CVE2024

CVE-2024-35250

1Rules

4References

1Folders

2025-02-19Latest

Summary

CVE-2024-35250 is tracked here through 1 Sigma detection for exploitation attempts and related post-exploitation behavior observed in 2024. Coverage centers on windows / image_load.

Related Detections

Search this threat

Emerging Threatmediumexperimental

Potential CVE-2024-35250 Exploitation Activity

Detects potentially suspicious loading of "ksproxy.ax", which may indicate an attempt to exploit CVE-2024-35250.

WindowsImage Load (DLL)

TA0004 · Privilege EscalationT1068 · Exploitation for Privilege Escalationcve.2024-35250detection.emerging-threats

Isaac FernandesWed Feb 192024

References