVE-2024-27443", "field": "creation_timestamp", "uuid": "7bcde1ea-77f1-4799-9bd6-05653e15a6e0", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m4jern46tk2j"}, {"timestamp": "2026-02-02T12:26:00.551Z", "date_only": false, "value": "2026-02-02T12:26:00.551112Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/78c96cf4-f81c-44f5-9158-824c4191f9d0", "record": "CVE-2024-27443", "field": "creation_timestamp", "uuid": "8002978c-dece-4ab1-9743-cf797dcff1f7", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/78c96cf4-f81c-44f5-9158-824c4191f9d0", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-17T07:19:54.627Z", "date_only": false, "value": "2026-06-17T07:19:54.627", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-27443", "record": "FKIE_CVE-2024-27443", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-06-19T12:46:15.670Z", "date_only": false, "value": "2026-06-19T12:46:15.670020Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/edb5c00d-b26c-40ef-8a4b-6b9e89061f95", "record": "CVE-2024-27443", "field": "creation_timestamp", "uuid": "7c79381b-657f-4e9c-aa2a-07543e15e4a3", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/edb5c00d-b26c-40ef-8a4b-6b9e89061f95", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2024-27443", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "558f98b2-f184-4f1b-8757-222388801bdb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:04:01.240Z", "date_only": false, "value": "2026-06-23T14:04:01.240293Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/558f98b2-f184-4f1b-8757-222388801bdb", "record": "CVE-2024-27443", "field": "creation_timestamp", "uuid": "2ecb9d51-bbcf-45cc-8aef-5aedfb0e5314", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/558f98b2-f184-4f1b-8757-222388801bdb", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-26T02:03:02.620Z", "date_only": false, "value": "2026-07-26T02:03:02.620989Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Positive_Technologies/3595", "record": "CVE-2024-27443", "field": "creation_timestamp", "uuid": "f80025eb-0e9a-41fa-b02e-21c8db3f6f11", "content": "\ud83e\udeb2 \u0418\u044e\u043d\u044c \u0432 \u0440\u0430\u0437\u0433\u0430\u0440\u0435, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442 \u2014 \u0441\u0430\u043c\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0434\u043b\u044f \u0435\u0436\u0435\u043c\u0435\u0441\u044f\u0447\u043d\u043e\u0433\u043e \u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u0442 \u043d\u0430\u0448\u0438\u0445 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043e\u0432\n\n\u0412 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u043e\u043d\u0438 \u043e\u0442\u043d\u0435\u0441\u043b\u0438 \u043a \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u043c \u0441\u0435\u043c\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0412 \u0438\u0445 \u0447\u0438\u0441\u043b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Microsoft, \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0435 Apache, \u0430\u0440\u0445\u0438\u0432\u0430\u0442\u043e\u0440\u0435 7-Zip \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b MDaemon \u0438 Synacore. \u0415\u0441\u043b\u0438 \u0432\u044b \u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0435\u0441\u044c MaxPatrol VM, \u0442\u043e \u0443\u0436\u0435 \u0437\u043d\u0430\u0435\u0442\u0435 \u043e\u0431\u043e \u0432\u0441\u0435\u0445 \u043d\u043e\u0432\u044b\u0445 \u0443\u0433\u0440\u043e\u0437\u0430\u0445, \u0432\u0435\u0434\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u043d\u0438\u0445 \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u0435\u0442 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 12 \u0447\u0430\u0441\u043e\u0432 \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u0438\u0445 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Windows\n\n\u041f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043e\u043a\u043e\u043b\u043e \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0441 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u043c\u0438 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438 \u044d\u0442\u043e\u0439 \u041e\u0421 (\u0441 \u0441\u0430\u043c\u044b\u0445 \u0440\u0430\u043d\u043d\u0438\u0445 \u0438 \u0434\u043e Windows 10, Windows 11 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e).\n\n1\ufe0f\u20e3 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 \u044f\u0434\u0440\u0430 (DWM Core Library) \u2014 CVE-2025-30400 (CVSS \u2014 7,8)\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043f\u043e\u043b\u0443\u0447\u0438\u0432 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443, \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f SYSTEM \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n2\ufe0f\u20e3 \u0438 3\ufe0f\u20e3 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0436\u0443\u0440\u043d\u0430\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f Common Log File System (CLFS.sys) \u2014 CVE-2025-32701 (CVSS \u2014 7,8) \u0438 CVE-2025-32706 (CVSS \u2014 7,8)\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 CLFS.sys, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0436\u0443\u0440\u043d\u0430\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f Common