Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2024-38147 (GCVE-0-2024-38147)
Vulnerability from cvelistv5 – Published: 2024-08-13 17:30 – Updated: 2025-07-10 16:33
VLAI?
EPSS
Title
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Summary
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Severity ?
CWE
- CWE-416 - Use After Free
Assigner
References
| URL | Tags | ||||
|---|---|---|---|---|---|
|
|||||
Impacted products
| Vendor | Product | Version | ||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Microsoft | Windows Server 2022 |
Affected:
10.0.20348.0 , < 10.0.20348.2655
(custom)
|
||||||||||||||||||||||||||||||||||||||||||
|
||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-38147",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-08-15T14:46:23.070145Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-08-15T14:46:34.977Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"platforms": [
"x64-based Systems"
],
"product": "Windows Server 2022",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "10.0.20348.2655",
"status": "affected",
"version": "10.0.20348.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems",
"ARM64-based Systems"
],
"product": "Windows 11 version 21H2",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "10.0.22000.3147",
"status": "affected",
"version": "10.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"32-bit Systems",
"ARM64-based Systems",
"x64-based Systems"
],
"product": "Windows 10 Version 21H2",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "10.0.19044.4780",
"status": "affected",
"version": "10.0.19043.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"ARM64-based Systems",
"x64-based Systems"
],
"product": "Windows 11 version 22H2",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "10.0.22621.4037",
"status": "affected",
"version": "10.0.22621.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems",
"ARM64-based Systems",
"32-bit Systems"
],
"product": "Windows 10 Version 22H2",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "10.0.19045.4780",
"status": "affected",
"version": "10.0.19045.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"ARM64-based Systems"
],
"product": "Windows 11 version 22H3",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "10.0.22631.4037",
"status": "affected",
"version": "10.0.22631.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Windows 11 Version 23H2",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "10.0.22631.4037",
"status": "affected",
"version": "10.0.22631.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Windows Server 2022, 23H2 Edition (Server Core installation)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "10.0.25398.1085",
"status": "affected",
"version": "10.0.25398.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"ARM64-based Systems",
"x64-based Systems"
],
"product": "Windows 11 Version 24H2",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "10.0.26100.1457",
"status": "affected",
"version": "10.0.26100.0",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.20348.2655",
"versionStartIncluding": "10.0.20348.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_21H2:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "10.0.22000.3147",
"versionStartIncluding": "10.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*",
"versionEndExcluding": "10.0.19044.4780",
"versionStartIncluding": "10.0.19043.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_22H2:*:*:*:*:*:*:arm64:*",
"versionEndExcluding": "10.0.22621.4037",
"versionStartIncluding": "10.0.22621.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "10.0.19045.4780",
"versionStartIncluding": "10.0.19045.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*",
"versionEndExcluding": "10.0.22631.4037",
"versionStartIncluding": "10.0.22631.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "10.0.22631.4037",
"versionStartIncluding": "10.0.22631.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_23h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.25398.1085",
"versionStartIncluding": "10.0.25398.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*",
"versionEndExcluding": "10.0.26100.1457",
"versionStartIncluding": "10.0.26100.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2024-08-13T07:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": "Microsoft DWM Core Library Elevation of Privilege Vulnerability"
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-416",
"description": "CWE-416: Use After Free",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-07-10T16:33:31.512Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": "Microsoft DWM Core Library Elevation of Privilege Vulnerability",
"tags": [
"vendor-advisory"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38147"
}
],
"title": "Microsoft DWM Core Library Elevation of Privilege Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2024-38147",
"datePublished": "2024-08-13T17:30:18.918Z",
"dateReserved": "2024-06-11T22:36:08.207Z",
"dateUpdated": "2025-07-10T16:33:31.512Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"10.0.19044.4780\", \"matchCriteriaId\": \"8D75E5B4-14B7-4D0F-96B5-2B9C270B7F98\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"10.0.19045.4780\", \"matchCriteriaId\": \"3F9C3ED0-C639-42B9-8512-5CAD50B7095B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"10.0.22000.3147\", \"matchCriteriaId\": \"66EC161E-9908-4511-933C-727D46A8271E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"10.0.22621.4037\", \"matchCriteriaId\": \"EE5B452D-B921-4E5F-9C79-360447CD3BF8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"10.0.22631.4037\", \"matchCriteriaId\": \"B56F0E20-88FD-4A42-B5DE-06A6D2FAC6FA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"10.0.26100.1457\", \"matchCriteriaId\": \"3C7E2433-4D16-40E5-973A-42F651779A47\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"10.0.20348.2655\", \"matchCriteriaId\": \"8E3975C0-EA3C-4B85-94BC-43BA94474FCA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"10.0.25398.1085\", \"matchCriteriaId\": \"094C36FE-9CCB-4148-AA0F-5727D6933768\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"Microsoft DWM Core Library Elevation of Privilege Vulnerability\"}, {\"lang\": \"es\", \"value\": \"Vulnerabilidad de elevaci\\u00f3n de privilegios de la librer\\u00eda principal de Microsoft DWM\"}]",
"id": "CVE-2024-38147",
"lastModified": "2024-08-16T20:55:03.907",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"secure@microsoft.com\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\", \"baseScore\": 7.8, \"baseSeverity\": \"HIGH\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 1.8, \"impactScore\": 5.9}]}",
"published": "2024-08-13T18:15:19.407",
"references": "[{\"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38147\", \"source\": \"secure@microsoft.com\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}]",
"sourceIdentifier": "secure@microsoft.com",
"vulnStatus": "Analyzed",
"weaknesses": "[{\"source\": \"secure@microsoft.com\", \"type\": \"Secondary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-416\"}]}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"NVD-CWE-noinfo\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2024-38147\",\"sourceIdentifier\":\"secure@microsoft.com\",\"published\":\"2024-08-13T18:15:19.407\",\"lastModified\":\"2024-08-16T20:55:03.907\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Microsoft DWM Core Library Elevation of Privilege Vulnerability\"},{\"lang\":\"es\",\"value\":\"Vulnerabilidad de elevaci\u00f3n de privilegios de la librer\u00eda principal de Microsoft DWM\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"secure@microsoft.com\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"secure@microsoft.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-416\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.19044.4780\",\"matchCriteriaId\":\"8D75E5B4-14B7-4D0F-96B5-2B9C270B7F98\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.19045.4780\",\"matchCriteriaId\":\"3F9C3ED0-C639-42B9-8512-5CAD50B7095B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.22000.3147\",\"matchCriteriaId\":\"66EC161E-9908-4511-933C-727D46A8271E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.22621.4037\",\"matchCriteriaId\":\"EE5B452D-B921-4E5F-9C79-360447CD3BF8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.22631.4037\",\"matchCriteriaId\":\"B56F0E20-88FD-4A42-B5DE-06A6D2FAC6FA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.26100.1457\",\"matchCriteriaId\":\"3C7E2433-4D16-40E5-973A-42F651779A47\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.20348.2655\",\"matchCriteriaId\":\"8E3975C0-EA3C-4B85-94BC-43BA94474FCA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.25398.1085\",\"matchCriteriaId\":\"094C36FE-9CCB-4148-AA0F-5727D6933768\"}]}]}],\"references\":[{\"url\":\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38147\",\"source\":\"secure@microsoft.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-38147\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-08-15T14:46:23.070145Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-08-15T14:46:28.852Z\"}}], \"cna\": {\"title\": \"Microsoft DWM Core Library Elevation of Privilege Vulnerability\", \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 7.8, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C\"}, \"scenarios\": [{\"lang\": \"en-US\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2022\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.20348.0\", \"lessThan\": \"10.0.20348.2655\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 11 version 21H2\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.0\", \"lessThan\": \"10.0.22000.3147\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\", \"ARM64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 10 Version 21H2\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.19043.0\", \"lessThan\": \"10.0.19044.4780\", \"versionType\": \"custom\"}], \"platforms\": [\"32-bit Systems\", \"ARM64-based Systems\", \"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 11 version 22H2\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.22621.0\", \"lessThan\": \"10.0.22621.4037\", \"versionType\": \"custom\"}], \"platforms\": [\"ARM64-based Systems\", \"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 10 Version 22H2\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.19045.0\", \"lessThan\": \"10.0.19045.4780\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\", \"ARM64-based Systems\", \"32-bit Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 11 version 22H3\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.22631.0\", \"lessThan\": \"10.0.22631.4037\", \"versionType\": \"custom\"}], \"platforms\": [\"ARM64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 11 Version 23H2\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.22631.0\", \"lessThan\": \"10.0.22631.4037\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2022, 23H2 Edition (Server Core installation)\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.25398.0\", \"lessThan\": \"10.0.25398.1085\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 11 Version 24H2\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.26100.0\", \"lessThan\": \"10.0.26100.1457\", \"versionType\": \"custom\"}], \"platforms\": [\"ARM64-based Systems\", \"x64-based Systems\"]}], \"datePublic\": \"2024-08-13T07:00:00.000Z\", \"references\": [{\"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38147\", \"name\": \"Microsoft DWM Core Library Elevation of Privilege Vulnerability\", \"tags\": [\"vendor-advisory\"]}], \"descriptions\": [{\"lang\": \"en-US\", \"value\": \"Microsoft DWM Core Library Elevation of Privilege Vulnerability\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en-US\", \"type\": \"CWE\", \"cweId\": \"CWE-416\", \"description\": \"CWE-416: Use After Free\"}]}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.20348.2655\", \"versionStartIncluding\": \"10.0.20348.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_11_21H2:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.22000.3147\", \"versionStartIncluding\": \"10.0.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.19044.4780\", \"versionStartIncluding\": \"10.0.19043.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_11_22H2:*:*:*:*:*:*:arm64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.22621.4037\", \"versionStartIncluding\": \"10.0.22621.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.19045.4780\", \"versionStartIncluding\": \"10.0.19045.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.22631.4037\", \"versionStartIncluding\": \"10.0.22631.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.22631.4037\", \"versionStartIncluding\": \"10.0.22631.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_23h2:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.25398.1085\", \"versionStartIncluding\": \"10.0.25398.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.26100.1457\", \"versionStartIncluding\": \"10.0.26100.0\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"shortName\": \"microsoft\", \"dateUpdated\": \"2025-07-10T16:33:31.512Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2024-38147\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-07-10T16:33:31.512Z\", \"dateReserved\": \"2024-06-11T22:36:08.207Z\", \"assignerOrgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"datePublished\": \"2024-08-13T17:30:18.918Z\", \"assignerShortName\": \"microsoft\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
}
}
WID-SEC-W-2024-1835
Vulnerability from csaf_certbund - Published: 2024-08-13 22:00 - Updated: 2024-08-26 22:00Summary
Microsoft Windows: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Windows ist ein Betriebssystem von Microsoft.
Windows Server 2016 ist ein Betriebssystem von Microsoft.
Windows Server 2019 ist ein Betriebssystem von Microsoft.
Angriff
Ein Angreifer kann mehrere Schwachstellen in Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 ausnutzen, um beliebigen Programmcode auszuführen, beliebigen Programmcode mit Administratorrechten auszuführen, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen oder Sicherheitsvorkehrungen zu umgehen.
Betroffene Betriebssysteme
- Windows
{
"document": {
"aggregate_severity": {
"text": "kritisch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Windows ist ein Betriebssystem von Microsoft.\r\nWindows Server 2016 ist ein Betriebssystem von Microsoft.\r\nWindows Server 2019 ist ein Betriebssystem von Microsoft.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein Angreifer kann mehrere Schwachstellen in Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Windows",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2024-1835 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1835.json"
},
{
"category": "self",
"summary": "WID-SEC-2024-1835 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1835"
},
{
"category": "external",
"summary": "Microsoft Leitfaden f\u00fcr Sicherheitsupdates vom 2024-08-13",
"url": "https://msrc.microsoft.com/update-guide"
},
{
"category": "external",
"summary": "PoC CVE-2024-38063 vom 2024-08-26",
"url": "https://github.com/ynwarcs/CVE-2024-38063"
}
],
"source_lang": "en-US",
"title": "Microsoft Windows: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2024-08-26T22:00:00.000+00:00",
"generator": {
"date": "2024-08-27T08:07:19.027+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.6"
}
},
"id": "WID-SEC-W-2024-1835",
"initial_release_date": "2024-08-13T22:00:00.000+00:00",
"revision_history": [
{
"date": "2024-08-13T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2024-08-26T22:00:00.000+00:00",
"number": "2",
"summary": "PoC f\u00fcr CVE-2024-38063 verf\u00fcgbar"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "Remote Desktop client for Desktop",
"product": {
"name": "Microsoft Windows Remote Desktop client for Desktop",
"product_id": "T023160",
"product_identification_helper": {
"cpe": "cpe:/o:microsoft:windows:remote_desktop_client_for_desktop"
}
}
}
],
"category": "product_name",
"name": "Windows"
},
{
"branches": [
{
"category": "product_version",
"name": "Version 1607",
"product": {
"name": "Microsoft Windows 10 Version 1607",
"product_id": "T011520",
"product_identification_helper": {
"cpe": "cpe:/o:microsoft:windows_10:version_1607"
}
}
},
{
"category": "product_version",
"name": "Version 21H2",
"product": {
"name": "Microsoft Windows 10 Version 21H2",
"product_id": "T021306",
"product_identification_helper": {
"cpe": "cpe:/o:microsoft:windows_10:version_21h2"
}
}
},
{
"category": "product_version",
"name": "Version 22H2",
"product": {
"name": "Microsoft Windows 10 Version 22H2",
"product_id": "T025256",
"product_identification_helper": {
"cpe": "cpe:/o:microsoft:windows_10:version_22h2"
}
}
},
{
"category": "product_name",
"name": "Microsoft Windows 10",
"product": {
"name": "Microsoft Windows 10",
"product_id": "T025566",
"product_identification_helper": {
"cpe": "cpe:/o:microsoft:windows_10:windows_terminal"
}
}
},
{
"category": "product_version",
"name": "Version 1809",
"product": {
"name": "Microsoft Windows 10 Version 1809",
"product_id": "T034033",
"product_identification_helper": {
"cpe": "cpe:/o:microsoft:windows_10:version_1809"
}
}
}
],
"category": "product_name",
"name": "Windows 10"
},
{
"branches": [
{
"category": "product_version",
"name": "Version 24H2",
"product": {
"name": "Microsoft Windows 11 Version 24H2",
"product_id": "T025567",
"product_identification_helper": {
"cpe": "cpe:/o:microsoft:windows_11:windows_terminal"
}
}
},
{
"category": "product_version",
"name": "Version 23H2",
"product": {
"name": "Microsoft Windows 11 Version 23H2",
"product_id": "T031172",
"product_identification_helper": {
"cpe": "cpe:/o:microsoft:windows_11:version_23h2"
}
}
},
{
"category": "product_version",
"name": "Version 22H2",
"product": {
"name": "Microsoft Windows 11 Version 22H2",
"product_id": "T034034",
"product_identification_helper": {
"cpe": "cpe:/o:microsoft:windows_11:version_22h2"
}
}
},
{
"category": "product_version_range",
"name": "version 21H2",
"product": {
"name": "Microsoft Windows 11 version 21H2",
"product_id": "T034035"
}
}
],
"category": "product_name",
"name": "Windows 11"
},
{
"branches": [
{
"category": "product_version",
"name": "2008 SP2",
"product": {
"name": "Microsoft Windows Server 2008 SP2",
"product_id": "T012853",
"product_identification_helper": {
"cpe": "cpe:/o:microsoft:windows_server:2008_sp2"
}
}
},
{
"category": "product_version",
"name": "2008 R2 SP1",
"product": {
"name": "Microsoft Windows Server 2008 R2 SP1",
"product_id": "T012855",
"product_identification_helper": {
"cpe": "cpe:/o:microsoft:windows_server:2008_r2_sp1"
}
}
}
],
"category": "product_name",
"name": "Windows Server"
},
{
"category": "product_name",
"name": "Microsoft Windows Server 2012",
"product": {
"name": "Microsoft Windows Server 2012",
"product_id": "T006125",
"product_identification_helper": {
"cpe": "cpe:/o:microsoft:windows_server_2012:::server_core_installation"
}
}
},
{
"category": "product_name",
"name": "Microsoft Windows Server 2012 R2",
"product": {
"name": "Microsoft Windows Server 2012 R2",
"product_id": "T014786",
"product_identification_helper": {
"cpe": "cpe:/o:microsoft:windows_server_2012_r2:-"
}
}
},
{
"category": "product_name",
"name": "Microsoft Windows Server 2016",
"product": {
"name": "Microsoft Windows Server 2016",
"product_id": "T010224",
"product_identification_helper": {
"cpe": "cpe:/o:microsoft:windows_server_2016:server_2016::server_core_installation"
}
}
},
{
"category": "product_name",
"name": "Microsoft Windows Server 2019",
"product": {
"name": "Microsoft Windows Server 2019",
"product_id": "T014557",
"product_identification_helper": {
"cpe": "cpe:/o:microsoft:windows_server_2019:server_core_installation"
}
}
},
{
"branches": [
{
"category": "product_name",
"name": "Microsoft Windows Server 2022",
"product": {
"name": "Microsoft Windows Server 2022",
"product_id": "T025255",
"product_identification_helper": {
"cpe": "cpe:/o:microsoft:windows_server_2022:datacenter_azure_edition"
}
}
},
{
"category": "product_version",
"name": "23H2 Edition",
"product": {
"name": "Microsoft Windows Server 2022 23H2 Edition",
"product_id": "T034036",
"product_identification_helper": {
"cpe": "cpe:/o:microsoft:windows_server_2022:23h2_edition"
}
}
}
],
"category": "product_name",
"name": "Windows Server 2022"
}
],
"category": "vendor",
"name": "Microsoft"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-2601",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2022-2601"
},
{
"cve": "CVE-2022-3775",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2022-3775"
},
{
"cve": "CVE-2023-40547",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2023-40547"
},
{
"cve": "CVE-2024-29995",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-29995"
},
{
"cve": "CVE-2024-37968",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-37968"
},
{
"cve": "CVE-2024-38063",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38063"
},
{
"cve": "CVE-2024-38106",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38106"
},
{
"cve": "CVE-2024-38107",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38107"
},
{
"cve": "CVE-2024-38114",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38114"
},
{
"cve": "CVE-2024-38115",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38115"
},
{
"cve": "CVE-2024-38116",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38116"
},
{
"cve": "CVE-2024-38117",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38117"
},
{
"cve": "CVE-2024-38118",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38118"
},
{
"cve": "CVE-2024-38120",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38120"
},
{
"cve": "CVE-2024-38121",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38121"
},
{
"cve": "CVE-2024-38122",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38122"
},
{
"cve": "CVE-2024-38123",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38123"
},
{
"cve": "CVE-2024-38125",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38125"
},
{
"cve": "CVE-2024-38126",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38126"
},
{
"cve": "CVE-2024-38127",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38127"
},
{
"cve": "CVE-2024-38128",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38128"
},
{
"cve": "CVE-2024-38130",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38130"
},
{
"cve": "CVE-2024-38131",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38131"
},
{
"cve": "CVE-2024-38132",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38132"
},
{
"cve": "CVE-2024-38133",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38133"
},
{
"cve": "CVE-2024-38134",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38134"
},
{
"cve": "CVE-2024-38135",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38135"
},
{
"cve": "CVE-2024-38136",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38136"
},
{
"cve": "CVE-2024-38137",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38137"
},
{
"cve": "CVE-2024-38138",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38138"
},
{
"cve": "CVE-2024-38140",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38140"
},
{
"cve": "CVE-2024-38141",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38141"
},
{
"cve": "CVE-2024-38142",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38142"
},
{
"cve": "CVE-2024-38143",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38143"
},
{
"cve": "CVE-2024-38144",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38144"
},
{
"cve": "CVE-2024-38145",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38145"
},
{
"cve": "CVE-2024-38146",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38146"
},
{
"cve": "CVE-2024-38147",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38147"
},
{
"cve": "CVE-2024-38148",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38148"
},
{
"cve": "CVE-2024-38150",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38150"
},
{
"cve": "CVE-2024-38151",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38151"
},
{
"cve": "CVE-2024-38152",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38152"
},
{
"cve": "CVE-2024-38153",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38153"
},
{
"cve": "CVE-2024-38154",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38154"
},
{
"cve": "CVE-2024-38155",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38155"
},
{
"cve": "CVE-2024-38159",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38159"
},
{
"cve": "CVE-2024-38160",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38160"
},
{
"cve": "CVE-2024-38161",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38161"
},
{
"cve": "CVE-2024-38163",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38163"
},
{
"cve": "CVE-2024-38165",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38165"
},
{
"cve": "CVE-2024-38178",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38178"
},
{
"cve": "CVE-2024-38180",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38180"
},
{
"cve": "CVE-2024-38184",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38184"
},
{
"cve": "CVE-2024-38185",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38185"
},
{
"cve": "CVE-2024-38186",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38186"
},
{
"cve": "CVE-2024-38187",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38187"
},
{
"cve": "CVE-2024-38191",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38191"
},
{
"cve": "CVE-2024-38193",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38193"
},
{
"cve": "CVE-2024-38196",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38196"
},
{
"cve": "CVE-2024-38198",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38198"
},
{
"cve": "CVE-2024-38199",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38199"
},
{
"cve": "CVE-2024-38213",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38213"
},
{
"cve": "CVE-2024-38214",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38214"
},
{
"cve": "CVE-2024-38215",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38215"
},
{
"cve": "CVE-2024-38223",
"notes": [
{
"category": "description",
"text": "In Microsoft Windows, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019 und Microsoft Windows Server 2022 existieren mehrere Schwachstellen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, seine Privilegien zu erweitern, Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren oder Sicherheitsvorkehrungen zu umgehen. F\u00fcr die Ausnutzung einiger dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T023160",
"T006125",
"T010224",
"T012855",
"T014557",
"T012853",
"T034033",
"T014786",
"T011520",
"T031172",
"T034036",
"T034035",
"T034034",
"T021306",
"T025256",
"T025567",
"T025566",
"T025255"
]
},
"release_date": "2024-08-13T22:00:00.000+00:00",
"title": "CVE-2024-38223"
}
]
}
CERTFR-2024-AVI-0681
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Microsoft Windows. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et une atteinte à la confidentialité des données.
