CVE-2024-21431

Published: Mar 12, 2024Modified: Jun 17, 2026

6.7

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 5.9

Source: NVD

Description

Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability

Affected (14)

Products: Microsoft: Windows 10 21h2, Windows 10 22h2, Windows 11 21h2, Windows 11 22h2, Windows 11 23h2, Windows Server 2022, Windows Server 2022 23h2

7 products

Windows 10 21h2

Windows 10 22h2

Windows 11 21h2

Windows 11 22h2

Windows 11 23h2

Windows Server 2022

Windows Server 2022 23h2

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows 10 21h2	version < 10.0.19044.4170
Microsoft Windows 10 21h2	version < 10.0.19044.4170
Microsoft Windows 10 21h2	version < 10.0.19044.4170
Microsoft Windows 10 22h2	version < 10.0.19045.4170
Microsoft Windows 10 22h2	version < 10.0.19045.4170
Microsoft Windows 10 22h2	version < 10.0.19045.4170
Microsoft Windows 11 21h2	version < 10.0.22000.2836
Microsoft Windows 11 21h2	version < 10.0.22000.2836
Microsoft Windows 11 22h2	version < 10.0.22621.3296
Microsoft Windows 11 22h2	version < 10.0.22621.3296
Microsoft Windows 11 23h2	version < 10.0.22631.3296
Microsoft Windows 11 23h2	version < 10.0.22631.3296
Microsoft Windows Server 2022	version < 10.0.20348.2340
Microsoft Windows Server 2022 23h2	version < 10.0.25398.763

Related CWEs

Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

References (2)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21431

Source: secure@microsoft.com

PatchVendor Advisory

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21431

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.