Log File System (CLFS). \u041f\u0435\u0440\u0432\u0430\u044f \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u0435\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f, \u0432\u0442\u043e\u0440\u0430\u044f \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u041f\u0440\u0438 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u0430\u044e\u0442 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c \u0436\u0435\u0440\u0442\u0432\u044b. \u041f\u043e\u0445\u043e\u0436\u0438\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0440\u0430\u043d\u0435\u0435 \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430\u043c\u0438 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439, \u0432\u043f\u043e\u043b\u043d\u0435 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0447\u0442\u043e \u0438 \u0441 \u044d\u0442\u0438\u043c\u0438 \u043f\u0440\u043e\u0438\u0437\u043e\u0439\u0434\u0435\u0442 \u043d\u0435\u0447\u0442\u043e \u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0435.\n\n4\ufe0f\u20e3 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0435 Apache, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430 \u0438 \u0447\u0442\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432, \u2014 CVE-2024-38475 (CVSS \u2014 9,8)\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u043e\u043a\u043e\u043b\u043e 3,91 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u0430 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u043c \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 mod_rewrite HTTP-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 Apache, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u043c \u0434\u043b\u044f \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u044f URL-\u0430\u0434\u0440\u0435\u0441\u043e\u0432. \u041f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a \u0441\u043c\u043e\u0436\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0438\u043b\u0438 \u0447\u0438\u0442\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u043f\u043e\u043b\u0443\u0447\u0438\u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c.\n\n5\ufe0f\u20e3 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u043c \u0430\u0440\u0445\u0438\u0432\u0430\u0442\u043e\u0440\u0435 7-Zip, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u2014 BDU:2025-01793 (CVSS \u2014 5,7)\n\n\u041e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0432\u0441\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0441 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0435\u0439 7-Zip, \u0441\u043a\u0430\u0447\u0430\u043d\u043e \u043e\u043a\u043e\u043b\u043e 430 \u043c\u043b\u043d \u043a\u043e\u043f\u0438\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 7-Zip 24.08 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u043e\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u043e\u0439 \u043c\u0435\u0442\u043a\u0438 Mark of the Web \u2014 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Windows, \u043f\u043e\u043c\u0435\u0447\u0430\u044e\u0449\u0435\u0433\u043e \u0444\u0430\u0439\u043b\u044b, \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0438\u0437 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432. \u0412 \u0438\u0442\u043e\u0433\u0435 \u043f\u0440\u0438 \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u043d\u0438\u0438 \u0438 \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u043a\u0435 \u0442\u0430\u043a\u043e\u0433\u043e \u0430\u0440\u0445\u0438\u0432\u0430 \u041e\u0421 \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043e\u0431 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u041f\u041e \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0436\u0435\u0440\u0442\u0432\u044b \u0438 \u043f\u043e\u0445\u0438\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e.\n\n6\ufe0f\u20e3 XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 MDaemon \u2014 CVE-2024-11182 (CVSS \u2014 6,1)\n\n\u041f\u043e\u0447\u0442\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u0432 140 \u0441\u0442\u0440\u0430\u043d\u0430\u0445 \u0438 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u043d\u0430 42 \u0442\u044b\u0441\u044f\u0447\u0430\u0445 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0436\u0435\u0440\u0442\u0432\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0435 HTML-\u043f\u0438\u0441\u044c\u043c\u043e, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0432 \u0442\u0435\u0433\u0435  \u0431\u0443\u0434\u0435\u0442 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442\u044c\u0441\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 JavaScript-\u043a\u043e\u0434. \u0415\u0441\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u0442\u043a\u0440\u043e\u0435\u0442 \u043f\u0438\u0441\u044c\u043c\u043e, \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u0441\u044f \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0435\u0433\u043e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u043a\u0440\u0430\u0441\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u043e\u0431\u043e\u0439\u0442\u0438 \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u0443\u044e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c\u0443 \u044f\u0449\u0438\u043a\u0443 \u0438 \u043a\u043e\u043d\u0442\u0430\u043a\u0442\u0430\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n7\ufe0f\u20e3 XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Zimbra Collaboration Suite \u043e\u0442 Synacore \u2014 CVE-2024-27443 (CVSS \u2014 6,1)\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u043e\u043a\u043e\u043b\u043e 130 \u0442\u044b\u0441\u044f\u0447 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Zimbra Collaboration Suite. \n\nXSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 CalendarInvite, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u043f\u0440\u0438\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044f\u043c\u0438 \u0432 \u043a\u0430\u043b\u0435\u043d\u0434\u0430\u0440\u0435, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0432\u0435\u0431-\u043f\u043e\u0447\u0442\u044b Zimbra \u0438 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 X-Zimbra-Calendar-Intended-For. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 JavaScript-\u043a\u043e\u0434 \u0432\u043d\u0435\u0434\u0440\u044f\u0435\u0442\u0441\u044f \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0438\u0441\u044c\u043c\u0430. \u041f\u0440\u0438 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0432 \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 Zimbra \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0430, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u043a\u0440\u0430\u0441\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0438 \u043a\u043e\u043d\u0442\u0430\u043a\u0442\u044b \u0438\u0437 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u0433\u043e \u044f\u0449\u0438\u043a\u0430.\n\n\ud83d\udc7e \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 \u043e \u0442\u043e\u043c, \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c\u0441\u044f \u043e\u0442 \u0443\u0433\u0440\u043e\u0437, \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b\u0438 \u043d\u0430 \u0441\u0430\u0439\u0442\u0435.\n\n#\u0432\u0442\u0440\u0435\u043d\u0434\u0435VM \n@Positive_Technologies", "url": "https://t.me/Positive_Technologies/3595"}, {"timestamp": "2026-11-04T13:31:51Z", "date_only": false, "value": "2026-11-04T13:31:51+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2024-27443", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "78c96cf4-f81c-44f5-9158-824c4191f9d0", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-11-15T00:34:18.757Z", "anchors": {"origin": {"timestamp": "2024-08-12T00:00:00Z", "date_only": false, "value": "2024-08-12T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-27443", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2024-08-12T00:00:00Z", "date_only": false, "value": "2024-08-12T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-27443", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": {"timestamp": "2025-05-19T00:00:00Z", "date_only": false, "value": "2025-05-19T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2024-27443", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "78c96cf4-f81c-44f5-9158-824c4191f9d0", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 24192000.0, "hours": 6720.0, "days": 280.0, "min_seconds": 24105600.0, "max_seconds": 24278400.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-08-12T00:00:00Z", "date_only": false, "value": "2024-08-12T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-27443", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-05-19T00:00:00Z", "date_only": false, "value": "2025-05-19T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2024-27443", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "78c96cf4-f81c-44f5-9158-824c4191f9d0", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 24192000.0, "hours": 6720.0, "days": 280.0, "min_seconds": 24105600.0, "max_seconds": 24278400.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-08-12T00:00:00Z", "date_only": false, "value": "2024-08-12T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-27443", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-05-19T00:00:00Z", "date_only": false, "value": "2025-05-19T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2024-27443", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "78c96cf4-f81c-44f5-9158-824c4191f9d0", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 71282058.757067, "hours": 19800.571876963055, "days": 825.023828206794, "min_seconds": 71195658.757067, "max_seconds": 71282058.757067, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-08-12T00:00:00Z", "date_only": false, "value": "2024-08-12T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-27443", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-15T00:34:18.757Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 47090058.757067, "hours": 13080.571876963057, "days": 545.0238282067941, "min_seconds": 47003658.757067, "max_seconds": 47090058.757067, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-05-19T00:00:00Z", "date_only": false, "value": "2025-05-19T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2024-27443", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "78c96cf4-f81c-44f5-9158-824c4191f9d0", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-11-15T00:34:18.757Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}