CVE-2024-38144

HIGH8.8Memory safety

JSON export Create alert

Description

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

CVSS breakdown

CVSS 3.1

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

E

Unchanged

RL

O

RC

Changed

Affected products

microsoft / Windows 10 Version 150710.0.10240.0 – 10.0.10240.20751
microsoft / Windows 10 Version 160710.0.14393.0 – 10.0.14393.7259
microsoft / Windows 10 Version 180910.0.17763.0 – 10.0.17763.6189
microsoft / Windows 10 Version 21H210.0.19043.0 – 10.0.19044.4780
microsoft / Windows 10 Version 22H210.0.19045.0 – 10.0.19045.4780
microsoft / Windows 11 version 21H210.0.0 – 10.0.22000.3147
microsoft / Windows 11 version 22H210.0.22621.0 – 10.0.22621.4037
microsoft / Windows 11 version 22H310.0.22631.0 – 10.0.22631.4037
microsoft / Windows 11 version 23H210.0.22631.0 – 10.0.22631.4037
microsoft / Windows 11 Version 24H210.0.26100.0 – 10.0.26100.1457
microsoft / Windows Server 2008 R2 Service Pack 16.1.7601.0 – 6.1.7601.27277
microsoft / Windows Server 2008 R2 Service Pack 1 (Server Core installation)6.1.7601.0 – 6.1.7601.27277
microsoft / Windows Server 2008 Service Pack 26.0.6003.0 – 6.0.6003.22825
microsoft / Windows Server 2008 Service Pack 2 (Server Core installation)6.0.6003.0 – 6.0.6003.22825
microsoft / Windows Server 20126.2.9200.0 – 6.2.9200.25031
microsoft / Windows Server 2012 R26.3.9600.0 – 6.3.9600.22134
microsoft / Windows Server 2012 R2 (Server Core installation)6.3.9600.0 – 6.3.9600.22134
microsoft / Windows Server 2012 (Server Core installation)6.2.9200.0 – 6.2.9200.25031
microsoft / Windows Server 201610.0.14393.0 – 10.0.14393.7259
microsoft / Windows Server 2016 (Server Core installation)10.0.14393.0 – 10.0.14393.7259
microsoft / Windows Server 201910.0.17763.0 – 10.0.17763.6189
microsoft / Windows Server 2019 (Server Core installation)10.0.17763.0 – 10.0.17763.6189
microsoft / Windows Server 202210.0.20348.0 – 10.0.20348.2655
microsoft / Windows Server 2022, 23H2 Edition (Server Core installation)10.0.25398.0 – 10.0.25398.1085

References

VENDOR_ADVISORYhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38144

Updated 11m ago · 8 sources