Microsoft indique que les vulnérabilités CVE-2024-38106, CVE-2024-38107, CVE-2024-38178, CVE-2024-38193 et CVE-2024-38213 sont activement exploitées.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Microsoft | N/A | Remote Desktop client pour Windows Desktop versions antérieures à 1.2.5560.0 | ||
| Microsoft | N/A | Windows 10 Version 1607 pour systèmes 32 bits versions antérieures à 10.0.14393.7070 | ||
| Microsoft | N/A | Windows 10 Version 1607 pour systèmes 32 bits versions antérieures à 10.0.14393.7159 | ||
| Microsoft | N/A | Windows 10 Version 1607 pour systèmes 32 bits versions antérieures à 10.0.14393.7259 | ||
| Microsoft | N/A | Windows 10 Version 1607 pour systèmes x64 versions antérieures à 10.0.14393.7070 | ||
| Microsoft | N/A | Windows 10 Version 1607 pour systèmes x64 versions antérieures à 10.0.14393.7159 | ||
| Microsoft | N/A | Windows 10 Version 1607 pour systèmes x64 versions antérieures à 10.0.14393.7259 | ||
| Microsoft | N/A | Windows 10 Version 1809 pour systèmes 32 bits versions antérieures à 10.0.17763.5936 | ||
| Microsoft | N/A | Windows 10 Version 1809 pour systèmes 32 bits versions antérieures à 10.0.17763.6054 | ||
| Microsoft | N/A | Windows 10 Version 1809 pour systèmes 32 bits versions antérieures à 10.0.17763.6189 | ||
| Microsoft | N/A | Windows 10 Version 1809 pour systèmes ARM64 versions antérieures à 10.0.17763.5936 | ||
| Microsoft | N/A | Windows 10 Version 1809 pour systèmes ARM64 versions antérieures à 10.0.17763.6054 | ||
| Microsoft | N/A | Windows 10 Version 1809 pour systèmes ARM64 versions antérieures à 10.0.17763.6189 | ||
| Microsoft | N/A | Windows 10 Version 1809 pour systèmes x64 versions antérieures à 10.0.17763.5936 | ||
| Microsoft | N/A | Windows 10 Version 1809 pour systèmes x64 versions antérieures à 10.0.17763.6054 | ||
| Microsoft | N/A | Windows 10 Version 1809 pour systèmes x64 versions antérieures à 10.0.17763.6189 | ||
| Microsoft | N/A | Windows 10 Version 21H2 pour systèmes 32 bits versions antérieures à 10.0.19041.3920 | ||
| Microsoft | N/A | Windows 10 Version 21H2 pour systèmes 32 bits versions antérieures à 10.0.19044.4529 | ||
| Microsoft | N/A | Windows 10 Version 21H2 pour systèmes 32 bits versions antérieures à 10.0.19044.4651 | ||
| Microsoft | N/A | Windows 10 Version 21H2 pour systèmes 32 bits versions antérieures à 10.0.19044.4780 | ||
| Microsoft | N/A | Windows 10 Version 21H2 pour systèmes ARM64 versions antérieures à 10.0.19044.4529 | ||
| Microsoft | N/A | Windows 10 Version 21H2 pour systèmes ARM64 versions antérieures à 10.0.19044.4651 | ||
| Microsoft | N/A | Windows 10 Version 21H2 pour systèmes ARM64 versions antérieures à 10.0.19044.4780 | ||
| Microsoft | N/A | Windows 10 Version 21H2 pour systèmes x64 versions antérieures à 10.0.19041.3920 | ||
| Microsoft | N/A | Windows 10 Version 21H2 pour systèmes x64 versions antérieures à 10.0.19044.4529 | ||
| Microsoft | N/A | Windows 10 Version 21H2 pour systèmes x64 versions antérieures à 10.0.19044.4651 | ||
| Microsoft | N/A | Windows 10 Version 21H2 pour systèmes x64 versions antérieures à 10.0.19044.4780 | ||
| Microsoft | N/A | Windows 10 Version 22H2 pour systèmes 32 bits versions antérieures à 10.0.19041.3920 | ||
| Microsoft | N/A | Windows 10 Version 22H2 pour systèmes 32 bits versions antérieures à 10.0.19045.4529 | ||
| Microsoft | N/A | Windows 10 Version 22H2 pour systèmes 32 bits versions antérieures à 10.0.19045.4651 | ||
| Microsoft | N/A | Windows 10 Version 22H2 pour systèmes 32 bits versions antérieures à 10.0.19045.4780 | ||
| Microsoft | N/A | Windows 10 Version 22H2 pour systèmes ARM64 versions antérieures à 10.0.19045.4529 | ||
| Microsoft | N/A | Windows 10 Version 22H2 pour systèmes ARM64 versions antérieures à 10.0.19045.4651 | ||
| Microsoft | N/A | Windows 10 Version 22H2 pour systèmes ARM64 versions antérieures à 10.0.19045.4780 | ||
| Microsoft | N/A | Windows 10 Version 22H2 pour systèmes x64 versions antérieures à 10.0.19041.3920 | ||
| Microsoft | N/A | Windows 10 Version 22H2 pour systèmes x64 versions antérieures à 10.0.19045.4529 | ||
| Microsoft | N/A | Windows 10 Version 22H2 pour systèmes x64 versions antérieures à 10.0.19045.4651 | ||
| Microsoft | N/A | Windows 10 Version 22H2 pour systèmes x64 versions antérieures à 10.0.19045.4780 | ||
| Microsoft | N/A | Windows 10 pour systèmes 32 bits versions antérieures à 10.0.10240.20680 | ||
| Microsoft | N/A | Windows 10 pour systèmes 32 bits versions antérieures à 10.0.10240.20710 | ||
| Microsoft | N/A | Windows 10 pour systèmes 32 bits versions antérieures à 10.0.10240.20751 | ||
| Microsoft | N/A | Windows 10 pour systèmes x64 versions antérieures à 10.0.10240.20680 | ||
| Microsoft | N/A | Windows 10 pour systèmes x64 versions antérieures à 10.0.10240.20710 | ||
| Microsoft | N/A | Windows 10 pour systèmes x64 versions antérieures à 10.0.10240.20751 | ||
| Microsoft | N/A | Windows 11 Version 22H2 pour systèmes ARM64 versions antérieures à 10.0.22621.3737 | ||
| Microsoft | N/A | Windows 11 Version 22H2 pour systèmes ARM64 versions antérieures à 10.0.22621.3880 | ||
| Microsoft | N/A | Windows 11 Version 22H2 pour systèmes ARM64 versions antérieures à 10.0.22621.4037 | ||
| Microsoft | N/A | Windows 11 Version 22H2 pour systèmes x64 versions antérieures à 10.0.22621.3737 | ||
| Microsoft | N/A | Windows 11 Version 22H2 pour systèmes x64 versions antérieures à 10.0.22621.3880 | ||
| Microsoft | N/A | Windows 11 Version 22H2 pour systèmes x64 versions antérieures à 10.0.22621.4037 | ||
| Microsoft | N/A | Windows 11 Version 23H2 pour systèmes ARM64 versions antérieures à 10.0.22631.3737 | ||
| Microsoft | N/A | Windows 11 Version 23H2 pour systèmes ARM64 versions antérieures à 10.0.22631.3880 | ||
| Microsoft | N/A | Windows 11 Version 23H2 pour systèmes ARM64 versions antérieures à 10.0.22631.4037 | ||
| Microsoft | N/A | Windows 11 Version 23H2 pour systèmes x64 versions antérieures à 10.0.22631.3737 | ||
| Microsoft | N/A | Windows 11 Version 23H2 pour systèmes x64 versions antérieures à 10.0.22631.3880 | ||
| Microsoft | N/A | Windows 11 Version 23H2 pour systèmes x64 versions antérieures à 10.0.22631.4037 | ||
| Microsoft | N/A | Windows 11 Version 24H2 pour systèmes ARM64 versions antérieures à 10.0.26100.1457 | ||
| Microsoft | N/A | Windows 11 Version 24H2 pour systèmes x64 versions antérieures à 10.0.26100.1457 | ||
| Microsoft | N/A | Windows 11 version 21H2 pour systèmes ARM64 antérieures à 10.0.22000.3019 | ||
| Microsoft | N/A | Windows 11 version 21H2 pour systèmes ARM64 antérieures à 10.0.22000.3079 | ||
| Microsoft | N/A | Windows 11 version 21H2 pour systèmes ARM64 antérieures à 10.0.22000.3147 | ||
| Microsoft | N/A | Windows 11 version 21H2 pour systèmes x64 antérieures à 10.0.22000.2710 | ||
| Microsoft | N/A | Windows 11 version 21H2 pour systèmes x64 antérieures à 10.0.22000.3019 | ||
| Microsoft | N/A | Windows 11 version 21H2 pour systèmes x64 antérieures à 10.0.22000.3079 | ||
| Microsoft | N/A | Windows 11 version 21H2 pour systèmes x64 antérieures à 10.0.22000.3147 | ||
| Microsoft | N/A | Windows Server 2008 R2 pour systèmes x64 Service Pack 1 (Server Core installation) versions antérieures à 6.1.7601.27219 | ||
| Microsoft | N/A | Windows Server 2008 R2 pour systèmes x64 Service Pack 1 (Server Core installation) versions antérieures à 6.1.7601.27277 | ||
| Microsoft | N/A | Windows Server 2008 R2 pour systèmes x64 Service Pack 1 versions antérieures à 6.1.7601.27219 | ||
| Microsoft | N/A | Windows Server 2008 R2 pour systèmes x64 Service Pack 1 versions antérieures à 6.1.7601.27277 | ||
| Microsoft | N/A | Windows Server 2008 pour systèmes 32 bits Service Pack 2 (Server Core installation) versions antérieures à 6.0.6003.22769 | ||
| Microsoft | N/A | Windows Server 2008 pour systèmes 32 bits Service Pack 2 (Server Core installation) versions antérieures à 6.0.6003.22825 | ||
| Microsoft | N/A | Windows Server 2008 pour systèmes 32 bits Service Pack 2 versions antérieures à 6.0.6003.22769 | ||
| Microsoft | N/A | Windows Server 2008 pour systèmes 32 bits Service Pack 2 versions antérieures à 6.0.6003.22825 | ||
| Microsoft | N/A | Windows Server 2008 pour systèmes x64 Service Pack 2 (Server Core installation) versions antérieures à 6.0.6003.22769 | ||
| Microsoft | N/A | Windows Server 2008 pour systèmes x64 Service Pack 2 (Server Core installation) versions antérieures à 6.0.6003.22825 | ||
| Microsoft | N/A | Windows Server 2008 pour systèmes x64 Service Pack 2 versions antérieures à 6.0.6003.22769 | ||
| Microsoft | N/A | Windows Server 2008 pour systèmes x64 Service Pack 2 versions antérieures à 6.0.6003.22825 | ||
| Microsoft | N/A | Windows Server 2012 (Server Core installation) versions antérieures à 6.2.9200.24919 | ||
| Microsoft | N/A | Windows Server 2012 (Server Core installation) versions antérieures à 6.2.9200.24975 | ||
| Microsoft | N/A | Windows Server 2012 (Server Core installation) versions antérieures à 6.2.9200.25031 | ||
| Microsoft | N/A | Windows Server 2012 R2 (Server Core installation) versions antérieures à 1.001 | ||
| Microsoft | N/A | Windows Server 2012 R2 (Server Core installation) versions antérieures à 6.3.9600.22023 | ||
| Microsoft | N/A | Windows Server 2012 R2 (Server Core installation) versions antérieures à 6.3.9600.22074 | ||
| Microsoft | N/A | Windows Server 2012 R2 (Server Core installation) versions antérieures à 6.3.9600.22134 | ||
| Microsoft | N/A | Windows Server 2012 R2 versions antérieures à 1.001 | ||
| Microsoft | N/A | Windows Server 2012 R2 versions antérieures à 6.3.9600.22023 | ||
| Microsoft | N/A | Windows Server 2012 R2 versions antérieures à 6.3.9600.22074 | ||
| Microsoft | N/A | Windows Server 2012 R2 versions antérieures à 6.3.9600.22134 | ||
| Microsoft | N/A | Windows Server 2012 versions antérieures à 6.2.9200.24919 | ||
| Microsoft | N/A | Windows Server 2012 versions antérieures à 6.2.9200.24975 | ||
| Microsoft | N/A | Windows Server 2012 versions antérieures à 6.2.9200.25031 | ||
| Microsoft | N/A | Windows Server 2016 (Server Core installation) versions antérieures à 10.0.14393.7070 | ||
| Microsoft | N/A | Windows Server 2016 (Server Core installation) versions antérieures à 10.0.14393.7159 | ||
| Microsoft | N/A | Windows Server 2016 (Server Core installation) versions antérieures à 10.0.14393.7259 | ||
| Microsoft | N/A | Windows Server 2016 versions antérieures à 10.0.14393.7070 | ||
| Microsoft | N/A | Windows Server 2016 versions antérieures à 10.0.14393.7159 | ||
| Microsoft | N/A | Windows Server 2016 versions antérieures à 10.0.14393.7259 | ||
| Microsoft | N/A | Windows Server 2019 (Server Core installation) versions antérieures à 10.0.17763.5936 | ||
| Microsoft | N/A | Windows Server 2019 (Server Core installation) versions antérieures à 10.0.17763.6054 | ||
| Microsoft | N/A | Windows Server 2019 (Server Core installation) versions antérieures à 10.0.17763.6189 | ||
| Microsoft | N/A | Windows Server 2019 versions antérieures à 10.0.17763.5936 | ||
| Microsoft | N/A | Windows Server 2019 versions antérieures à 10.0.17763.6054 | ||
| Microsoft | N/A | Windows Server 2019 versions antérieures à 10.0.17763.6189 | ||
| Microsoft | N/A | Windows Server 2022 (Server Core installation) versions antérieures à 10.0.20348.2522 | ||
| Microsoft | N/A | Windows Server 2022 (Server Core installation) versions antérieures à 10.0.20348.2582 | ||
| Microsoft | N/A | Windows Server 2022 (Server Core installation) versions antérieures à 10.0.20348.2655 | ||
| Microsoft | N/A | Windows Server 2022 versions antérieures à 10.0.20348.2522 | ||
| Microsoft | N/A | Windows Server 2022 versions antérieures à 10.0.20348.2582 | ||
| Microsoft | N/A | Windows Server 2022 versions antérieures à 10.0.20348.2655 | ||
| Microsoft | N/A | Windows Server 2022 versions antérieures à 10.0.22000.2710 | ||
| Microsoft | N/A | Windows Server 2022, 23H2 Edition (Server Core installation) versions antérieures à 10.0.25398.1009 | ||
| Microsoft | N/A | Windows Server 2022, 23H2 Edition (Server Core installation) versions antérieures à 10.0.25398.1085 | ||
| Microsoft | N/A | Windows Server 2022, 23H2 Edition (Server Core installation) versions antérieures à 10.0.25398.950 |
References
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Remote Desktop client pour Windows Desktop versions ant\u00e9rieures \u00e0 1.2.5560.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1607 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.14393.7070",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1607 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.14393.7159",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1607 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.14393.7259",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1607 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.14393.7070",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1607 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.14393.7159",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1607 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.14393.7259",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1809 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.17763.5936",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1809 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.17763.6054",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1809 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.17763.6189",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1809 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.17763.5936",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1809 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.17763.6054",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1809 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.17763.6189",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1809 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.17763.5936",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1809 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.17763.6054",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1809 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.17763.6189",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 21H2 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.19041.3920",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 21H2 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.19044.4529",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 21H2 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.19044.4651",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 21H2 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.19044.4780",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 21H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.19044.4529",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 21H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.19044.4651",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 21H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.19044.4780",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 21H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.19041.3920",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 21H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.19044.4529",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 21H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.19044.4651",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 21H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.19044.4780",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 22H2 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.19041.3920",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 22H2 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.19045.4529",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 22H2 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.19045.4651",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 22H2 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.19045.4780",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 22H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.19045.4529",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 22H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.19045.4651",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 22H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.19045.4780",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 22H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.19041.3920",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 22H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.19045.4529",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 22H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.19045.4651",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 22H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.19045.4780",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.10240.20680",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.10240.20710",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.10240.20751",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.10240.20680",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.10240.20710",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.10240.20751",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 22H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.22621.3737",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 22H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.22621.3880",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 22H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.22621.4037",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 22H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.22621.3737",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 22H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.22621.3880",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 22H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.22621.4037",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 23H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.22631.3737",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 23H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.22631.3880",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 23H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.22631.4037",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 23H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.22631.3737",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 23H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.22631.3880",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 23H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.22631.4037",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 24H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.26100.1457",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 24H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.26100.1457",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 version 21H2 pour syst\u00e8mes ARM64 ant\u00e9rieures \u00e0 10.0.22000.3019",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 version 21H2 pour syst\u00e8mes ARM64 ant\u00e9rieures \u00e0 10.0.22000.3079",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 version 21H2 pour syst\u00e8mes ARM64 ant\u00e9rieures \u00e0 10.0.22000.3147",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 version 21H2 pour syst\u00e8mes x64 ant\u00e9rieures \u00e0 10.0.22000.2710",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 version 21H2 pour syst\u00e8mes x64 ant\u00e9rieures \u00e0 10.0.22000.3019",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 version 21H2 pour syst\u00e8mes x64 ant\u00e9rieures \u00e0 10.0.22000.3079",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 version 21H2 pour syst\u00e8mes x64 ant\u00e9rieures \u00e0 10.0.22000.3147",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 R2 pour syst\u00e8mes x64 Service Pack 1 (Server Core installation) versions ant\u00e9rieures \u00e0 6.1.7601.27219",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 R2 pour syst\u00e8mes x64 Service Pack 1 (Server Core installation) versions ant\u00e9rieures \u00e0 6.1.7601.27277",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 R2 pour syst\u00e8mes x64 Service Pack 1 versions ant\u00e9rieures \u00e0 6.1.7601.27219",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 R2 pour syst\u00e8mes x64 Service Pack 1 versions ant\u00e9rieures \u00e0 6.1.7601.27277",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 pour syst\u00e8mes 32 bits Service Pack 2 (Server Core installation) versions ant\u00e9rieures \u00e0 6.0.6003.22769",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 pour syst\u00e8mes 32 bits Service Pack 2 (Server Core installation) versions ant\u00e9rieures \u00e0 6.0.6003.22825",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 pour syst\u00e8mes 32 bits Service Pack 2 versions ant\u00e9rieures \u00e0 6.0.6003.22769",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 pour syst\u00e8mes 32 bits Service Pack 2 versions ant\u00e9rieures \u00e0 6.0.6003.22825",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 pour syst\u00e8mes x64 Service Pack 2 (Server Core installation) versions ant\u00e9rieures \u00e0 6.0.6003.22769",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 pour syst\u00e8mes x64 Service Pack 2 (Server Core installation) versions ant\u00e9rieures \u00e0 6.0.6003.22825",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 pour syst\u00e8mes x64 Service Pack 2 versions ant\u00e9rieures \u00e0 6.0.6003.22769",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 pour syst\u00e8mes x64 Service Pack 2 versions ant\u00e9rieures \u00e0 6.0.6003.22825",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 (Server Core installation) versions ant\u00e9rieures \u00e0 6.2.9200.24919",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 (Server Core installation) versions ant\u00e9rieures \u00e0 6.2.9200.24975",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 (Server Core installation) versions ant\u00e9rieures \u00e0 6.2.9200.25031",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 R2 (Server Core installation) versions ant\u00e9rieures \u00e0 1.001",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 R2 (Server Core installation) versions ant\u00e9rieures \u00e0 6.3.9600.22023",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 R2 (Server Core installation) versions ant\u00e9rieures \u00e0 6.3.9600.22074",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 R2 (Server Core installation) versions ant\u00e9rieures \u00e0 6.3.9600.22134",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 R2 versions ant\u00e9rieures \u00e0 1.001",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 R2 versions ant\u00e9rieures \u00e0 6.3.9600.22023",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 R2 versions ant\u00e9rieures \u00e0 6.3.9600.22074",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 R2 versions ant\u00e9rieures \u00e0 6.3.9600.22134",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 versions ant\u00e9rieures \u00e0 6.2.9200.24919",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 versions ant\u00e9rieures \u00e0 6.2.9200.24975",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 versions ant\u00e9rieures \u00e0 6.2.9200.25031",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2016 (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.14393.7070",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2016 (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.14393.7159",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2016 (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.14393.7259",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2016 versions ant\u00e9rieures \u00e0 10.0.14393.7070",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2016 versions ant\u00e9rieures \u00e0 10.0.14393.7159",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2016 versions ant\u00e9rieures \u00e0 10.0.14393.7259",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2019 (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.17763.5936",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2019 (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.17763.6054",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2019 (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.17763.6189",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2019 versions ant\u00e9rieures \u00e0 10.0.17763.5936",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2019 versions ant\u00e9rieures \u00e0 10.0.17763.6054",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2019 versions ant\u00e9rieures \u00e0 10.0.17763.6189",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2022 (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.20348.2522",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2022 (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.20348.2582",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2022 (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.20348.2655",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2022 versions ant\u00e9rieures \u00e0 10.0.20348.2522",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2022 versions ant\u00e9rieures \u00e0 10.0.20348.2582",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2022 versions ant\u00e9rieures \u00e0 10.0.20348.2655",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2022 versions ant\u00e9rieures \u00e0 10.0.22000.2710",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2022, 23H2 Edition (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.25398.1009",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2022, 23H2 Edition (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.25398.1085",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2022, 23H2 Edition (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.25398.950",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2024-38147",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38147"
},
{
"name": "CVE-2024-38126",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38126"
},
{
"name": "CVE-2024-38136",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38136"
},
{
"name": "CVE-2024-38215",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38215"
},
{
"name": "CVE-2024-38123",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38123"
},
{
"name": "CVE-2024-38185",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38185"
},
{
"name": "CVE-2024-38163",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38163"
},
{
"name": "CVE-2024-38132",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38132"
},
{
"name": "CVE-2024-38213",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38213"
},
{
"name": "CVE-2024-38114",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38114"
},
{
"name": "CVE-2024-38154",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38154"
},
{
"name": "CVE-2024-38160",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38160"
},
{
"name": "CVE-2024-38142",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38142"
},
{
"name": "CVE-2022-2601",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2601"
},
{
"name": "CVE-2024-38187",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38187"
},
{
"name": "CVE-2024-38138",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38138"
