Accessing High-Value Data without Permission

CVE-2024-38248
7HIGH

Key Information

Vendor
Microsoft
Status
Windows Server 2022
Windows 11 Version 21h2
Windows 10 Version 21h2
Windows 11 Version 22h2
Vendor
CVE Published:
10 September 2024

Summary

Windows Storage Elevation of Privilege Vulnerability

Affected Version(s)

Windows Server 2022 < 10.0.20348.2700

Windows Server 2022 < 10.0.20348.2695

Windows 11 version 21H2 < 10.0.22000.3197

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published.

  • Vulnerability Reserved.

Collectors

NVD DatabaseMitre DatabaseMicrosoft Feed
.