Windows Libarchive Remote Code Execution Vulnerability

CVE-2024-43495
7.3HIGH

Key Information

Vendor
Microsoft
Status
Windows 11 Version 22h2
Windows 11 Version 22h3
Windows 11 Version 23h2
Windows Server 2022, 23h2 Edition (server Core Installation)
Vendor
CVE Published:
10 September 2024

Summary

Windows libarchive Remote Code Execution Vulnerability

Affected Version(s)

Windows 11 version 22H2 < 10.0.22621.3880

Windows 11 version 22H3 < 10.0.22631.3880

Windows 11 Version 23H2 < 10.0.22621.3880

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published.

  • Vulnerability Reserved.

Collectors

NVD DatabaseMitre DatabaseMicrosoft Feed
.