},
{
"name": "CVE-2024-38115",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38115"
},
{
"name": "CVE-2024-38122",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38122"
},
{
"name": "CVE-2024-38191",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38191"
},
{
"name": "CVE-2024-38184",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38184"
},
{
"name": "CVE-2024-38145",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38145"
},
{
"name": "CVE-2024-38198",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38198"
},
{
"name": "CVE-2024-38121",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38121"
},
{
"name": "CVE-2024-38106",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38106"
},
{
"name": "CVE-2024-38148",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38148"
},
{
"name": "CVE-2024-38161",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38161"
},
{
"name": "CVE-2024-38063",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38063"
},
{
"name": "CVE-2024-38120",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38120"
},
{
"name": "CVE-2024-38153",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38153"
},
{
"name": "CVE-2024-38127",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38127"
},
{
"name": "CVE-2024-38223",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38223"
},
{
"name": "CVE-2024-38193",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38193"
},
{
"name": "CVE-2024-38143",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38143"
},
{
"name": "CVE-2024-38141",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38141"
},
{
"name": "CVE-2024-38178",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38178"
},
{
"name": "CVE-2024-38155",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38155"
},
{
"name": "CVE-2024-38214",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38214"
},
{
"name": "CVE-2024-38128",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38128"
},
{
"name": "CVE-2024-38134",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38134"
},
{
"name": "CVE-2024-38118",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38118"
},
{
"name": "CVE-2024-38144",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38144"
},
{
"name": "CVE-2024-38199",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38199"
},
{
"name": "CVE-2024-38186",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38186"
},
{
"name": "CVE-2024-38107",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38107"
},
{
"name": "CVE-2024-38137",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38137"
},
{
"name": "CVE-2024-38135",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38135"
},
{
"name": "CVE-2024-38159",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38159"
},
{
"name": "CVE-2024-38146",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38146"
},
{
"name": "CVE-2024-38196",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38196"
},
{
"name": "CVE-2024-38140",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38140"
},
{
"name": "CVE-2024-38152",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38152"
},
{
"name": "CVE-2024-29995",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-29995"
},
{
"name": "CVE-2024-38165",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38165"
},
{
"name": "CVE-2024-37968",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-37968"
},
{
"name": "CVE-2024-38150",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38150"
},
{
"name": "CVE-2022-3775",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3775"
},
{
"name": "CVE-2024-38125",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38125"
},
{
"name": "CVE-2024-38116",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38116"
},
{
"name": "CVE-2024-38131",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38131"
},
{
"name": "CVE-2024-38180",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38180"
},
{
"name": "CVE-2024-38151",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38151"
},
{
"name": "CVE-2024-38133",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38133"
},
{
"name": "CVE-2024-38130",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38130"
},
{
"name": "CVE-2023-40547",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-40547"
},
{
"name": "CVE-2024-38117",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38117"
}
],
"links": [],
"reference": "CERTFR-2024-AVI-0681",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2024-08-14T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Microsoft Windows. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n\nMicrosoft indique que les vuln\u00e9rabilit\u00e9s CVE-2024-38106, CVE-2024-38107, CVE-2024-38178, CVE-2024-38193 et CVE-2024-38213 sont activement exploit\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Windows",
"vendor_advisories": [
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38223",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38223"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38134",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38134"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38120",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38120"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-29995",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29995"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38161",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38161"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38136",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38136"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38131",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38131"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38153",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38153"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2022-3775",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-3775"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38125",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38125"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38141",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38141"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38186",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38186"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2023-40547",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-40547"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38185",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38185"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38063",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38063"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38135",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38135"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38128",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38128"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38151",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38151"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38133",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38133"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38147",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38147"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38121",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38121"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38142",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38142"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38214",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38214"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38145",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38145"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38122",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38122"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38187",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38187"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38178",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38178"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38184",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38184"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38199",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38199"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2022-2601",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-2601"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38213",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38213"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38106",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38106"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38215",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38215"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38114",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38114"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38140",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38140"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38130",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38130"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38138",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38138"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38115",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38115"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38165",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38165"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38150",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38150"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38152",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38152"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38155",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38155"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-37968",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37968"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38198",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38198"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38127",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38127"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38180",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38180"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38123",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38123"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38118",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38118"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38132",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38132"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38160",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38160"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38148",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38148"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38137",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38137"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38144",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38144"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38159",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38159"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38107",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38107"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38117",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38117"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38154",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38154"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38116",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38116"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38193",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38193"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38143",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38143"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38126",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38126"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38146",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38146"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38196",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38196"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38191",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38191"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38163",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38163"
}
]
}
CERTFR-2024-AVI-0681
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Microsoft Windows. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et une atteinte à la confidentialité des données.
Microsoft indique que les vulnérabilités CVE-2024-38106, CVE-2024-38107, CVE-2024-38178, CVE-2024-38193 et CVE-2024-38213 sont activement exploitées.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Microsoft | N/A | Remote Desktop client pour Windows Desktop versions antérieures à 1.2.5560.0 | ||
| Microsoft | N/A | Windows 10 Version 1607 pour systèmes 32 bits versions antérieures à 10.0.14393.7070 | ||
| Microsoft | N/A | Windows 10 Version 1607 pour systèmes 32 bits versions antérieures à 10.0.14393.7159 | ||
| Microsoft | N/A | Windows 10 Version 1607 pour systèmes 32 bits versions antérieures à 10.0.14393.7259 | ||
| Microsoft | N/A | Windows 10 Version 1607 pour systèmes x64 versions antérieures à 10.0.14393.7070 | ||
| Microsoft | N/A | Windows 10 Version 1607 pour systèmes x64 versions antérieures à 10.0.14393.7159 | ||
| Microsoft | N/A | Windows 10 Version 1607 pour systèmes x64 versions antérieures à 10.0.14393.7259 | ||
| Microsoft | N/A | Windows 10 Version 1809 pour systèmes 32 bits versions antérieures à 10.0.17763.5936 | ||
| Microsoft | N/A | Windows 10 Version 1809 pour systèmes 32 bits versions antérieures à 10.0.17763.6054 | ||
| Microsoft | N/A | Windows 10 Version 1809 pour systèmes 32 bits versions antérieures à 10.0.17763.6189 | ||
| Microsoft | N/A | Windows 10 Version 1809 pour systèmes ARM64 versions antérieures à 10.0.17763.5936 | ||
| Microsoft | N/A | Windows 10 Version 1809 pour systèmes ARM64 versions antérieures à 10.0.17763.6054 | ||
| Microsoft | N/A | Windows 10 Version 1809 pour systèmes ARM64 versions antérieures à 10.0.17763.6189 | ||
| Microsoft | N/A | Windows 10 Version 1809 pour systèmes x64 versions antérieures à 10.0.17763.5936 | ||
| Microsoft | N/A | Windows 10 Version 1809 pour systèmes x64 versions antérieures à 10.0.17763.6054 | ||
| Microsoft | N/A | Windows 10 Version 1809 pour systèmes x64 versions antérieures à 10.0.17763.6189 | ||
| Microsoft | N/A | Windows 10 Version 21H2 pour systèmes 32 bits versions antérieures à 10.0.19041.3920 | ||
| Microsoft | N/A | Windows 10 Version 21H2 pour systèmes 32 bits versions antérieures à 10.0.19044.4529 | ||
| Microsoft | N/A | Windows 10 Version 21H2 pour systèmes 32 bits versions antérieures à 10.0.19044.4651 | ||
| Microsoft | N/A | Windows 10 Version 21H2 pour systèmes 32 bits versions antérieures à 10.0.19044.4780 | ||
| Microsoft | N/A | Windows 10 Version 21H2 pour systèmes ARM64 versions antérieures à 10.0.19044.4529 | ||
| Microsoft | N/A | Windows 10 Version 21H2 pour systèmes ARM64 versions antérieures à 10.0.19044.4651 | ||
| Microsoft | N/A | Windows 10 Version 21H2 pour systèmes ARM64 versions antérieures à 10.0.19044.4780 | ||
| Microsoft | N/A | Windows 10 Version 21H2 pour systèmes x64 versions antérieures à 10.0.19041.3920 | ||
| Microsoft | N/A | Windows 10 Version 21H2 pour systèmes x64 versions antérieures à 10.0.19044.4529 | ||
| Microsoft | N/A | Windows 10 Version 21H2 pour systèmes x64 versions antérieures à 10.0.19044.4651 | ||
| Microsoft | N/A | Windows 10 Version 21H2 pour systèmes x64 versions antérieures à 10.0.19044.4780 | ||
| Microsoft | N/A | Windows 10 Version 22H2 pour systèmes 32 bits versions antérieures à 10.0.19041.3920 | ||
| Microsoft | N/A | Windows 10 Version 22H2 pour systèmes 32 bits versions antérieures à 10.0.19045.4529 | ||
| Microsoft | N/A | Windows 10 Version 22H2 pour systèmes 32 bits versions antérieures à 10.0.19045.4651 | ||
| Microsoft | N/A | Windows 10 Version 22H2 pour systèmes 32 bits versions antérieures à 10.0.19045.4780 | ||
| Microsoft | N/A | Windows 10 Version 22H2 pour systèmes ARM64 versions antérieures à 10.0.19045.4529 | ||
| Microsoft | N/A | Windows 10 Version 22H2 pour systèmes ARM64 versions antérieures à 10.0.19045.4651 | ||
| Microsoft | N/A | Windows 10 Version 22H2 pour systèmes ARM64 versions antérieures à 10.0.19045.4780 | ||
| Microsoft | N/A | Windows 10 Version 22H2 pour systèmes x64 versions antérieures à 10.0.19041.3920 | ||
| Microsoft | N/A | Windows 10 Version 22H2 pour systèmes x64 versions antérieures à 10.0.19045.4529 | ||
| Microsoft | N/A | Windows 10 Version 22H2 pour systèmes x64 versions antérieures à 10.0.19045.4651 | ||
| Microsoft | N/A | Windows 10 Version 22H2 pour systèmes x64 versions antérieures à 10.0.19045.4780 | ||
| Microsoft | N/A | Windows 10 pour systèmes 32 bits versions antérieures à 10.0.10240.20680 | ||
| Microsoft | N/A | Windows 10 pour systèmes 32 bits versions antérieures à 10.0.10240.20710 | ||
| Microsoft | N/A | Windows 10 pour systèmes 32 bits versions antérieures à 10.0.10240.20751 | ||
| Microsoft | N/A | Windows 10 pour systèmes x64 versions antérieures à 10.0.10240.20680 | ||
| Microsoft | N/A | Windows 10 pour systèmes x64 versions antérieures à 10.0.10240.20710 | ||
| Microsoft | N/A | Windows 10 pour systèmes x64 versions antérieures à 10.0.10240.20751 | ||
| Microsoft | N/A | Windows 11 Version 22H2 pour systèmes ARM64 versions antérieures à 10.0.22621.3737 | ||
| Microsoft | N/A | Windows 11 Version 22H2 pour systèmes ARM64 versions antérieures à 10.0.22621.3880 | ||
| Microsoft | N/A | Windows 11 Version 22H2 pour systèmes ARM64 versions antérieures à 10.0.22621.4037 | ||
| Microsoft | N/A | Windows 11 Version 22H2 pour systèmes x64 versions antérieures à 10.0.22621.3737 | ||
| Microsoft | N/A | Windows 11 Version 22H2 pour systèmes x64 versions antérieures à 10.0.22621.3880 | ||
| Microsoft | N/A | Windows 11 Version 22H2 pour systèmes x64 versions antérieures à 10.0.22621.4037 | ||
| Microsoft | N/A | Windows 11 Version 23H2 pour systèmes ARM64 versions antérieures à 10.0.22631.3737 | ||
| Microsoft | N/A | Windows 11 Version 23H2 pour systèmes ARM64 versions antérieures à 10.0.22631.3880 | ||
| Microsoft | N/A | Windows 11 Version 23H2 pour systèmes ARM64 versions antérieures à 10.0.22631.4037 | ||
| Microsoft | N/A | Windows 11 Version 23H2 pour systèmes x64 versions antérieures à 10.0.22631.3737 | ||
| Microsoft | N/A | Windows 11 Version 23H2 pour systèmes x64 versions antérieures à 10.0.22631.3880 | ||
| Microsoft | N/A | Windows 11 Version 23H2 pour systèmes x64 versions antérieures à 10.0.22631.4037 | ||
| Microsoft | N/A | Windows 11 Version 24H2 pour systèmes ARM64 versions antérieures à 10.0.26100.1457 | ||
| Microsoft | N/A | Windows 11 Version 24H2 pour systèmes x64 versions antérieures à 10.0.26100.1457 | ||
| Microsoft | N/A | Windows 11 version 21H2 pour systèmes ARM64 antérieures à 10.0.22000.3019 | ||
| Microsoft | N/A | Windows 11 version 21H2 pour systèmes ARM64 antérieures à 10.0.22000.3079 | ||
| Microsoft | N/A | Windows 11 version 21H2 pour systèmes ARM64 antérieures à 10.0.22000.3147 | ||
| Microsoft | N/A | Windows 11 version 21H2 pour systèmes x64 antérieures à 10.0.22000.2710 | ||
| Microsoft | N/A | Windows 11 version 21H2 pour systèmes x64 antérieures à 10.0.22000.3019 | ||
| Microsoft | N/A | Windows 11 version 21H2 pour systèmes x64 antérieures à 10.0.22000.3079 | ||
| Microsoft | N/A | Windows 11 version 21H2 pour systèmes x64 antérieures à 10.0.22000.3147 | ||
| Microsoft | N/A | Windows Server 2008 R2 pour systèmes x64 Service Pack 1 (Server Core installation) versions antérieures à 6.1.7601.27219 | ||
| Microsoft | N/A | Windows Server 2008 R2 pour systèmes x64 Service Pack 1 (Server Core installation) versions antérieures à 6.1.7601.27277 | ||
| Microsoft | N/A | Windows Server 2008 R2 pour systèmes x64 Service Pack 1 versions antérieures à 6.1.7601.27219 | ||
| Microsoft | N/A | Windows Server 2008 R2 pour systèmes x64 Service Pack 1 versions antérieures à 6.1.7601.27277 | ||
| Microsoft | N/A | Windows Server 2008 pour systèmes 32 bits Service Pack 2 (Server Core installation) versions antérieures à 6.0.6003.22769 | ||
| Microsoft | N/A | Windows Server 2008 pour systèmes 32 bits Service Pack 2 (Server Core installation) versions antérieures à 6.0.6003.22825 | ||
| Microsoft | N/A | Windows Server 2008 pour systèmes 32 bits Service Pack 2 versions antérieures à 6.0.6003.22769 | ||
| Microsoft | N/A | Windows Server 2008 pour systèmes 32 bits Service Pack 2 versions antérieures à 6.0.6003.22825 | ||
| Microsoft | N/A | Windows Server 2008 pour systèmes x64 Service Pack 2 (Server Core installation) versions antérieures à 6.0.6003.22769 | ||
| Microsoft | N/A | Windows Server 2008 pour systèmes x64 Service Pack 2 (Server Core installation) versions antérieures à 6.0.6003.22825 | ||
| Microsoft | N/A | Windows Server 2008 pour systèmes x64 Service Pack 2 versions antérieures à 6.0.6003.22769 | ||
| Microsoft | N/A | Windows Server 2008 pour systèmes x64 Service Pack 2 versions antérieures à 6.0.6003.22825 | ||
| Microsoft | N/A | Windows Server 2012 (Server Core installation) versions antérieures à 6.2.9200.24919 | ||
| Microsoft | N/A | Windows Server 2012 (Server Core installation) versions antérieures à 6.2.9200.24975 | ||
| Microsoft | N/A | Windows Server 2012 (Server Core installation) versions antérieures à 6.2.9200.25031 | ||
| Microsoft | N/A | Windows Server 2012 R2 (Server Core installation) versions antérieures à 1.001 | ||
| Microsoft | N/A | Windows Server 2012 R2 (Server Core installation) versions antérieures à 6.3.9600.22023 | ||
| Microsoft | N/A | Windows Server 2012 R2 (Server Core installation) versions antérieures à 6.3.9600.22074 | ||
| Microsoft | N/A | Windows Server 2012 R2 (Server Core installation) versions antérieures à 6.3.9600.22134 | ||
| Microsoft | N/A | Windows Server 2012 R2 versions antérieures à 1.001 | ||
| Microsoft | N/A | Windows Server 2012 R2 versions antérieures à 6.3.9600.22023 | ||
| Microsoft | N/A | Windows Server 2012 R2 versions antérieures à 6.3.9600.22074 | ||
| Microsoft | N/A | Windows Server 2012 R2 versions antérieures à 6.3.9600.22134 | ||
| Microsoft | N/A | Windows Server 2012 versions antérieures à 6.2.9200.24919 | ||
| Microsoft | N/A | Windows Server 2012 versions antérieures à 6.2.9200.24975 | ||
| Microsoft | N/A | Windows Server 2012 versions antérieures à 6.2.9200.25031 | ||
| Microsoft | N/A | Windows Server 2016 (Server Core installation) versions antérieures à 10.0.14393.7070 | ||
| Microsoft | N/A | Windows Server 2016 (Server Core installation) versions antérieures à 10.0.14393.7159 | ||
| Microsoft | N/A | Windows Server 2016 (Server Core installation) versions antérieures à 10.0.14393.7259 | ||
| Microsoft | N/A | Windows Server 2016 versions antérieures à 10.0.14393.7070 | ||
| Microsoft | N/A | Windows Server 2016 versions antérieures à 10.0.14393.7159 | ||
| Microsoft | N/A | Windows Server 2016 versions antérieures à 10.0.14393.7259 | ||
| Microsoft | N/A | Windows Server 2019 (Server Core installation) versions antérieures à 10.0.17763.5936 | ||
| Microsoft | N/A | Windows Server 2019 (Server Core installation) versions antérieures à 10.0.17763.6054 | ||
| Microsoft | N/A | Windows Server 2019 (Server Core installation) versions antérieures à 10.0.17763.6189 | ||
| Microsoft | N/A | Windows Server 2019 versions antérieures à 10.0.17763.5936 | ||
| Microsoft | N/A | Windows Server 2019 versions antérieures à 10.0.17763.6054 | ||
| Microsoft | N/A | Windows Server 2019 versions antérieures à 10.0.17763.6189 | ||
| Microsoft | N/A | Windows Server 2022 (Server Core installation) versions antérieures à 10.0.20348.2522 | ||
| Microsoft | N/A | Windows Server 2022 (Server Core installation) versions antérieures à 10.0.20348.2582 | ||
| Microsoft | N/A | Windows Server 2022 (Server Core installation) versions antérieures à 10.0.20348.2655 | ||
| Microsoft | N/A | Windows Server 2022 versions antérieures à 10.0.20348.2522 | ||
| Microsoft | N/A | Windows Server 2022 versions antérieures à 10.0.20348.2582 | ||
| Microsoft | N/A | Windows Server 2022 versions antérieures à 10.0.20348.2655 | ||
| Microsoft | N/A | Windows Server 2022 versions antérieures à 10.0.22000.2710 | ||
| Microsoft | N/A | Windows Server 2022, 23H2 Edition (Server Core installation) versions antérieures à 10.0.25398.1009 | ||
| Microsoft | N/A | Windows Server 2022, 23H2 Edition (Server Core installation) versions antérieures à 10.0.25398.1085 | ||
| Microsoft | N/A | Windows Server 2022, 23H2 Edition (Server Core installation) versions antérieures à 10.0.25398.950 |
References
