CVE-2023-24943

Vulnerable Software	Affected Versions
Microsoft Windows 10 1507	Before 10.0.10240.19926
Microsoft Windows 10 1607	Before 10.0.14393.5921
Microsoft Windows 10 1809	Before 10.0.17763.4377
Microsoft Windows 10 20h2	Before 10.0.19042.2965
Microsoft Windows 10 21h2	Before 10.0.19044.2965
Microsoft Windows 10 22h2	Before 10.0.19045.2965
Microsoft Windows 11 21h2	Before 10.0.22000.1936
Microsoft Windows 11 22h2	Before 10.0.22000.1702
Microsoft Windows Server 2008	All versions
Microsoft Windows Server 2008	Version r2 sp1
Microsoft Windows Server 2012	All versions
Microsoft Windows Server 2012	Version r2
Microsoft Windows Server 2016	All versions
Microsoft Windows Server 2019	All versions
Microsoft Windows Server 2022	All versions

Related CWEs

CWE-122

Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

References (2)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24943

Source: secure@microsoft.com

PatchVendor Advisory

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24943

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline (5)

11/21/2024

1 change

CVE Modified - Reference

07:48 AM

- -
+ https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24943

5/29/2024

1 change

CVE Modified - CWE

02:15 AM

- -
+ Microsoft Corporation CWE-122

5/15/2023

3 changes

Initial Analysis - CPE Configuration

07:27 PM

- -
+ OR
     *cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:* versions up to (excluding) 10.0.10240.19926
     *cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:* versions up to (excluding) 10.0.14393.5921
     *cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:* versions up to (excluding) 10.0.17763.4377
     *cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:* versions up to (excluding) 10.0.19042.2965
     *cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:* versions up to (excluding) 10.0.19044.2965
     *cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:* versions up to (excluding) 10.0.19045.2965
     *cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:* versions up to (excluding) 10.0.22000.1936
     *cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:* versions up to (excluding) 10.0.22000.1702
     *cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
     *cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*
     *cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
     *cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
     *cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*
     *cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*
     *cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*

Initial Analysis - CWE

07:27 PM

- -
+ NIST NVD-CWE-noinfo

Initial Analysis - Reference Type

07:27 PM

- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24943 No Types Assigned
+ https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24943 Patch, Vendor Advisory