CVE Catalog
CVE-2024-30080
CriticalCVSS 9.8Exploitation Probability (EPSS)
Very high risk43.15%
99th percentile - higher than 99% of all known CVEs
Summary
A remote code execution vulnerability in Microsoft Message Queuing (MSMQ) allows an attacker to execute arbitrary code remotely in the system context. The flaw exists in the message queuing mechanism and can be exploited without authentication.
Risk Assessment
An attacker can take control of the vulnerable system, leading to full compromise of confidentiality, integrity, and availability of data and services.
Recommendation
Apply the security update provided by Microsoft in the monthly cumulative patch immediately. Restrict access to the MSMQ service to trusted networks only.
Original NVD description (English source)
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