| Title | Publication Time | Tags | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Remote Desktop client pour Windows Desktop versions ant\u00e9rieures \u00e0 1.2.5560.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1607 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.14393.7070",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1607 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.14393.7159",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1607 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.14393.7259",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1607 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.14393.7070",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1607 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.14393.7159",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1607 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.14393.7259",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1809 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.17763.5936",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1809 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.17763.6054",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1809 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.17763.6189",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1809 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.17763.5936",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1809 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.17763.6054",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1809 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.17763.6189",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1809 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.17763.5936",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1809 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.17763.6054",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1809 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.17763.6189",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 21H2 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.19041.3920",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 21H2 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.19044.4529",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 21H2 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.19044.4651",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 21H2 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.19044.4780",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 21H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.19044.4529",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 21H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.19044.4651",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 21H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.19044.4780",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 21H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.19041.3920",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 21H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.19044.4529",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 21H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.19044.4651",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 21H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.19044.4780",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 22H2 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.19041.3920",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 22H2 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.19045.4529",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 22H2 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.19045.4651",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 22H2 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.19045.4780",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 22H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.19045.4529",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 22H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.19045.4651",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 22H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.19045.4780",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 22H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.19041.3920",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 22H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.19045.4529",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 22H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.19045.4651",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 22H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.19045.4780",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.10240.20680",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.10240.20710",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.10240.20751",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.10240.20680",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.10240.20710",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.10240.20751",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 22H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.22621.3737",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 22H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.22621.3880",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 22H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.22621.4037",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 22H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.22621.3737",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 22H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.22621.3880",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 22H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.22621.4037",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 23H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.22631.3737",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 23H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.22631.3880",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 23H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.22631.4037",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 23H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.22631.3737",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 23H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.22631.3880",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 23H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.22631.4037",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 24H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.26100.1457",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 24H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.26100.1457",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 version 21H2 pour syst\u00e8mes ARM64 ant\u00e9rieures \u00e0 10.0.22000.3019",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 version 21H2 pour syst\u00e8mes ARM64 ant\u00e9rieures \u00e0 10.0.22000.3079",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 version 21H2 pour syst\u00e8mes ARM64 ant\u00e9rieures \u00e0 10.0.22000.3147",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 version 21H2 pour syst\u00e8mes x64 ant\u00e9rieures \u00e0 10.0.22000.2710",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 version 21H2 pour syst\u00e8mes x64 ant\u00e9rieures \u00e0 10.0.22000.3019",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 version 21H2 pour syst\u00e8mes x64 ant\u00e9rieures \u00e0 10.0.22000.3079",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 version 21H2 pour syst\u00e8mes x64 ant\u00e9rieures \u00e0 10.0.22000.3147",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 R2 pour syst\u00e8mes x64 Service Pack 1 (Server Core installation) versions ant\u00e9rieures \u00e0 6.1.7601.27219",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 R2 pour syst\u00e8mes x64 Service Pack 1 (Server Core installation) versions ant\u00e9rieures \u00e0 6.1.7601.27277",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 R2 pour syst\u00e8mes x64 Service Pack 1 versions ant\u00e9rieures \u00e0 6.1.7601.27219",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 R2 pour syst\u00e8mes x64 Service Pack 1 versions ant\u00e9rieures \u00e0 6.1.7601.27277",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 pour syst\u00e8mes 32 bits Service Pack 2 (Server Core installation) versions ant\u00e9rieures \u00e0 6.0.6003.22769",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 pour syst\u00e8mes 32 bits Service Pack 2 (Server Core installation) versions ant\u00e9rieures \u00e0 6.0.6003.22825",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 pour syst\u00e8mes 32 bits Service Pack 2 versions ant\u00e9rieures \u00e0 6.0.6003.22769",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 pour syst\u00e8mes 32 bits Service Pack 2 versions ant\u00e9rieures \u00e0 6.0.6003.22825",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 pour syst\u00e8mes x64 Service Pack 2 (Server Core installation) versions ant\u00e9rieures \u00e0 6.0.6003.22769",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 pour syst\u00e8mes x64 Service Pack 2 (Server Core installation) versions ant\u00e9rieures \u00e0 6.0.6003.22825",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 pour syst\u00e8mes x64 Service Pack 2 versions ant\u00e9rieures \u00e0 6.0.6003.22769",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 pour syst\u00e8mes x64 Service Pack 2 versions ant\u00e9rieures \u00e0 6.0.6003.22825",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 (Server Core installation) versions ant\u00e9rieures \u00e0 6.2.9200.24919",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 (Server Core installation) versions ant\u00e9rieures \u00e0 6.2.9200.24975",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 (Server Core installation) versions ant\u00e9rieures \u00e0 6.2.9200.25031",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 R2 (Server Core installation) versions ant\u00e9rieures \u00e0 1.001",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 R2 (Server Core installation) versions ant\u00e9rieures \u00e0 6.3.9600.22023",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 R2 (Server Core installation) versions ant\u00e9rieures \u00e0 6.3.9600.22074",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 R2 (Server Core installation) versions ant\u00e9rieures \u00e0 6.3.9600.22134",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 R2 versions ant\u00e9rieures \u00e0 1.001",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 R2 versions ant\u00e9rieures \u00e0 6.3.9600.22023",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 R2 versions ant\u00e9rieures \u00e0 6.3.9600.22074",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 R2 versions ant\u00e9rieures \u00e0 6.3.9600.22134",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 versions ant\u00e9rieures \u00e0 6.2.9200.24919",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 versions ant\u00e9rieures \u00e0 6.2.9200.24975",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 versions ant\u00e9rieures \u00e0 6.2.9200.25031",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2016 (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.14393.7070",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2016 (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.14393.7159",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2016 (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.14393.7259",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2016 versions ant\u00e9rieures \u00e0 10.0.14393.7070",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2016 versions ant\u00e9rieures \u00e0 10.0.14393.7159",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2016 versions ant\u00e9rieures \u00e0 10.0.14393.7259",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2019 (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.17763.5936",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2019 (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.17763.6054",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2019 (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.17763.6189",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2019 versions ant\u00e9rieures \u00e0 10.0.17763.5936",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2019 versions ant\u00e9rieures \u00e0 10.0.17763.6054",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2019 versions ant\u00e9rieures \u00e0 10.0.17763.6189",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2022 (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.20348.2522",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2022 (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.20348.2582",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2022 (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.20348.2655",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2022 versions ant\u00e9rieures \u00e0 10.0.20348.2522",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2022 versions ant\u00e9rieures \u00e0 10.0.20348.2582",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2022 versions ant\u00e9rieures \u00e0 10.0.20348.2655",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2022 versions ant\u00e9rieures \u00e0 10.0.22000.2710",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2022, 23H2 Edition (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.25398.1009",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2022, 23H2 Edition (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.25398.1085",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2022, 23H2 Edition (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.25398.950",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2024-38147",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38147"
},
{
"name": "CVE-2024-38126",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38126"
},
{
"name": "CVE-2024-38136",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38136"
},
{
"name": "CVE-2024-38215",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38215"
},
{
"name": "CVE-2024-38123",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38123"
},
{
"name": "CVE-2024-38185",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38185"
},
{
"name": "CVE-2024-38163",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38163"
},
{
"name": "CVE-2024-38132",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38132"
},
{
"name": "CVE-2024-38213",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38213"
},
{
"name": "CVE-2024-38114",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38114"
},
{
"name": "CVE-2024-38154",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38154"
},
{
"name": "CVE-2024-38160",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38160"
},
{
"name": "CVE-2024-38142",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38142"
},
{
"name": "CVE-2022-2601",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2601"
},
{
"name": "CVE-2024-38187",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38187"
},
{
"name": "CVE-2024-38138",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38138"
},
{
"name": "CVE-2024-38115",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38115"
},
{
"name": "CVE-2024-38122",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38122"
},
{
"name": "CVE-2024-38191",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38191"
},
{
"name": "CVE-2024-38184",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38184"
},
{
"name": "CVE-2024-38145",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38145"
},
{
"name": "CVE-2024-38198",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38198"
},
{
"name": "CVE-2024-38121",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38121"
},
{
"name": "CVE-2024-38106",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38106"
},
{
"name": "CVE-2024-38148",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38148"
},
{
"name": "CVE-2024-38161",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38161"
},
{
"name": "CVE-2024-38063",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38063"
},
{
"name": "CVE-2024-38120",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38120"
},
{
"name": "CVE-2024-38153",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38153"
},
{
"name": "CVE-2024-38127",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38127"
},
{
"name": "CVE-2024-38223",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38223"
},
{
"name": "CVE-2024-38193",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38193"
},
{
"name": "CVE-2024-38143",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38143"
},
{
"name": "CVE-2024-38141",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38141"
},
{
"name": "CVE-2024-38178",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38178"
},
{
"name": "CVE-2024-38155",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38155"
},
{
"name": "CVE-2024-38214",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38214"
},
{
"name": "CVE-2024-38128",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38128"
},
{
"name": "CVE-2024-38134",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38134"
},
{
"name": "CVE-2024-38118",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38118"
},
{
"name": "CVE-2024-38144",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38144"
},
{
"name": "CVE-2024-38199",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38199"
},
{
"name": "CVE-2024-38186",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38186"
},
{
"name": "CVE-2024-38107",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38107"
},
{
"name": "CVE-2024-38137",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38137"
},
{
"name": "CVE-2024-38135",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38135"
},
{
"name": "CVE-2024-38159",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38159"
},
{
"name": "CVE-2024-38146",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38146"
},
{
"name": "CVE-2024-38196",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38196"
},
{
"name": "CVE-2024-38140",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38140"
},
{
"name": "CVE-2024-38152",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38152"
},
{
"name": "CVE-2024-29995",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-29995"
},
{
"name": "CVE-2024-38165",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38165"
},
{
"name": "CVE-2024-37968",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-37968"
},
{
"name": "CVE-2024-38150",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38150"
},
{
"name": "CVE-2022-3775",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3775"
},
{
"name": "CVE-2024-38125",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38125"
},
{
"name": "CVE-2024-38116",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38116"
},
{
"name": "CVE-2024-38131",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38131"
},
{
"name": "CVE-2024-38180",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38180"
},
{
"name": "CVE-2024-38151",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38151"
},
{
"name": "CVE-2024-38133",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38133"
},
{
"name": "CVE-2024-38130",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38130"
},
{
"name": "CVE-2023-40547",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-40547"
},
{
"name": "CVE-2024-38117",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38117"
}
],
"links": [],
"reference": "CERTFR-2024-AVI-0681",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2024-08-14T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Microsoft Windows. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n\nMicrosoft indique que les vuln\u00e9rabilit\u00e9s CVE-2024-38106, CVE-2024-38107, CVE-2024-38178, CVE-2024-38193 et CVE-2024-38213 sont activement exploit\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Windows",
"vendor_advisories": [
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38223",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38223"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38134",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38134"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38120",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38120"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-29995",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29995"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38161",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38161"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38136",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38136"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38131",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38131"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38153",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38153"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2022-3775",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-3775"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38125",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38125"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38141",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38141"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38186",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38186"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2023-40547",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-40547"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38185",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38185"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38063",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38063"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38135",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38135"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38128",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38128"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38151",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38151"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38133",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38133"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38147",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38147"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38121",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38121"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38142",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38142"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38214",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38214"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38145",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38145"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38122",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38122"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38187",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38187"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38178",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38178"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38184",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38184"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38199",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38199"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2022-2601",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-2601"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38213",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38213"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38106",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38106"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38215",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38215"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38114",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38114"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38140",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38140"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38130",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38130"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38138",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38138"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38115",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38115"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38165",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38165"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38150",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38150"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38152",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38152"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38155",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38155"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-37968",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37968"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38198",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38198"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38127",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38127"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38180",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38180"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38123",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38123"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38118",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38118"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38132",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38132"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38160",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38160"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38148",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38148"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38137",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38137"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38144",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38144"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38159",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38159"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38107",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38107"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38117",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38117"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38154",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38154"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38116",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38116"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38193",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38193"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38143",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38143"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38126",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38126"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38146",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38146"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38196",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38196"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38191",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38191"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2024-38163",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38163"
}
]
}
NCSC-2024-0334
Vulnerability from csaf_ncscnl - Published: 2024-08-13 18:19 - Updated: 2024-08-27 07:59Summary
Kwetsbaarheden verholpen in Microsoft Windows
Notes
The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:
NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.
NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.
This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.
Feiten
Microsoft heeft kwetsbaarheden verholpen in Windows.
Interpretaties
Microsoft heeft kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade:
- Denial-of-Service
- Omzeilen van beveiligingsmaatregel
- Manipuleren van gegevens
- Verkrijgen van verhoogde rechten
- Spoofing
- Uitvoeren van willekeurige code (root/administrator rechten)
- Uitvoeren van willekeurige code (Gebruikersrechten)
- Toegang tot systeemgegevens
Van de kwetsbaarheden met kenmerk CVE-2024-38106, CVE-2024-38107, CVE-2024-38178 en CVE-2024-38193 geeft Microsoft aan informatie te hebben dat deze actief zijn misbruikt.
De kwetsbaarheden met kenmerk CVE-2024-38106, CVE-2024-38107 en CVE-2024-38193 bevinden zich respectievelijk in de Kernel, de Power Dependency Coördinator en de Ancillary Function Driver for WinSock en stellen een lokale, geauthenticeerde kwaadwillende in staat om zich verhoogde rechten toe te kennen en code uit te voeren met SYSTEM rechten.
De kwetsbaarheid met kenmerk CVE-2024-38178 bevindt zich in de Scripting Engine en stelt een kwaadwillende in staat om willekeurige code uit te voeren met rechten van het slachtoffer. Succesvol misbruik vereist wel dat de kwaadwillende het slachtoffer misleidt om de Edge browser in 'Internet Explorer mode' laat draaien.
Van de genoemde kwetsbaarheden is geen publieke Proof-of-Concept-code of exploit beschikbaar. Het vermoeden van het NCSC is echter dat deze wel op korte termijn publiek beschikbaar zal komen. Grootschalig actief misbruik is minder waarschijnlijk, vanwege de beperkende voorwaarden van misbruik.
