CVE-2024-35252: Azure Storage Movement Client Library Denial of Service Vulnerability
CVE-2024-35252 is a denial of service vulnerability in Azure Storage Movement Client Library, rated Important by Microsoft, with a CVSS 3.1 base score of 7.5 (High). An attacker can exploit it remotely over the network, without any privileges and without user interaction. Microsoft has not reported exploitation in the wild and rates exploitation as less likely. The EPSS model estimates a 2.48% probability of exploitation activity in the next 30 days, higher than 85% of all scored vulnerabilities. Microsoft released the fix on 11 June 2024 in the June 2024 Patch Tuesday. It affects 1 product in 1 product family (Azure).