CVE-2024-38046

Published: Sep 10, 2024Modified: Aug 10, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: secure@microsoft.com (Secondary)

Description

PowerShell Elevation of Privilege Vulnerability

Affected (25)

Products: Microsoft: Windows 10 1507, Windows 10 1607, Windows 10 1809, Windows 10 21h1, Windows 10 22h2, Windows 11 21h2, Windows 11 22h2, Windows 11 23h2, Windows 11 24h2, Windows Server 2016, Windows Server 2019, Windows Server 2022, Windows Server 2022 23h2

13 products

Windows 10 1507

Windows 10 1607

Windows 10 1809

Windows 10 21h1

Windows 10 22h2

Windows 11 21h2

Windows 11 22h2

Windows 11 23h2

Windows 11 24h2

Windows Server 2016

Windows Server 2019

Windows Server 2022

Windows Server 2022 23h2

Configuration A

25 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows 10 1507	version < 10.0.10240.20766
Microsoft Windows 10 1507	version < 10.0.10240.20766
Microsoft Windows 10 1607	version < 10.0.14393.7336
Microsoft Windows 10 1607	version < 10.0.14393.7336
Microsoft Windows 10 1809	version < 10.0.17763.6293
Microsoft Windows 10 1809	version < 10.0.17763.6293
Microsoft Windows 10 1809	version < 10.0.17763.6293
Microsoft Windows 10 21h1	version < 10.0.19044.4894
Microsoft Windows 10 21h1	version < 10.0.19044.4894
Microsoft Windows 10 21h1	version < 10.0.19044.4894
Microsoft Windows 10 22h2	version < 10.0.19045.4894
Microsoft Windows 10 22h2	version < 10.0.19045.4894
Microsoft Windows 10 22h2	version < 10.0.19045.4894
Microsoft Windows 11 21h2	version < 10.0.22000.3197
Microsoft Windows 11 21h2	version < 10.0.22000.3197
Microsoft Windows 11 22h2	version < 10.0.22621.4169
Microsoft Windows 11 22h2	version < 10.0.22621.4169
Microsoft Windows 11 23h2	version < 10.0.22631.4169
Microsoft Windows 11 23h2	version < 10.0.22631.4169
Microsoft Windows 11 24h2	version < 10.0.26100.1742
Microsoft Windows 11 24h2	version < 10.0.26100.1742
Microsoft Windows Server 2016	version < 10.0.14393.7336
Microsoft Windows Server 2019	version < 10.0.17763.6293
Microsoft Windows Server 2022	version < 10.0.20348.2700
Microsoft Windows Server 2022 23h2	version < 10.0.25398.1128

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (1)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38046

Source: secure@microsoft.com

PatchVendor Advisory

Timeline

No history available yet.