De ernstigste kwetsbaarheid heeft kenmerk CVE-2024-38063 toegewezen gekregen en bevindt zich in de wijze waarop Windows het IPv6 Protocol verwerkt. Een kwaadwillende kan zonder voorafgaande authenticatie op afstand willekeurige code uitvoeren op het kwetsbare systeem door het herhaaldelijk verzenden van speciaal geprepareerde IPv6 packets. IPv6 is standaard actief. Onderzoekers hebben Proof-of-Concept-code (PoC) gepubliceerd waarmee de kwetsbaarheid kan worden aangetoond. De PoC code vereist dat het doelwit onder controle is van de onderzoeker en veroorzaakt op dit moment hooguit een memory corruption wat resulteert in een crash van het systeem. Uitvoer van willekeurige code wordt niet bereikt. De kans op grootschalig misbruik wordt hiermee groter, maar door de beperkende voorwaarde om de PoC werkend te krijgen is deze PoC niet zondermeer grootschalig op internet in te zetten. Microsoft is niet op de hoogte dat de kwetsbaarheid actief wordt misbruikt. Microsoft adviseert om als mitigerende maatregel IPv6 uit te schakelen indien dit niet strikt noodzakelijk is.
De kwetsbaarheden met kenmerk CVE-2024-21302 en CVE-2024-38202 zijn op de laatste BlackHat Conference gepubliceerd door de onderzoeker die ze ontdekt heeft. Deze kwetsbaarheden worden in de gegevens van deze maandelijkse update wel genoemd, maar in deze update worden ze niet verholpen.
Microsoft geeft aan nog aan een oplossing te werken en heeft wel mitigerende maatregelen gepubliceerd, om de dreiging van misbruik zo goed als mogelijk te beperken. Zie hiervoor de referenties naar de specifieke kwetsbaarheid.
De kwetsbaarheden stellen een kwaadwillende in staat om een roll-back uit te voeren van geïnstalleerde updates en zo het systeem weer kwetsbaar te maken voor oudere kwetsbaarheden, zonder dat dit ontdekt kan worden door het systeem. Voor het slachtoffer blijft het systeem voldoen aan de laatste beveiligingsupdates.
Succesvol misbruik is niet eenvoudig en vereist dat de kwaadwillende over verhoogde rechten beschikt op het kwetsbare systeem. Actief misbruik zal dus vermoedelijk een volgende stap in een keten zijn door een kwaadwillende die op andere wijze toegang heeft gekregen tot het kwetsbare systeem en deze kwetsbaarheden gebruikt om permanente toegang te garanderen.
```
Windows Mark of the Web (MOTW):
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38213 | 6.50 | Omzeilen van beveiligingsmaatregel |
|----------------|------|-------------------------------------|
Windows Compressed Folder:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38165 | 6.50 | Manipuleren van gegevens |
|----------------|------|-------------------------------------|
Windows Update Stack:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38163 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2024-38202 | 7.30 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|
Microsoft Windows DNS:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-37968 | 7.50 | Voordoen als andere gebruiker |
|----------------|------|-------------------------------------|
Windows Mobile Broadband:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38161 | 6.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|
Windows Ancillary Function Driver for WinSock:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38193 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2024-38141 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|
Windows IP Routing Management Snapin:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38114 | 8.80 | Uitvoeren van willekeurige code |
| CVE-2024-38115 | 8.80 | Uitvoeren van willekeurige code |
| CVE-2024-38116 | 8.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|
Windows Kernel:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38106 | 7.00 | Verkrijgen van verhoogde rechten |
| CVE-2024-38127 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2024-38133 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2024-38151 | 5.50 | Toegang tot gevoelige gegevens |
| CVE-2024-38153 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|
Windows Secure Boot:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2022-2601 | 8.60 | Omzeilen van beveiligingsmaatregel |
| CVE-2023-40547 | 8.30 | Omzeilen van beveiligingsmaatregel |
| CVE-2022-3775 | 7.10 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|
Windows Kernel-Mode Drivers:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38184 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2024-38191 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2024-38185 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2024-38186 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2024-38187 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|
Windows Print Spooler Components:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38198 | 7.50 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|
Windows Power Dependency Coordinator:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38107 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|
Windows SmartScreen:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38180 | 8.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|
Windows Initial Machine Configuration:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38223 | 6.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|
Line Printer Daemon Service (LPD):
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38199 | 9.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|
Microsoft Streaming Service:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38125 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2024-38134 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2024-38144 | 8.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|
Windows Kerberos:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-29995 | 8.10 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|
Windows Security Center:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38155 | 5.50 | Toegang tot gevoelige gegevens |
|----------------|------|-------------------------------------|
Windows Scripting:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38178 | 7.50 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|
Microsoft Local Security Authority Server (lsasrv):
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38118 | 5.50 | Toegang tot gevoelige gegevens |
| CVE-2024-38122 | 5.50 | Toegang tot gevoelige gegevens |
|----------------|------|-------------------------------------|
Windows NTFS:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38117 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|
Windows Routing and Remote Access Service (RRAS):
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38121 | 8.80 | Uitvoeren van willekeurige code |
| CVE-2024-38128 | 8.80 | Uitvoeren van willekeurige code |
| CVE-2024-38130 | 8.80 | Uitvoeren van willekeurige code |
| CVE-2024-38154 | 8.80 | Uitvoeren van willekeurige code |
| CVE-2024-38120 | 8.80 | Uitvoeren van willekeurige code |
| CVE-2024-38214 | 6.50 | Toegang tot gevoelige gegevens |
|----------------|------|-------------------------------------|
Windows WLAN Auto Config Service:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38143 | 4.20 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|
Windows NT OS Kernel:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38135 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|
Windows Network Address Translation (NAT):
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38126 | 7.50 | Denial-of-Service |
| CVE-2024-38132 | 7.50 | Denial-of-Service |
|----------------|------|-------------------------------------|
Windows Resource Manager:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38136 | 7.00 | Verkrijgen van verhoogde rechten |
| CVE-2024-38137 | 7.00 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|
Windows Common Log File System Driver:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38196 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|
Windows Transport Security Layer (TLS):
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38148 | 7.50 | Denial-of-Service |
|----------------|------|-------------------------------------|
Windows Secure Kernel Mode:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-21302 | 6.70 | Verkrijgen van verhoogde rechten |
| CVE-2024-38142 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|
Reliable Multicast Transport Driver (RMCAST):
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38140 | 9.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|
Microsoft Bluetooth Driver:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38123 | 4.40 | Toegang tot gevoelige gegevens |
|----------------|------|-------------------------------------|
Windows TCP/IP:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38063 | 9.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|
Windows Cloud Files Mini Filter Driver:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38215 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|
Windows DWM Core Library:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38147 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2024-38150 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|
Windows Clipboard Virtual Channel Extension:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38131 | 8.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|
Windows Network Virtualization:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38159 | 9.10 | Uitvoeren van willekeurige code |
| CVE-2024-38160 | 9.10 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|
Windows Deployment Services:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38138 | 7.50 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|
Microsoft WDAC OLE DB provider for SQL:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38152 | 7.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|
Windows Layer-2 Bridge Network Driver:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2024-38145 | 7.50 | Denial-of-Service |
| CVE-2024-38146 | 7.50 | Denial-of-Service |
|----------------|------|-------------------------------------|
```
Oplossingen
Microsoft heeft updates beschikbaar gesteld waarmee de beschreven kwetsbaarheden worden verholpen. Ook zijn mitigerende maatregelen gepubliceerd om de kans op misbruik te beperken voor die kwetsbaarheden waarvoor (nog) geen update beschikbaar is. We raden u aan om deze updates te installeren. Meer informatie over de kwetsbaarheden, de installatie van de updates en eventuele work-arounds vindt u op:
https://portal.msrc.microsoft.com/en-us/security-guidance
Kans
medium
Schade
high
CWE-122
Heap-based Buffer Overflow
CWE-125
Out-of-bounds Read
CWE-126
Buffer Over-read
CWE-138
Improper Neutralization of Special Elements
CWE-190
Integer Overflow or Wraparound
CWE-191
Integer Underflow (Wrap or Wraparound)
CWE-197
Numeric Truncation Error
CWE-20
Improper Input Validation
CWE-208
Observable Timing Discrepancy
CWE-284
Improper Access Control
CWE-306
Missing Authentication for Critical Function
CWE-345
Insufficient Verification of Data Authenticity
CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CWE-367
Time-of-check Time-of-use (TOCTOU) Race Condition
CWE-416
Use After Free
CWE-476
NULL Pointer Dereference
CWE-591
Sensitive Data Storage in Improperly Locked Memory
CWE-693
Protection Mechanism Failure
CWE-73
External Control of File Name or Path
CWE-787
Out-of-bounds Write
CWE-822
Untrusted Pointer Dereference
CWE-843
Access of Resource Using Incompatible Type ('Type Confusion')
CWE-908
Use of Uninitialized Resource
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE"
}
},
"lang": "nl",
"notes": [
{
"category": "legal_disclaimer",
"text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
},
{
"category": "description",
"text": "Microsoft heeft kwetsbaarheden verholpen in Windows.",
"title": "Feiten"
},
{
"category": "description",
"text": "Microsoft heeft kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorie\u00ebn schade:\n\n- Denial-of-Service\n- Omzeilen van beveiligingsmaatregel\n- Manipuleren van gegevens\n- Verkrijgen van verhoogde rechten\n- Spoofing\n- Uitvoeren van willekeurige code (root/administrator rechten)\n- Uitvoeren van willekeurige code (Gebruikersrechten)\n- Toegang tot systeemgegevens\n\nVan de kwetsbaarheden met kenmerk CVE-2024-38106, CVE-2024-38107, CVE-2024-38178 en CVE-2024-38193 geeft Microsoft aan informatie te hebben dat deze actief zijn misbruikt.\n\nDe kwetsbaarheden met kenmerk CVE-2024-38106, CVE-2024-38107 en CVE-2024-38193 bevinden zich respectievelijk in de Kernel, de Power Dependency Co\u00f6rdinator en de Ancillary Function Driver for WinSock en stellen een lokale, geauthenticeerde kwaadwillende in staat om zich verhoogde rechten toe te kennen en code uit te voeren met SYSTEM rechten.\n\nDe kwetsbaarheid met kenmerk CVE-2024-38178 bevindt zich in de Scripting Engine en stelt een kwaadwillende in staat om willekeurige code uit te voeren met rechten van het slachtoffer. Succesvol misbruik vereist wel dat de kwaadwillende het slachtoffer misleidt om de Edge browser in \u0027Internet Explorer mode\u0027 laat draaien.\nVan de genoemde kwetsbaarheden is geen publieke Proof-of-Concept-code of exploit beschikbaar. Het vermoeden van het NCSC is echter dat deze wel op korte termijn publiek beschikbaar zal komen. Grootschalig actief misbruik is minder waarschijnlijk, vanwege de beperkende voorwaarden van misbruik.\n\nDe ernstigste kwetsbaarheid heeft kenmerk CVE-2024-38063 toegewezen gekregen en bevindt zich in de wijze waarop Windows het IPv6 Protocol verwerkt. Een kwaadwillende kan zonder voorafgaande authenticatie op afstand willekeurige code uitvoeren op het kwetsbare systeem door het herhaaldelijk verzenden van speciaal geprepareerde IPv6 packets. IPv6 is standaard actief. Onderzoekers hebben Proof-of-Concept-code (PoC) gepubliceerd waarmee de kwetsbaarheid kan worden aangetoond. De PoC code vereist dat het doelwit onder controle is van de onderzoeker en veroorzaakt op dit moment hooguit een memory corruption wat resulteert in een crash van het systeem. Uitvoer van willekeurige code wordt niet bereikt. De kans op grootschalig misbruik wordt hiermee groter, maar door de beperkende voorwaarde om de PoC werkend te krijgen is deze PoC niet zondermeer grootschalig op internet in te zetten. Microsoft is niet op de hoogte dat de kwetsbaarheid actief wordt misbruikt. Microsoft adviseert om als mitigerende maatregel IPv6 uit te schakelen indien dit niet strikt noodzakelijk is.\n\nDe kwetsbaarheden met kenmerk CVE-2024-21302 en CVE-2024-38202 zijn op de laatste BlackHat Conference gepubliceerd door de onderzoeker die ze ontdekt heeft. Deze kwetsbaarheden worden in de gegevens van deze maandelijkse update wel genoemd, maar in deze update worden ze niet verholpen.\nMicrosoft geeft aan nog aan een oplossing te werken en heeft wel mitigerende maatregelen gepubliceerd, om de dreiging van misbruik zo goed als mogelijk te beperken. Zie hiervoor de referenties naar de specifieke kwetsbaarheid.\n\nDe kwetsbaarheden stellen een kwaadwillende in staat om een roll-back uit te voeren van ge\u00efnstalleerde updates en zo het systeem weer kwetsbaar te maken voor oudere kwetsbaarheden, zonder dat dit ontdekt kan worden door het systeem. Voor het slachtoffer blijft het systeem voldoen aan de laatste beveiligingsupdates.\nSuccesvol misbruik is niet eenvoudig en vereist dat de kwaadwillende over verhoogde rechten beschikt op het kwetsbare systeem. Actief misbruik zal dus vermoedelijk een volgende stap in een keten zijn door een kwaadwillende die op andere wijze toegang heeft gekregen tot het kwetsbare systeem en deze kwetsbaarheden gebruikt om permanente toegang te garanderen.\n\n\n```\nWindows Mark of the Web (MOTW): \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2024-38213 | 6.50 | Omzeilen van beveiligingsmaatregel | \n|----------------|------|-------------------------------------|\n\nWindows Compressed Folder: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2024-38165 | 6.50 | Manipuleren van gegevens | \n|----------------|------|-------------------------------------|\n\nWindows Update Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2024-38163 | 7.80 | Verkrijgen van verhoogde rechten | \n| CVE-2024-38202 | 7.30 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2024-37968 | 7.50 | Voordoen als andere gebruiker | \n|----------------|------|-------------------------------------|\n\nWindows Mobile Broadband: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2024-38161 | 6.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2024-38193 | 7.80 | Verkrijgen van verhoogde rechten | \n| CVE-2024-38141 | 7.80 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nWindows IP Routing Management Snapin: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2024-38114 | 8.80 | Uitvoeren van willekeurige code | \n| CVE-2024-38115 | 8.80 | Uitvoeren van willekeurige code | \n| CVE-2024-38116 | 8.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2024-38106 | 7.00 | Verkrijgen van verhoogde rechten | \n| CVE-2024-38127 | 7.80 | Verkrijgen van verhoogde rechten | \n| CVE-2024-38133 | 7.80 | Verkrijgen van verhoogde rechten | \n| CVE-2024-38151 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2024-38153 | 7.80 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2022-2601 | 8.60 | Omzeilen van beveiligingsmaatregel | \n| CVE-2023-40547 | 8.30 | Omzeilen van beveiligingsmaatregel | \n| CVE-2022-3775 | 7.10 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2024-38184 | 7.80 | Verkrijgen van verhoogde rechten | \n| CVE-2024-38191 | 7.80 | Verkrijgen van verhoogde rechten | \n| CVE-2024-38185 | 7.80 | Verkrijgen van verhoogde rechten | \n| CVE-2024-38186 | 7.80 | Verkrijgen van verhoogde rechten | \n| CVE-2024-38187 | 7.80 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2024-38198 | 7.50 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nWindows Power Dependency Coordinator: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2024-38107 | 7.80 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nWindows SmartScreen: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2024-38180 | 8.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nWindows Initial Machine Configuration: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2024-38223 | 6.80 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nLine Printer Daemon Service (LPD): \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2024-38199 | 9.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nMicrosoft Streaming Service: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2024-38125 | 7.80 | Verkrijgen van verhoogde rechten | \n| CVE-2024-38134 | 7.80 | Verkrijgen van verhoogde rechten | \n| CVE-2024-38144 | 8.80 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2024-29995 | 8.10 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nWindows Security Center: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2024-38155 | 5.50 | Toegang tot gevoelige gegevens | \n|----------------|------|-------------------------------------|\n\nWindows Scripting: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2024-38178 | 7.50 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2024-38118 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2024-38122 | 5.50 | Toegang tot gevoelige gegevens | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2024-38117 | 7.80 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2024-38121 | 8.80 | Uitvoeren van willekeurige code | \n| CVE-2024-38128 | 8.80 | Uitvoeren van willekeurige code | \n| CVE-2024-38130 | 8.80 | Uitvoeren van willekeurige code | \n| CVE-2024-38154 | 8.80 | Uitvoeren van willekeurige code | \n| CVE-2024-38120 | 8.80 | Uitvoeren van willekeurige code | \n| CVE-2024-38214 | 6.50 | Toegang tot gevoelige gegevens | \n|----------------|------|-------------------------------------|\n\nWindows WLAN Auto Config Service: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2024-38143 | 4.20 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nWindows NT OS Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2024-38135 | 7.80 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2024-38126 | 7.50 | Denial-of-Service | \n| CVE-2024-38132 | 7.50 | Denial-of-Service | \n|----------------|------|-------------------------------------|\n\nWindows Resource Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2024-38136 | 7.00 | Verkrijgen van verhoogde rechten | \n| CVE-2024-38137 | 7.00 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2024-38196 | 7.80 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nWindows Transport Security Layer (TLS): \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2024-38148 | 7.50 | Denial-of-Service | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2024-21302 | 6.70 | Verkrijgen van verhoogde rechten | \n| CVE-2024-38142 | 7.80 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2024-38140 | 9.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nMicrosoft Bluetooth Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2024-38123 | 4.40 | Toegang tot gevoelige gegevens | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2024-38063 | 9.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2024-38215 | 7.80 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2024-38147 | 7.80 | Verkrijgen van verhoogde rechten | \n| CVE-2024-38150 | 7.80 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Virtual Channel Extension: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2024-38131 | 8.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nWindows Network Virtualization: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2024-38159 | 9.10 | Uitvoeren van willekeurige code | \n| CVE-2024-38160 | 9.10 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2024-38138 | 7.50 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nMicrosoft WDAC OLE DB provider for SQL: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2024-38152 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nWindows Layer-2 Bridge Network Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2024-38145 | 7.50 | Denial-of-Service | \n| CVE-2024-38146 | 7.50 | Denial-of-Service | \n|----------------|------|-------------------------------------|\n```",
"title": "Interpretaties"
},
{
"category": "description",
"text": "Microsoft heeft updates beschikbaar gesteld waarmee de beschreven kwetsbaarheden worden verholpen. Ook zijn mitigerende maatregelen gepubliceerd om de kans op misbruik te beperken voor die kwetsbaarheden waarvoor (nog) geen update beschikbaar is. We raden u aan om deze updates te installeren. Meer informatie over de kwetsbaarheden, de installatie van de updates en eventuele work-arounds vindt u op:\n\nhttps://portal.msrc.microsoft.com/en-us/security-guidance",
"title": "Oplossingen"
},
{
"category": "general",
"text": "medium",
"title": "Kans"
},
{
"category": "general",
"text": "high",
"title": "Schade"
},
{
"category": "general",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
},
{
"category": "general",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "general",
"text": "Buffer Over-read",
"title": "CWE-126"
},
{
"category": "general",
"text": "Improper Neutralization of Special Elements",
"title": "CWE-138"
},
{
"category": "general",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "general",
"text": "Integer Underflow (Wrap or Wraparound)",
"title": "CWE-191"
},
{
"category": "general",
"text": "Numeric Truncation Error",
"title": "CWE-197"
},
{
"category": "general",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "general",
"text": "Observable Timing Discrepancy",
"title": "CWE-208"
},
{
"category": "general",
"text": "Improper Access Control",
"title": "CWE-284"
},
{
"category": "general",
"text": "Missing Authentication for Critical Function",
"title": "CWE-306"
},
{
"category": "general",
"text": "Insufficient Verification of Data Authenticity",
"title": "CWE-345"
},
{
"category": "general",
"text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"title": "CWE-362"
},
{
"category": "general",
"text": "Time-of-check Time-of-use (TOCTOU) Race Condition",
"title": "CWE-367"
},
{
"category": "general",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "general",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "general",
"text": "Sensitive Data Storage in Improperly Locked Memory",
"title": "CWE-591"
},
{
"category": "general",
"text": "Protection Mechanism Failure",
"title": "CWE-693"
},
{
"category": "general",
"text": "External Control of File Name or Path",
"title": "CWE-73"
},
{
"category": "general",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "general",
"text": "Untrusted Pointer Dereference",
"title": "CWE-822"
},
{
"category": "general",
"text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
"title": "CWE-843"
},
{
"category": "general",
"text": "Use of Uninitialized Resource",
"title": "CWE-908"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "cert@ncsc.nl",
"name": "Nationaal Cyber Security Centrum",
"namespace": "https://www.ncsc.nl/"
},
"references": [
{
"category": "external",
"summary": "Reference - certbundde; cveprojectv5; hkcert; nvd",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21302"
},
{
"category": "external",
"summary": "Reference - cveprojectv5; nvd",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38063"
},
{
"category": "external",
"summary": "Reference - certbundde; cveprojectv5; hkcert; nvd",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38202"
}
],
"title": "Kwetsbaarheden verholpen in Microsoft Windows",
"tracking": {
"current_release_date": "2024-08-27T07:59:08.391850Z",
"id": "NCSC-2024-0334",
"initial_release_date": "2024-08-13T18:19:27.728322Z",
"revision_history": [
{
"date": "2024-08-13T18:19:27.728322Z",
"number": "0",
"summary": "Initiele versie"
},
{
"date": "2024-08-27T07:59:08.391850Z",
"number": "1",
"summary": "Er is Proof-of-Concept-code (PoC) verschenen voor de kwetsbaarheid met kenmerk CVE-2024-38063"
}
],
"status": "final",
"version": "1.0.1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "remote_desktop_client_for_windows_desktop",
"product": {
"name": "remote_desktop_client_for_windows_desktop",
"product_id": "CSAFPID-1455711",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:remote_desktop_client_for_windows_desktop:1.2.0.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_10_version_1507",
"product": {
"name": "windows_10_version_1507",
"product_id": "CSAFPID-1453769",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:windows_10_version_1507:10.0.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_10_version_1507",
"product": {
"name": "windows_10_version_1507",
"product_id": "CSAFPID-1574686",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:windows_10_version_1507:n_a:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_10_version_1607",
"product": {
"name": "windows_10_version_1607",
"product_id": "CSAFPID-1453770",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:windows_10_version_1607:10.0.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_10_version_1607",
"product": {
"name": "windows_10_version_1607",
"product_id": "CSAFPID-1574687",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:windows_10_version_1607:n_a:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_10_version_1809",
"product": {
"name": "windows_10_version_1809",
"product_id": "CSAFPID-1453758",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:windows_10_version_1809:10.0.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_10_version_1809",
"product": {
"name": "windows_10_version_1809",
"product_id": "CSAFPID-1455810",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:windows_10_version_1809:n_a:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_10_version_21h2",
"product": {
"name": "windows_10_version_21h2",
"product_id": "CSAFPID-1453800",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:windows_10_version_21h2:10.0.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_10_version_21h2",
"product": {
"name": "windows_10_version_21h2",
"product_id": "CSAFPID-1610391",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:windows_10_version_21h2:n_a:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_10_version_22h2",
"product": {
"name": "windows_10_version_22h2",
"product_id": "CSAFPID-1453802",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:windows_10_version_22h2:10.0.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_10_version_22h2",
