CVE-2024-1853 json
Zemana AntiLogger v2.74.204.664 - Arbitrary Process Termination
published 2024-03-14 2 y ago modified 2026-06-17 4 mo ago also EUVD-2024-17578
- cvss
- 5.5
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.2%
- EPSS 0.2% chance of exploitation in 30 days, percentile 9%
- public exploits
- 0
- none known
Summary
Zemana AntiLogger v2.74.204.664 is vulnerable to an Arbitrary Process Termination vulnerability by triggering the 0x80002048 IOCTL code of the zam64.sys and zamguard64.sys drivers.
Ransomware
Groups reported to have exploited it in intrusions.
- Qilin ransomware gang
reported by binarydefense.com
Ransomware Vulnerability Matrix by BushidoUK (github.com/BushidoUK/Ransomware-Vulnerability-Matrix), reformatted per CVE. CC BY 4.0
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- partial
- Assessed
- 2 y ago
Exploit prediction
0.20% chance of exploitation in the next 30 days, higher than 9% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Affected products
- Zemena AntiLogger
Classification
- Weakness
-
- CWE-283 Unverified Ownership
References
-
fluidattacks.com
/advisories/ellington/
third-party-advisory
-
zemana.com
/us/antilogger.html
product
Sources
- CVE List CVE-2024-1853
- NVD CVE-2024-1853
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.