← Back

CVE-2024-43631

nvd nist
Published: Nov 12, 2024Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

Affected (15)

Microsoft
8 products
Windows 10 21h2
Windows 10 22h2
Windows 11 22h2
Windows 11 23h2
Windows 11 24h2
Windows Server 2022
Windows Server 2022 23h2
Windows Server 2025
Configuration A
15 vulnerable
Vulnerable SoftwareAffected Versions
Microsoft
Windows 10 21h2
version < 10.0.19044.5131
Windows 10 21h2
version < 10.0.19044.5131
Windows 10 21h2
version < 10.0.19044.5131
Microsoft
Windows 10 22h2
version < 10.0.19045.5131
Windows 10 22h2
version < 10.0.19045.5131
Windows 10 22h2
version < 10.0.19045.5131
Microsoft
Windows 11 22h2
version < 10.0.22621.4460
Windows 11 22h2
version < 10.0.22621.4460
Microsoft
Windows 11 23h2
version < 10.0.22631.4460
Windows 11 23h2
version < 10.0.22631.4460
Microsoft
Windows 11 24h2
version < 10.0.26100.2314
Windows 11 24h2
version < 10.0.26100.2314
Windows Server 2022
version < 10.0.20348.2849
Windows Server 2022 23h2
version < 10.0.25398.1251
Windows Server 2025
version < 10.0.26100.2314

Related CWEs

CWE-822
Untrusted Pointer Dereference
The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.

References (1)

Source: secure@microsoft.com
PatchVendor Advisory

Timeline

No history available yet.