"product": {
"name": "windows_10_version_22h2",
"product_id": "CSAFPID-1610393",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:windows_10_version_22h2:n_a:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_11_version_21h2",
"product": {
"name": "windows_11_version_21h2",
"product_id": "CSAFPID-1453799",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:windows_11_version_21h2:10.0.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_11_version_21h2",
"product": {
"name": "windows_11_version_21h2",
"product_id": "CSAFPID-1610390",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:windows_11_version_21h2:n_a:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_11_version_22h2",
"product": {
"name": "windows_11_version_22h2",
"product_id": "CSAFPID-1453801",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:windows_11_version_22h2:10.0.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_11_version_22h2",
"product": {
"name": "windows_11_version_22h2",
"product_id": "CSAFPID-1610392",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:windows_11_version_22h2:n_a:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_11_version_22h3",
"product": {
"name": "windows_11_version_22h3",
"product_id": "CSAFPID-1453803",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:windows_11_version_22h3:10.0.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_11_version_22h3",
"product": {
"name": "windows_11_version_22h3",
"product_id": "CSAFPID-1610394",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:windows_11_version_22h3:n_a:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_11_version_23h2",
"product": {
"name": "windows_11_version_23h2",
"product_id": "CSAFPID-1453804",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:windows_11_version_23h2:10.0.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_11_version_23h2",
"product": {
"name": "windows_11_version_23h2",
"product_id": "CSAFPID-1610395",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:windows_11_version_23h2:n_a:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_11_version_24h2",
"product": {
"name": "windows_11_version_24h2",
"product_id": "CSAFPID-1615902",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:windows_11_version_24h2:10.0.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_11_version_24h2",
"product": {
"name": "windows_11_version_24h2",
"product_id": "CSAFPID-1610396",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:windows_11_version_24h2:n_a:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_server_2008__service_pack_2",
"product": {
"name": "windows_server_2008__service_pack_2",
"product_id": "CSAFPID-1453778",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:windows_server_2008__service_pack_2:6.0.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_server_2008_r2_service_pack_1__server_core_installation_",
"product": {
"name": "windows_server_2008_r2_service_pack_1__server_core_installation_",
"product_id": "CSAFPID-1453780",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:windows_server_2008_r2_service_pack_1__server_core_installation_:6.0.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_server_2008_r2_service_pack_1",
"product": {
"name": "windows_server_2008_r2_service_pack_1",
"product_id": "CSAFPID-1453779",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:windows_server_2008_r2_service_pack_1:6.1.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_server_2008_service_pack_2__server_core_installation_",
"product": {
"name": "windows_server_2008_service_pack_2__server_core_installation_",
"product_id": "CSAFPID-1453777",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:windows_server_2008_service_pack_2__server_core_installation_:6.0.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_server_2008_service_pack_2",
"product": {
"name": "windows_server_2008_service_pack_2",
"product_id": "CSAFPID-1453776",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:windows_server_2008_service_pack_2:6.0.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_server_2012__server_core_installation_",
"product": {
"name": "windows_server_2012__server_core_installation_",
"product_id": "CSAFPID-1453782",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:windows_server_2012__server_core_installation_:6.2.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_server_2012_r2__server_core_installation_",
"product": {
"name": "windows_server_2012_r2__server_core_installation_",
"product_id": "CSAFPID-1453784",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:windows_server_2012_r2__server_core_installation_:6.3.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_server_2012_r2",
"product": {
"name": "windows_server_2012_r2",
"product_id": "CSAFPID-1453783",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:windows_server_2012_r2:6.3.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_server_2012",
"product": {
"name": "windows_server_2012",
"product_id": "CSAFPID-1453781",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:windows_server_2012:6.2.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_server_2016__server_core_installation_",
"product": {
"name": "windows_server_2016__server_core_installation_",
"product_id": "CSAFPID-1453772",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:windows_server_2016__server_core_installation_:10.0.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_server_2016__server_core_installation_",
"product": {
"name": "windows_server_2016__server_core_installation_",
"product_id": "CSAFPID-1457438",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:windows_server_2016__server_core_installation_:n_a:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_server_2016",
"product": {
"name": "windows_server_2016",
"product_id": "CSAFPID-1453771",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:windows_server_2016:10.0.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_server_2016",
"product": {
"name": "windows_server_2016",
"product_id": "CSAFPID-1457437",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:windows_server_2016:n_a:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_server_2019__server_core_installation_",
"product": {
"name": "windows_server_2019__server_core_installation_",
"product_id": "CSAFPID-1453760",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:windows_server_2019__server_core_installation_:10.0.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_server_2019__server_core_installation_",
"product": {
"name": "windows_server_2019__server_core_installation_",
"product_id": "CSAFPID-1457435",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:windows_server_2019__server_core_installation_:n_a:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_server_2019",
"product": {
"name": "windows_server_2019",
"product_id": "CSAFPID-1453759",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:windows_server_2019:10.0.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_server_2019",
"product": {
"name": "windows_server_2019",
"product_id": "CSAFPID-1457434",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:windows_server_2019:n_a:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_server_2022__23h2_edition__server_core_installation_",
"product": {
"name": "windows_server_2022__23h2_edition__server_core_installation_",
"product_id": "CSAFPID-1453805",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:windows_server_2022__23h2_edition__server_core_installation_:10.0.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_server_2022__23h2_edition__server_core_installation_",
"product": {
"name": "windows_server_2022__23h2_edition__server_core_installation_",
"product_id": "CSAFPID-1455588",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:windows_server_2022__23h2_edition__server_core_installation_:n_a:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_server_2022",
"product": {
"name": "windows_server_2022",
"product_id": "CSAFPID-1453798",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:windows_server_2022:10.0.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_server_2022",
"product": {
"name": "windows_server_2022",
"product_id": "CSAFPID-1457436",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:windows_server_2022:n_a:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_10_for_32-bit_systems",
"product": {
"name": "windows_10_for_32-bit_systems",
"product_id": "CSAFPID-1502044",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10_for_32-bit_systems:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_10_for_64-based_systems",
"product": {
"name": "windows_10_for_64-based_systems",
"product_id": "CSAFPID-1502062",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10_for_64-based_systems:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_10",
"product": {
"name": "windows_10",
"product_id": "CSAFPID-2507",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_10",
"product": {
"name": "windows_10",
"product_id": "CSAFPID-1502046",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:1607_for_32-bit_systems:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_10",
"product": {
"name": "windows_10",
"product_id": "CSAFPID-1502058",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:1607_for_x64-based_systems:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_10",
"product": {
"name": "windows_10",
"product_id": "CSAFPID-2482",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_10",
"product": {
"name": "windows_10",
"product_id": "CSAFPID-1502053",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:1809_for_32-bit_systems:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_10",
"product": {
"name": "windows_10",
"product_id": "CSAFPID-1502047",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:1809_for_arm64-based_systems:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_10",
"product": {
"name": "windows_10",
"product_id": "CSAFPID-1502040",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:1809_for_x64-based_systems:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_10",
"product": {
"name": "windows_10",
"product_id": "CSAFPID-2483",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_10",
"product": {
"name": "windows_10",
"product_id": "CSAFPID-1502051",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:21h2_for_32-bit_systems:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_10",
"product": {
"name": "windows_10",
"product_id": "CSAFPID-1502043",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:21h2_for_arm64-based_systems:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_10",
"product": {
"name": "windows_10",
"product_id": "CSAFPID-1502061",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:21h2_for_x64-based_systems:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_10",
"product": {
"name": "windows_10",
"product_id": "CSAFPID-2481",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_10",
"product": {
"name": "windows_10",
"product_id": "CSAFPID-1502041",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:22h2_for_32-bit_systems:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_10",
"product": {
"name": "windows_10",
"product_id": "CSAFPID-1502057",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:22h2_for_arm64-based_systems:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_10",
"product": {
"name": "windows_10",
"product_id": "CSAFPID-1502060",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:22h2_for_x64-based_systems:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_10",
"product": {
"name": "windows_10",
"product_id": "CSAFPID-3823",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:22h2:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_11",
"product": {
"name": "windows_11",
"product_id": "CSAFPID-1502050",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_11:21h2_for_arm64-based_systems:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_11",
"product": {
"name": "windows_11",
"product_id": "CSAFPID-1502059",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_11:21h2_for_x64-based_systems:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_11",
"product": {
"name": "windows_11",
"product_id": "CSAFPID-168717",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_11:21h2:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_11",
"product": {
"name": "windows_11",
"product_id": "CSAFPID-1502039",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_11:22h2_for_arm64-based_systems:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_11",
"product": {
"name": "windows_11",
"product_id": "CSAFPID-1502056",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_11:22h2_for_x64-based_systems:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_11",
"product": {
"name": "windows_11",
"product_id": "CSAFPID-168718",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_11:22h2:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_11",
"product": {
"name": "windows_11",
"product_id": "CSAFPID-1502045",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_11:23h2_for_arm64-based_system:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_11",
"product": {
"name": "windows_11",
"product_id": "CSAFPID-1502055",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_11:23h2_for_x64-based_systems:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_11",
"product": {
"name": "windows_11",
"product_id": "CSAFPID-804567",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_11:23h2:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_11",
"product": {
"name": "windows_11",
"product_id": "CSAFPID-1614511",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_11:24h2_for_arm64-based_system:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_11",
"product": {
"name": "windows_11",
"product_id": "CSAFPID-1614512",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_11:24h2_for_x64-based_system:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_11",
"product": {
"name": "windows_11",
"product_id": "CSAFPID-1610036",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_11:24h2:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_server_2016",
"product": {
"name": "windows_server_2016",
"product_id": "CSAFPID-2417",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_server_2016",
"product": {
"name": "windows_server_2016",
"product_id": "CSAFPID-168719",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_server_2019",
"product": {
"name": "windows_server_2019",
"product_id": "CSAFPID-2414",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_server_2019",
"product": {
"name": "windows_server_2019",
"product_id": "CSAFPID-75346",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_server_2022_23h2",
"product": {
"name": "windows_server_2022_23h2",
"product_id": "CSAFPID-747000",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_server_2022",
"product": {
"name": "windows_server_2022",
"product_id": "CSAFPID-2488",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_server_2022",
"product": {
"name": "windows_server_2022",
"product_id": "CSAFPID-75345",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows_server_2022",
"product": {
"name": "windows_server_2022",
"product_id": "CSAFPID-1502048",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_server_2022:23h2_edition:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "windows",
"product": {
"name": "windows",
"product_id": "CSAFPID-289704",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*"
}
}
}
],
"category": "vendor",
"name": "microsoft"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-2601",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "other",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1502048"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-2601",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-2601.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1502048"
]
}
],
"title": "CVE-2022-2601"
},
{
"cve": "CVE-2024-38161",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1502048",
"CSAFPID-75346",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-2414",
"CSAFPID-2481",
"CSAFPID-2483"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38161",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38161.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1502048",
"CSAFPID-75346",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-2414",
"CSAFPID-2481",
"CSAFPID-2483"
]
}
],
"title": "CVE-2024-38161"
},
{
"cve": "CVE-2024-38178",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"notes": [
{
"category": "other",
"text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
"title": "CWE-843"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1615902",
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-2507",
"CSAFPID-2481",
"CSAFPID-3823",
"CSAFPID-2482",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-1502048",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-2488"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38178",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38178.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1615902",
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-2507",
"CSAFPID-2481",
"CSAFPID-3823",
"CSAFPID-2482",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-1502048",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-2488"
]
}
],
"title": "CVE-2024-38178"
},
{
"cve": "CVE-2024-38184",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-2481",
"CSAFPID-3823",
"CSAFPID-2482",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-1502048"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38184",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38184.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-2481",
"CSAFPID-3823",
"CSAFPID-2482",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-1502048"
]
}
],
"title": "CVE-2024-38184"
},
{
"cve": "CVE-2024-38191",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "other",
"text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"title": "CWE-362"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-2507",
"CSAFPID-2481",
"CSAFPID-3823",
"CSAFPID-2482",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-1502048"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38191",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38191.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-2507",
"CSAFPID-2481",
"CSAFPID-3823",
"CSAFPID-2482",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-1502048"
]
}
],
"title": "CVE-2024-38191"
},
{
"cve": "CVE-2024-38193",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1615902",
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-75345",
"CSAFPID-1502048",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-2488",
"CSAFPID-2507",
"CSAFPID-2481",
"CSAFPID-3823",
"CSAFPID-2482",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-747000"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38193",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38193.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1615902",
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-75345",
"CSAFPID-1502048",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-2488",
"CSAFPID-2507",
"CSAFPID-2481",
"CSAFPID-3823",
"CSAFPID-2482",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-747000"
]
}
],
"title": "CVE-2024-38193"
},
{
"cve": "CVE-2024-38196",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1615902",
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-2507",
"CSAFPID-2481",
"CSAFPID-3823",
"CSAFPID-2482",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-1502048"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38196",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38196.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1615902",
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-2507",
"CSAFPID-2481",
"CSAFPID-3823",
"CSAFPID-2482",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-1502048"
]
}
],
"title": "CVE-2024-38196"
},
{
"cve": "CVE-2024-38198",
"cwe": {
"id": "CWE-345",
"name": "Insufficient Verification of Data Authenticity"
},
"notes": [
{
"category": "other",
"text": "Insufficient Verification of Data Authenticity",
"title": "CWE-345"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1615902",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-2507",
"CSAFPID-2481",
"CSAFPID-3823",
"CSAFPID-2482",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-1502048"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38198",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38198.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1615902",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-2507",
"CSAFPID-2481",
"CSAFPID-3823",
"CSAFPID-2482",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-1502048"
]
}
],
"title": "CVE-2024-38198"
},
{
"cve": "CVE-2024-38199",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1615902",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-2507",
"CSAFPID-2481",
"CSAFPID-3823",
"CSAFPID-2482",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-1502048"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38199",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38199.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1615902",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-2507",
"CSAFPID-2481",
"CSAFPID-3823",
"CSAFPID-2482",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-1502048"
]
}
],
"title": "CVE-2024-38199"
},
{
"cve": "CVE-2024-38213",
"cwe": {
"id": "CWE-693",
"name": "Protection Mechanism Failure"
},
"notes": [
{
"category": "other",
"text": "Protection Mechanism Failure",
"title": "CWE-693"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-75345",
"CSAFPID-1502048",
"CSAFPID-2417",
"CSAFPID-2488",
"CSAFPID-2507",
"CSAFPID-2481",
"CSAFPID-3823",
"CSAFPID-2482",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-747000"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38213",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38213.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:F/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-75345",
"CSAFPID-1502048",
"CSAFPID-2417",
"CSAFPID-2488",
"CSAFPID-2507",
"CSAFPID-2481",
"CSAFPID-3823",
"CSAFPID-2482",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-747000"
]
}
],
"title": "CVE-2024-38213"
},
{
"cve": "CVE-2024-21302",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "other",
"text": "Improper Access Control",
"title": "CWE-284"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-2488",
"CSAFPID-1502048",
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1615902",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-2507",
"CSAFPID-2481",
"CSAFPID-3823",
"CSAFPID-2482",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-289704",
"CSAFPID-1455810",
"CSAFPID-1457434",
"CSAFPID-1457435",
"CSAFPID-1457436",
"CSAFPID-1610390",
"CSAFPID-1610391",
"CSAFPID-1610392",
"CSAFPID-1610393",
"CSAFPID-1610394",
"CSAFPID-1610395",
"CSAFPID-1455588",
"CSAFPID-1610396",
"CSAFPID-1574686",
"CSAFPID-1574687",
"CSAFPID-1457437",
"CSAFPID-1457438"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-21302",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21302.json"
}
],
"title": "CVE-2024-21302"
},
{
"cve": "CVE-2023-40547",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1502048"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2023-40547",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-40547.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1502048"
]
}
],
"title": "CVE-2023-40547"
},
{
"cve": "CVE-2024-38063",
"cwe": {
"id": "CWE-191",
"name": "Integer Underflow (Wrap or Wraparound)"
},
"notes": [
{
"category": "other",
"text": "Integer Underflow (Wrap or Wraparound)",
"title": "CWE-191"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1615902",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-2483",
"CSAFPID-747000",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-75345",
"CSAFPID-2481",
"CSAFPID-2482",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38063",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38063.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1615902",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-2483",
"CSAFPID-747000",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-75345",
"CSAFPID-2481",
"CSAFPID-2482",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346"
]
}
],
"title": "CVE-2024-38063"
},
{
"cve": "CVE-2024-38106",
"cwe": {
"id": "CWE-591",
"name": "Sensitive Data Storage in Improperly Locked Memory"
},
"notes": [
{
"category": "other",
"text": "Sensitive Data Storage in Improperly Locked Memory",
"title": "CWE-591"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1615902",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-1502048",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-2488",
"CSAFPID-3823",
"CSAFPID-2481",
"CSAFPID-2482"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38106",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38106.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1615902",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-1502048",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-2488",
"CSAFPID-3823",
"CSAFPID-2481",
"CSAFPID-2482"
]
}
],
"title": "CVE-2024-38106"
},
{
"cve": "CVE-2024-38107",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1615902",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-1502048",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-2488",
"CSAFPID-3823",
"CSAFPID-2481",
"CSAFPID-2482"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38107",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38107.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1615902",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-1502048",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-2488",
"CSAFPID-3823",
"CSAFPID-2481",
"CSAFPID-2482"
]
}
],
"title": "CVE-2024-38107"
},
{
"cve": "CVE-2024-29995",
"cwe": {
"id": "CWE-208",
"name": "Observable Timing Discrepancy"
},
"notes": [
{
"category": "other",
"text": "Observable Timing Discrepancy",
"title": "CWE-208"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453800",
"CSAFPID-1453802",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-29995",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-29995.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453800",
"CSAFPID-1453802",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345"
]
}
],
"title": "CVE-2024-29995"
},
{
"cve": "CVE-2024-38114",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1615902",
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-2481",
"CSAFPID-2482"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38114",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38114.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1615902",
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-2481",
"CSAFPID-2482"
]
}
],
"title": "CVE-2024-38114"
},
{
"cve": "CVE-2024-38115",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1615902",
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38115",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38115.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1615902",
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000"
]
}
],
"title": "CVE-2024-38115"
},
{
"cve": "CVE-2024-38116",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1615902",
"CSAFPID-1502048",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-2483",
"CSAFPID-747000",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-75345",
"CSAFPID-2481",
"CSAFPID-2482",
"CSAFPID-168719",
"CSAFPID-75346"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38116",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38116.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1615902",
"CSAFPID-1502048",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-2483",
"CSAFPID-747000",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-75345",
"CSAFPID-2481",
"CSAFPID-2482",
"CSAFPID-168719",
"CSAFPID-75346"
]
}
],
"title": "CVE-2024-38116"
},
{
"cve": "CVE-2024-38117",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1615902",
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38117",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38117.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1615902",
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000"
]
}
],
"title": "CVE-2024-38117"
},
{
"cve": "CVE-2024-38118",
"cwe": {
"id": "CWE-908",
