CVE-2024-38246

Published: Sep 10, 2024Modified: Aug 10, 2026

7.0

Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.0 / Impact: 5.9

Source: secure@microsoft.com (Secondary)

Description

Win32k Elevation of Privilege Vulnerability

Affected (12)

Products: Microsoft: Windows 10 21h2, Windows 10 22h2, Windows 11 21h2, Windows 11 22h2, Windows 11 23h2, Windows 11 24h2, Windows Server 2022, Windows Server 2022 23h2

8 products

Windows 10 21h2

Windows 10 22h2

Windows 11 21h2

Windows 11 22h2

Windows 11 23h2

Windows 11 24h2

Windows Server 2022

Windows Server 2022 23h2

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows 10 21h2	version < 10.0.19044.4894
Microsoft Windows 10 22h2	version < 10.0.19045.4894
Microsoft Windows 10 22h2	version < 10.0.19045.4894
Microsoft Windows 10 22h2	version < 10.0.19045.4894
Microsoft Windows 11 21h2	version < 10.0.22000.3197
Microsoft Windows 11 22h2	version < 10.0.22621.4169
Microsoft Windows 11 23h2	version < 10.0.22621.4169
Microsoft Windows 11 23h2	version < 10.0.22631.4169
Microsoft Windows 11 24h2	version < 10.0.26100.1742
Microsoft Windows 11 24h2	version < 10.0.26100.1742
Microsoft Windows Server 2022	version < 10.0.20348.2700
Microsoft Windows Server 2022 23h2	version < 10.0.25398.1128

Related CWEs

Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

References (1)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38246

Source: secure@microsoft.com

PatchVendor Advisory

Timeline

No history available yet.