"name": "Use of Uninitialized Resource"
},
"notes": [
{
"category": "other",
"text": "Use of Uninitialized Resource",
"title": "CWE-908"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1615902",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38118",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38118.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1615902",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000"
]
}
],
"title": "CVE-2024-38118"
},
{
"cve": "CVE-2024-38122",
"cwe": {
"id": "CWE-908",
"name": "Use of Uninitialized Resource"
},
"notes": [
{
"category": "other",
"text": "Use of Uninitialized Resource",
"title": "CWE-908"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1615902",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-2481",
"CSAFPID-2482"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38122",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38122.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1615902",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-2481",
"CSAFPID-2482"
]
}
],
"title": "CVE-2024-38122"
},
{
"cve": "CVE-2024-38125",
"cwe": {
"id": "CWE-197",
"name": "Numeric Truncation Error"
},
"notes": [
{
"category": "other",
"text": "Numeric Truncation Error",
"title": "CWE-197"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1615902",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-2483",
"CSAFPID-747000",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-75345",
"CSAFPID-2481",
"CSAFPID-2482",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38125",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38125.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1615902",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-2483",
"CSAFPID-747000",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-75345",
"CSAFPID-2481",
"CSAFPID-2482",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346"
]
}
],
"title": "CVE-2024-38125"
},
{
"cve": "CVE-2024-38126",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "other",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1615902",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-2481",
"CSAFPID-2482"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38126",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38126.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1615902",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-2481",
"CSAFPID-2482"
]
}
],
"title": "CVE-2024-38126"
},
{
"cve": "CVE-2024-38130",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1615902",
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-2481",
"CSAFPID-2482"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38130",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38130.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1615902",
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-2481",
"CSAFPID-2482"
]
}
],
"title": "CVE-2024-38130"
},
{
"cve": "CVE-2024-38131",
"cwe": {
"id": "CWE-591",
"name": "Sensitive Data Storage in Improperly Locked Memory"
},
"notes": [
{
"category": "other",
"text": "Sensitive Data Storage in Improperly Locked Memory",
"title": "CWE-591"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1615902",
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1455711",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-2481",
"CSAFPID-2482"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38131",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38131.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1615902",
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1455711",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-2481",
"CSAFPID-2482"
]
}
],
"title": "CVE-2024-38131"
},
{
"cve": "CVE-2024-38132",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1615902",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-2481",
"CSAFPID-2482"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38132",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38132.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1615902",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-2481",
"CSAFPID-2482"
]
}
],
"title": "CVE-2024-38132"
},
{
"cve": "CVE-2024-38133",
"cwe": {
"id": "CWE-138",
"name": "Improper Neutralization of Special Elements"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements",
"title": "CWE-138"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1615902",
"CSAFPID-1502048",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-2414",
"CSAFPID-2481",
"CSAFPID-2483"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38133",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38133.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1615902",
"CSAFPID-1502048",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-2414",
"CSAFPID-2481",
"CSAFPID-2483"
]
}
],
"title": "CVE-2024-38133"
},
{
"cve": "CVE-2024-38134",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1615902",
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38134",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38134.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1615902",
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000"
]
}
],
"title": "CVE-2024-38134"
},
{
"cve": "CVE-2024-38136",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1615902",
"CSAFPID-747000",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-2414",
"CSAFPID-75345",
"CSAFPID-2481",
"CSAFPID-2483",
"CSAFPID-1502048",
"CSAFPID-75346"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38136",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38136.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1615902",
"CSAFPID-747000",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-2414",
"CSAFPID-75345",
"CSAFPID-2481",
"CSAFPID-2483",
"CSAFPID-1502048",
"CSAFPID-75346"
]
}
],
"title": "CVE-2024-38136"
},
{
"cve": "CVE-2024-38140",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1615902",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-2483",
"CSAFPID-747000",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-75345",
"CSAFPID-2481",
"CSAFPID-2482",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38140",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38140.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1615902",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-2483",
"CSAFPID-747000",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-75345",
"CSAFPID-2481",
"CSAFPID-2482",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346"
]
}
],
"title": "CVE-2024-38140"
},
{
"cve": "CVE-2024-38141",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1615902",
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-2483",
"CSAFPID-747000",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-75345",
"CSAFPID-2481",
"CSAFPID-2482",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38141",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38141.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1615902",
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-2483",
"CSAFPID-747000",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-75345",
"CSAFPID-2481",
"CSAFPID-2482",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346"
]
}
],
"title": "CVE-2024-38141"
},
{
"cve": "CVE-2024-38142",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1615902",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-2481",
"CSAFPID-2482"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38142",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38142.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1615902",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-2481",
"CSAFPID-2482"
]
}
],
"title": "CVE-2024-38142"
},
{
"cve": "CVE-2024-38143",
"cwe": {
"id": "CWE-306",
"name": "Missing Authentication for Critical Function"
},
"notes": [
{
"category": "other",
"text": "Missing Authentication for Critical Function",
"title": "CWE-306"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1615902",
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-2483",
"CSAFPID-747000",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-75345",
"CSAFPID-2481",
"CSAFPID-2482",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38143",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38143.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1615902",
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-2483",
"CSAFPID-747000",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-75345",
"CSAFPID-2481",
"CSAFPID-2482",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346"
]
}
],
"title": "CVE-2024-38143"
},
{
"cve": "CVE-2024-38144",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "other",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1615902",
"CSAFPID-1502048",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-2483",
"CSAFPID-747000",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-75345",
"CSAFPID-2481",
"CSAFPID-2482",
"CSAFPID-168719",
"CSAFPID-75346"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38144",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38144.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1615902",
"CSAFPID-1502048",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-2483",
"CSAFPID-747000",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-75345",
"CSAFPID-2481",
"CSAFPID-2482",
"CSAFPID-168719",
"CSAFPID-75346"
]
}
],
"title": "CVE-2024-38144"
},
{
"cve": "CVE-2024-38145",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "other",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1615902",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-2483",
"CSAFPID-747000",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-75345",
"CSAFPID-2481",
"CSAFPID-2482",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38145",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38145.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1615902",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-2483",
"CSAFPID-747000",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-75345",
"CSAFPID-2481",
"CSAFPID-2482",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346"
]
}
],
"title": "CVE-2024-38145"
},
{
"cve": "CVE-2024-38146",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "other",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1615902",
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1502048",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-2483",
"CSAFPID-747000",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-75345",
"CSAFPID-2481",
"CSAFPID-2482",
"CSAFPID-168719",
"CSAFPID-75346"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38146",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38146.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1615902",
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1502048",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-2483",
"CSAFPID-747000",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-75345",
"CSAFPID-2481",
"CSAFPID-2482",
"CSAFPID-168719",
"CSAFPID-75346"
]
}
],
"title": "CVE-2024-38146"
},
{
"cve": "CVE-2024-38151",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1615902",
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-2481",
"CSAFPID-2482"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38151",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38151.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1615902",
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-2481",
"CSAFPID-2482"
]
}
],
"title": "CVE-2024-38151"
},
{
"cve": "CVE-2024-38152",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1615902",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38152",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38152.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1615902",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000"
]
}
],
"title": "CVE-2024-38152"
},
{
"cve": "CVE-2024-38153",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"notes": [
{
"category": "other",
"text": "Time-of-check Time-of-use (TOCTOU) Race Condition",
"title": "CWE-367"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1615902",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38153",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38153.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1615902",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000"
]
}
],
"title": "CVE-2024-38153"
},
{
"cve": "CVE-2024-38155",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1453758",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1615902",
"CSAFPID-1502048"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38155",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38155.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1453758",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1615902",
"CSAFPID-1502048"
]
}
],
"title": "CVE-2024-38155"
},
{
"cve": "CVE-2024-38180",
"cwe": {
"id": "CWE-693",
"name": "Protection Mechanism Failure"
},
"notes": [
{
"category": "other",
"text": "Protection Mechanism Failure",
"title": "CWE-693"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1615902",
"CSAFPID-2507",
"CSAFPID-2481",
"CSAFPID-3823",
"CSAFPID-2482",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-1502048"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38180",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38180.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1615902",
"CSAFPID-2507",
"CSAFPID-2481",
"CSAFPID-3823",
"CSAFPID-2482",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-1502048"
]
}
],
"title": "CVE-2024-38180"
},
{
"cve": "CVE-2024-38185",
"cwe": {
"id": "CWE-822",
"name": "Untrusted Pointer Dereference"
},
"notes": [
{
"category": "other",
"text": "Untrusted Pointer Dereference",
"title": "CWE-822"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-2481",
"CSAFPID-3823",
"CSAFPID-2482",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-1502048"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38185",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38185.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-2481",
"CSAFPID-3823",
"CSAFPID-2482",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-1502048"
]
}
],
"title": "CVE-2024-38185"
},
{
"cve": "CVE-2024-38186",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"notes": [
{
"category": "other",
"text": "Time-of-check Time-of-use (TOCTOU) Race Condition",
"title": "CWE-367"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-2481",
"CSAFPID-3823",
"CSAFPID-2482",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-1502048"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38186",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38186.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-2481",
"CSAFPID-3823",
"CSAFPID-2482",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-1502048"
]
}
],
"title": "CVE-2024-38186"
},
{
"cve": "CVE-2024-38187",
"cwe": {
"id": "CWE-822",
"name": "Untrusted Pointer Dereference"
},
"notes": [
{
"category": "other",
"text": "Untrusted Pointer Dereference",
"title": "CWE-822"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-2481",
"CSAFPID-3823",
"CSAFPID-2482",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-1502048"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38187",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38187.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-2481",
"CSAFPID-3823",
"CSAFPID-2482",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-1502048"
]
}
],
"title": "CVE-2024-38187"
},
{
"cve": "CVE-2022-3775",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1502048"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-3775",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-3775.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1502048"
]
}
],
"title": "CVE-2022-3775"
},
{
"cve": "CVE-2024-38215",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "other",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1615902",
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-2481",
"CSAFPID-3823",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-1502048"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38215",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38215.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1615902",
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-2481",
"CSAFPID-3823",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-1502048"
]
}
],
"title": "CVE-2024-38215"
},
{
"cve": "CVE-2024-38202",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "other",
"text": "Improper Access Control",
"title": "CWE-284"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2481",
"CSAFPID-3823",
"CSAFPID-2482",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-289704",
"CSAFPID-1455810",
"CSAFPID-1457434",
"CSAFPID-1457435",
"CSAFPID-1457436",
"CSAFPID-1610390",
"CSAFPID-1610391",
"CSAFPID-1610392",
"CSAFPID-1610393",
"CSAFPID-1610394",
"CSAFPID-1610395",
"CSAFPID-1455588",
"CSAFPID-1574687",
"CSAFPID-1457437",
"CSAFPID-1457438",
"CSAFPID-2488",
"CSAFPID-2414",
"CSAFPID-2417"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38202",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38202.json"
}
],
"title": "CVE-2024-38202"
},
{
"cve": "CVE-2024-38223",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "other",
"text": "Improper Access Control",
"title": "CWE-284"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1615902",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-2507",
"CSAFPID-2481",
"CSAFPID-3823",
"CSAFPID-2482",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-1502048"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38223",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38223.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1615902",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-2507",
"CSAFPID-2481",
"CSAFPID-3823",
"CSAFPID-2482",
"CSAFPID-2483",
"CSAFPID-168718",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-1502048"
]
}
],
"title": "CVE-2024-38223"
},
{
"cve": "CVE-2024-38127",
"cwe": {
"id": "CWE-126",
"name": "Buffer Over-read"
},
"notes": [
{
"category": "other",
"text": "Buffer Over-read",
"title": "CWE-126"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1615902",
"CSAFPID-1502048",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-2483",
"CSAFPID-747000",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-75345",
"CSAFPID-2481",
"CSAFPID-2482",
"CSAFPID-168719",
"CSAFPID-75346"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38127",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38127.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1453758",
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1453769",
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1615902",
"CSAFPID-1502048",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-2483",
"CSAFPID-747000",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-75345",
"CSAFPID-2481",
"CSAFPID-2482",
"CSAFPID-168719",
"CSAFPID-75346"
]
}
],
"title": "CVE-2024-38127"
},
{
"cve": "CVE-2024-38121",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453805",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1502048",
"CSAFPID-747000",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-75345",
"CSAFPID-168719",
"CSAFPID-75346"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38121",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38121.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453805",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1502048",
"CSAFPID-747000",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-75345",
"CSAFPID-168719",
"CSAFPID-75346"
]
}
],
"title": "CVE-2024-38121"
},
{
"cve": "CVE-2024-38128",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "other",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453805",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38128",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38128.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453805",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000"
]
}
],
"title": "CVE-2024-38128"
},
{
"cve": "CVE-2024-38138",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453805",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-747000",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-75345",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38138",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38138.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453805",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-747000",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-75345",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346"
]
}
],
"title": "CVE-2024-38138"
},
{
"cve": "CVE-2024-38154",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453805",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1502048",
"CSAFPID-747000",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-75345",
"CSAFPID-168719",
"CSAFPID-75346"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38154",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38154.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453805",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1502048",
"CSAFPID-747000",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-75345",
"CSAFPID-168719",
"CSAFPID-75346"
]
}
],
"title": "CVE-2024-38154"
},
{
"cve": "CVE-2024-38120",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453805",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38120",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38120.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453805",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000"
]
}
],
"title": "CVE-2024-38120"
},
{
"cve": "CVE-2024-38214",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453805",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-1502048"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38214",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38214.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453805",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-168719",
"CSAFPID-75346",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-1502048"
]
}
],
"title": "CVE-2024-38214"
},
{
"cve": "CVE-2024-37968",
"cwe": {
"id": "CWE-345",
"name": "Insufficient Verification of Data Authenticity"
},
"notes": [
{
"category": "other",
"text": "Insufficient Verification of Data Authenticity",
"title": "CWE-345"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453805",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-747000",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-75345",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-37968",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-37968.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1453759",
"CSAFPID-1453760",
"CSAFPID-1453798",
"CSAFPID-1453805",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1453776",
"CSAFPID-1453777",
"CSAFPID-1453778",
"CSAFPID-1453779",
"CSAFPID-1453780",
"CSAFPID-1453781",
"CSAFPID-1453782",
"CSAFPID-1453783",
"CSAFPID-1453784",
"CSAFPID-747000",
"CSAFPID-2507",
"CSAFPID-2414",
"CSAFPID-2417",
"CSAFPID-75345",
"CSAFPID-1502048",
"CSAFPID-168719",
"CSAFPID-75346"
]
}
],
"title": "CVE-2024-37968"
},
{
"cve": "CVE-2024-38137",
"cwe": {
"id": "CWE-591",
"name": "Sensitive Data Storage in Improperly Locked Memory"
},
"notes": [
{
"category": "other",
"text": "Sensitive Data Storage in Improperly Locked Memory",
"title": "CWE-591"
},
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1615902",
"CSAFPID-1502048",
"CSAFPID-747000",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-75345",
"CSAFPID-2481"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38137",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38137.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1615902",
"CSAFPID-1502048",
"CSAFPID-747000",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-75345",
"CSAFPID-2481"
]
}
],
"title": "CVE-2024-38137"
},
{
"cve": "CVE-2024-38147",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1615902",
"CSAFPID-1502048",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-2481"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38147",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38147.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1615902",
"CSAFPID-1502048",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-2481"
]
}
],
"title": "CVE-2024-38147"
},
{
"cve": "CVE-2024-38148",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1615902",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453801",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1502048",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-168718"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38148",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38148.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1615902",
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453801",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1502048",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-168718"
]
}
],
"title": "CVE-2024-38148"
},
{
"cve": "CVE-2024-38150",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1615902",
"CSAFPID-1502048",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-2481"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38150",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38150.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1453798",
"CSAFPID-1453799",
"CSAFPID-1453800",
"CSAFPID-1453801",
"CSAFPID-1453802",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1615902",
"CSAFPID-1502048",
"CSAFPID-75345",
"CSAFPID-747000",
"CSAFPID-168718",
"CSAFPID-3823",
"CSAFPID-2481"
]
}
],
"title": "CVE-2024-38150"
},
{
"cve": "CVE-2024-38135",
"cwe": {
"id": "CWE-126",
"name": "Buffer Over-read"
},
"notes": [
{
"category": "other",
"text": "Buffer Over-read",
"title": "CWE-126"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1615902",
"CSAFPID-1453801",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1502048",
"CSAFPID-747000",
"CSAFPID-168718"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38135",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38135.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1615902",
"CSAFPID-1453801",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1453805",
"CSAFPID-1502048",
"CSAFPID-747000",
"CSAFPID-168718"
]
}
],
"title": "CVE-2024-38135"
},
{
"cve": "CVE-2024-38165",
"cwe": {
"id": "CWE-73",
"name": "External Control of File Name or Path"
},
"notes": [
{
"category": "other",
"text": "External Control of File Name or Path",
"title": "CWE-73"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1453801",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1502048"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38165",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38165.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1453801",
"CSAFPID-1453803",
"CSAFPID-1453804",
"CSAFPID-1502048"
]
}
],
"title": "CVE-2024-38165"
},
{
"cve": "CVE-2024-38159",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1502048",
"CSAFPID-2417",
"CSAFPID-2482",
"CSAFPID-168719"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38159",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38159.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1502048",
"CSAFPID-2417",
"CSAFPID-2482",
"CSAFPID-168719"
]
}
],
"title": "CVE-2024-38159"
},
{
"cve": "CVE-2024-38160",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1502048",
"CSAFPID-168719"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38160",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38160.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1453770",
"CSAFPID-1453771",
"CSAFPID-1453772",
"CSAFPID-1502048",
"CSAFPID-168719"
]
}
],
"title": "CVE-2024-38160"
},
{
"cve": "CVE-2024-38123",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1615902",
"CSAFPID-1502048"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38123",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38123.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1615902",
"CSAFPID-1502048"
]
}
],
"title": "CVE-2024-38123"
}
]
}
MSRC_CVE-2024-38147
Vulnerability from csaf_microsoft - Published: 2024-08-13 07:00 - Updated: 2024-08-13 07:00Summary
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Notes
Additional Resources
To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle
Disclaimer
The information provided in the Microsoft Knowledge Base is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.
Customer Action
Required. The vulnerability documented by this CVE requires customer action to resolve.
{
"document": {
"acknowledgments": [
{
"names": [
"\u003ca href=\"https://twitter.com/hillstone_lab\"\u003eZhang WangJunJie, He YiSheng\u003c/a\u003e with \u003ca href=\"https://www.hillstonenet.com.cn/\"\u003eHillstone Network Security Research Institute\u003c/a\u003e"
]
}
],
"aggregate_severity": {
"namespace": "https://www.microsoft.com/en-us/msrc/security-update-severity-rating-system",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Public",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en-US",
"notes": [
{
"category": "general",
"text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
"title": "Additional Resources"
},
{
"category": "legal_disclaimer",
"text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
"title": "Disclaimer"
},
{
"category": "general",
"text": "Required. The vulnerability documented by this CVE requires customer action to resolve.",
"title": "Customer Action"
}
],
"publisher": {
"category": "vendor",
"contact_details": "secure@microsoft.com",
"name": "Microsoft Security Response Center",
"namespace": "https://msrc.microsoft.com"
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38147 Microsoft DWM Core Library Elevation of Privilege Vulnerability - HTML",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38147"
},
{
"category": "self",
"summary": "CVE-2024-38147 Microsoft DWM Core Library Elevation of Privilege Vulnerability - CSAF",
"url": "https://msrc.microsoft.com/csaf/advisories/2024/msrc_cve-2024-38147.json"
},
{
"category": "external",
"summary": "Microsoft Exploitability Index",
"url": "https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1"
},
{
"category": "external",
"summary": "Microsoft Support Lifecycle",
"url": "https://support.microsoft.com/lifecycle"
},
{
"category": "external",
"summary": "Common Vulnerability Scoring System",
"url": "https://www.first.org/cvss"
}
],
"title": "Microsoft DWM Core Library Elevation of Privilege Vulnerability",
"tracking": {
"current_release_date": "2024-08-13T07:00:00.000Z",
"generator": {
"date": "2025-07-10T16:32:58.509Z",
"engine": {
"name": "MSRC Generator",
"version": "1.0"
}
},
"id": "msrc_CVE-2024-38147",
"initial_release_date": "2024-08-13T07:00:00.000Z",
"revision_history": [
{
"date": "2024-08-13T07:00:00.000Z",
"legacy_version": "1",
"number": "1",
"summary": "Information published."
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.20348.2655",
"product": {
"name": "Windows Server 2022 \u003c10.0.20348.2655",
"product_id": "17"
}
},
{
"category": "product_version",
"name": "10.0.20348.2655",
"product": {
"name": "Windows Server 2022 10.0.20348.2655",
"product_id": "11923"
}
}
],
"category": "product_name",
"name": "Windows Server 2022"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.20348.2655",
"product": {
"name": "Windows Server 2022 (Server Core installation) \u003c10.0.20348.2655",
"product_id": "16"
}
},
{
"category": "product_version",
"name": "10.0.20348.2655",
"product": {
"name": "Windows Server 2022 (Server Core installation) 10.0.20348.2655",
"product_id": "11924"
}
}
],
"category": "product_name",
"name": "Windows Server 2022 (Server Core installation)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.22000.3147",
"product": {
"name": "Windows 11 version 21H2 for x64-based Systems \u003c10.0.22000.3147",
"product_id": "15"
}
},
{
"category": "product_version",
"name": "10.0.22000.3147",
"product": {
"name": "Windows 11 version 21H2 for x64-based Systems 10.0.22000.3147",
"product_id": "11926"
}
}
],
"category": "product_name",
"name": "Windows 11 version 21H2 for x64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.22000.3147",
"product": {
"name": "Windows 11 version 21H2 for ARM64-based Systems \u003c10.0.22000.3147",
"product_id": "14"
}
},
{
"category": "product_version",
"name": "10.0.22000.3147",
"product": {
"name": "Windows 11 version 21H2 for ARM64-based Systems 10.0.22000.3147",
"product_id": "11927"
}
}
],
"category": "product_name",
"name": "Windows 11 version 21H2 for ARM64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.19044.4780",
"product": {
"name": "Windows 10 Version 21H2 for 32-bit Systems \u003c10.0.19044.4780",
"product_id": "13"
}
},
{
"category": "product_version",
"name": "10.0.19044.4780",
"product": {
"name": "Windows 10 Version 21H2 for 32-bit Systems 10.0.19044.4780",
"product_id": "11929"
}
}
],
"category": "product_name",
"name": "Windows 10 Version 21H2 for 32-bit Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.19044.4780",
"product": {
"name": "Windows 10 Version 21H2 for ARM64-based Systems \u003c10.0.19044.4780",
"product_id": "12"
}
},
{
"category": "product_version",
"name": "10.0.19044.4780",
"product": {
"name": "Windows 10 Version 21H2 for ARM64-based Systems 10.0.19044.4780",
"product_id": "11930"
}
}
],
"category": "product_name",
"name": "Windows 10 Version 21H2 for ARM64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.19044.4780",
"product": {
"name": "Windows 10 Version 21H2 for x64-based Systems \u003c10.0.19044.4780",
"product_id": "11"
}
},
{
"category": "product_version",
"name": "10.0.19044.4780",
"product": {
"name": "Windows 10 Version 21H2 for x64-based Systems 10.0.19044.4780",
"product_id": "11931"
}
}
],
"category": "product_name",
"name": "Windows 10 Version 21H2 for x64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.22621.4037",
"product": {
"name": "Windows 11 Version 22H2 for ARM64-based Systems \u003c10.0.22621.4037",
"product_id": "10"
}
},
{
"category": "product_version",
"name": "10.0.22621.4037",
"product": {
"name": "Windows 11 Version 22H2 for ARM64-based Systems 10.0.22621.4037",
"product_id": "12085"
}
}
],
"category": "product_name",
"name": "Windows 11 Version 22H2 for ARM64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.22621.4037",
"product": {
"name": "Windows 11 Version 22H2 for x64-based Systems \u003c10.0.22621.4037",
"product_id": "9"
}
},
{
"category": "product_version",
"name": "10.0.22621.4037",
"product": {
"name": "Windows 11 Version 22H2 for x64-based Systems 10.0.22621.4037",
"product_id": "12086"
}
}
],
"category": "product_name",
"name": "Windows 11 Version 22H2 for x64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.19045.4780",
"product": {
"name": "Windows 10 Version 22H2 for x64-based Systems \u003c10.0.19045.4780",
"product_id": "8"
}
},
{
"category": "product_version",
"name": "10.0.19045.4780",
"product": {
"name": "Windows 10 Version 22H2 for x64-based Systems 10.0.19045.4780",
"product_id": "12097"
}
}
],
"category": "product_name",
"name": "Windows 10 Version 22H2 for x64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.19045.4780",
"product": {
"name": "Windows 10 Version 22H2 for ARM64-based Systems \u003c10.0.19045.4780",
"product_id": "7"
}
},
{
"category": "product_version",
"name": "10.0.19045.4780",
"product": {
"name": "Windows 10 Version 22H2 for ARM64-based Systems 10.0.19045.4780",
"product_id": "12098"
}
}
],
"category": "product_name",
"name": "Windows 10 Version 22H2 for ARM64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.19045.4780",
"product": {
"name": "Windows 10 Version 22H2 for 32-bit Systems \u003c10.0.19045.4780",
"product_id": "6"
}
},
{
"category": "product_version",
"name": "10.0.19045.4780",
"product": {
"name": "Windows 10 Version 22H2 for 32-bit Systems 10.0.19045.4780",
"product_id": "12099"
}
}
],
"category": "product_name",
"name": "Windows 10 Version 22H2 for 32-bit Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.22631.4037",
"product": {
"name": "Windows 11 Version 23H2 for ARM64-based Systems \u003c10.0.22631.4037",
"product_id": "5"
}
},
{
"category": "product_version",
"name": "10.0.22631.4037",
"product": {
"name": "Windows 11 Version 23H2 for ARM64-based Systems 10.0.22631.4037",
"product_id": "12242"
}
}
],
"category": "product_name",
"name": "Windows 11 Version 23H2 for ARM64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.22631.4037",
"product": {
"name": "Windows 11 Version 23H2 for x64-based Systems \u003c10.0.22631.4037",
"product_id": "4"
}
},
{
"category": "product_version",
"name": "10.0.22631.4037",
"product": {
"name": "Windows 11 Version 23H2 for x64-based Systems 10.0.22631.4037",
"product_id": "12243"
}
}
],
"category": "product_name",
"name": "Windows 11 Version 23H2 for x64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.25398.1085",
"product": {
"name": "Windows Server 2022, 23H2 Edition (Server Core installation) \u003c10.0.25398.1085",
"product_id": "3"
}
},
{
"category": "product_version",
"name": "10.0.25398.1085",
"product": {
"name": "Windows Server 2022, 23H2 Edition (Server Core installation) 10.0.25398.1085",
"product_id": "12244"
}
}
],
"category": "product_name",
"name": "Windows Server 2022, 23H2 Edition (Server Core installation)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.26100.1457",
"product": {
"name": "Windows 11 Version 24H2 for ARM64-based Systems \u003c10.0.26100.1457",
"product_id": "2"
}
},
{
"category": "product_version",
"name": "10.0.26100.1457",
"product": {
"name": "Windows 11 Version 24H2 for ARM64-based Systems 10.0.26100.1457",
"product_id": "12389"
}
}
],
"category": "product_name",
"name": "Windows 11 Version 24H2 for ARM64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.26100.1457",
"product": {
"name": "Windows 11 Version 24H2 for x64-based Systems \u003c10.0.26100.1457",
"product_id": "1"
}
},
{
"category": "product_version",
"name": "10.0.26100.1457",
"product": {
"name": "Windows 11 Version 24H2 for x64-based Systems 10.0.26100.1457",
"product_id": "12390"
}
}
],
"category": "product_name",
"name": "Windows 11 Version 24H2 for x64-based Systems"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-38147",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "general",
"text": "Microsoft",
"title": "Assigning CNA"
},
{
"category": "faq",
"text": "To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.\nAdditionally, an attacker could convince a local user to open a malicious file. The attacker would have to convince the user to click a link, typically by way of an enticement in an email or instant message, and then convince them to open the specially crafted file.",
"title": "How could an attacker exploit this vulnerability?"
},
{
"category": "faq",
"text": "An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.",
"title": "What privileges could be gained by an attacker who successfully exploited this vulnerability?"
},
{
"category": "faq",
"text": "The new Copilot+ devices that are now publicly available come with Windows 11, version 24H2 installed. Customers with these devices need to know about any vulnerabilities that affect their machine and to install the updates if they are not receiving automatic updates. Note that the general availability date for Windows 11, version 24H2 is scheduled for later this year.",
"title": "Windows 11, version 24H2 is not generally available yet. Why are there updates for this version of Windows listed in the Security Updates table?"
}
],
"product_status": {
"fixed": [
"11923",
"11924",
"11926",
"11927",
"11929",
"11930",
"11931",
"12085",
"12086",
"12097",
"12098",
"12099",
"12242",
"12243",
"12244",
"12389",
"12390"
],
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38147 Microsoft DWM Core Library Elevation of Privilege Vulnerability - HTML",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38147"
},
{
"category": "self",
"summary": "CVE-2024-38147 Microsoft DWM Core Library Elevation of Privilege Vulnerability - CSAF",
"url": "https://msrc.microsoft.com/csaf/advisories/2024/msrc_cve-2024-38147.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"date": "2024-08-13T07:00:00.000Z",
"details": "10.0.20348.2655:Security Update:https://support.microsoft.com/help/5041160",
"product_ids": [
"17",
"16"
],
"url": "https://support.microsoft.com/help/5041160"
},
{
"category": "vendor_fix",
"date": "2024-08-13T07:00:00.000Z",
"details": "10.0.22000.3147:Security Update:https://support.microsoft.com/help/5041592",
"product_ids": [
"15",
"14"
],
"url": "https://support.microsoft.com/help/5041592"
},
{
"category": "vendor_fix",
"date": "2024-08-13T07:00:00.000Z",
"details": "10.0.19044.4780:Security Update:https://support.microsoft.com/help/5041580",
"product_ids": [
"13",
"12",
"11"
],
"url": "https://support.microsoft.com/help/5041580"
},
{
"category": "vendor_fix",
"date": "2024-08-13T07:00:00.000Z",
"details": "10.0.22621.4037:Security Update:https://support.microsoft.com/help/5041585",
"product_ids": [
"10",
"9"
],
"url": "https://support.microsoft.com/help/5041585"
},
{
"category": "vendor_fix",
"date": "2024-08-13T07:00:00.000Z",
"details": "10.0.19045.4780:Security Update:https://support.microsoft.com/help/5041580",
"product_ids": [
"8",
"7",
"6"
],
"url": "https://support.microsoft.com/help/5041580"
},
{
"category": "vendor_fix",
"date": "2024-08-13T07:00:00.000Z",
"details": "10.0.22631.4037:Security Update:https://support.microsoft.com/help/5041585",
"product_ids": [
"5",
"4"
],
"url": "https://support.microsoft.com/help/5041585"
},
{
"category": "vendor_fix",
"date": "2024-08-13T07:00:00.000Z",
"details": "10.0.25398.1085:Security Update:https://support.microsoft.com/help/5041573",
"product_ids": [
"3"
],
"url": "https://support.microsoft.com/help/5041573"
},
{
"category": "vendor_fix",
"date": "2024-08-13T07:00:00.000Z",
"details": "10.0.26100.1457:Security Update:https://support.microsoft.com/help/5041571",
"product_ids": [
"2",
"1"
],
"url": "https://support.microsoft.com/help/5041571"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"environmentalsScore": 0.0,
"exploitCodeMaturity": "UNPROVEN",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"remediationLevel": "OFFICIAL_FIX",
"reportConfidence": "CONFIRMED",
"scope": "UNCHANGED",
"temporalScore": 6.8,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17"
]
}
],
"threats": [
{
"category": "impact",
"details": "Elevation of Privilege"
},
{
"category": "exploit_status",
"details": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely"
}
],
"title": "Microsoft DWM Core Library Elevation of Privilege Vulnerability"
}
]
}
FKIE_CVE-2024-38147
Vulnerability from fkie_nvd - Published: 2024-08-13 18:15 - Updated: 2024-08-16 20:55
Severity ?
Summary
Microsoft DWM Core Library Elevation of Privilege Vulnerability
References
| URL | Tags | ||
|---|---|---|---|
| secure@microsoft.com | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38147 | Patch, Vendor Advisory |
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| microsoft | windows_10_21h2 | * | |
| microsoft | windows_10_22h2 | * | |
| microsoft | windows_11_21h2 | * | |
| microsoft | windows_11_22h2 | * | |
| microsoft | windows_11_23h2 | * | |
| microsoft | windows_11_24h2 | * | |
| microsoft | windows_server_2022 | * | |
| microsoft | windows_server_2022_23h2 | * |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
"matchCriteriaId": "8D75E5B4-14B7-4D0F-96B5-2B9C270B7F98",
"versionEndExcluding": "10.0.19044.4780",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
"matchCriteriaId": "3F9C3ED0-C639-42B9-8512-5CAD50B7095B",
"versionEndExcluding": "10.0.19045.4780",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
"matchCriteriaId": "66EC161E-9908-4511-933C-727D46A8271E",
"versionEndExcluding": "10.0.22000.3147",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
"matchCriteriaId": "EE5B452D-B921-4E5F-9C79-360447CD3BF8",
"versionEndExcluding": "10.0.22621.4037",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
"matchCriteriaId": "B56F0E20-88FD-4A42-B5DE-06A6D2FAC6FA",
"versionEndExcluding": "10.0.22631.4037",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
"matchCriteriaId": "3C7E2433-4D16-40E5-973A-42F651779A47",
"versionEndExcluding": "10.0.26100.1457",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
"matchCriteriaId": "8E3975C0-EA3C-4B85-94BC-43BA94474FCA",
"versionEndExcluding": "10.0.20348.2655",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
"matchCriteriaId": "094C36FE-9CCB-4148-AA0F-5727D6933768",
"versionEndExcluding": "10.0.25398.1085",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Microsoft DWM Core Library Elevation of Privilege Vulnerability"
},
{
"lang": "es",
"value": "Vulnerabilidad de elevaci\u00f3n de privilegios de la librer\u00eda principal de Microsoft DWM"
}
],
"id": "CVE-2024-38147",
"lastModified": "2024-08-16T20:55:03.907",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9,
"source": "secure@microsoft.com",
"type": "Secondary"
}
]
},
"published": "2024-08-13T18:15:19.407",
"references": [
{
"source": "secure@microsoft.com",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38147"
}
],
"sourceIdentifier": "secure@microsoft.com",
"vulnStatus": "Analyzed",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-416"
}
],
"source": "secure@microsoft.com",
"type": "Secondary"
},
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
GHSA-M9RP-3CMH-596M
Vulnerability from github – Published: 2024-08-13 18:31 – Updated: 2024-08-13 18:31
VLAI?
Details
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Severity ?
7.8 (High)
{
"affected": [],
"aliases": [
"CVE-2024-38147"
],
"database_specific": {
"cwe_ids": [
"CWE-416"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-13T18:15:19Z",
"severity": "HIGH"
},
"details": "Microsoft DWM Core Library Elevation of Privilege Vulnerability",
"id": "GHSA-m9rp-3cmh-596m",
"modified": "2024-08-13T18:31:16Z",
"published": "2024-08-13T18:31:16Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38147"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38147"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…