Blue Screen of Death Vulnerability in Microsoft Windows
CVE-2024-6768

6.8MEDIUM

Key Information:

Vendor

Microsoft

Vendor
CVE Published:
12 August 2024

Badges

👾 Exploit Exists🟣 EPSS 19%📰 News Worthy

What is CVE-2024-6768?

A Denial of Service in CLFS.sys in Microsoft Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, and Windows Server 2022 allows a malicious authenticated low-privilege user to cause a Blue Screen of Death via a forced call to the KeBugCheckEx function.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

Windows 10 10.0.0

Windows 11 10.0.0

Windows Server 2016 10.0.0

News Articles

New Windows 10 And 11 Blue Screen Of Death Warning Issued

Just as Windows users have recovered from the July CrowdStrike update failure, a new blue screen of death threat has been revealed. Here’s what is known so far.

Windows 11/10 system driver has BSOD-triggering CVE-2024-6768 flaw on fully updated PCs

Security researchers have discovered a vulnerability in a Windows system driver that can be abused to trigger a blue screen of death (BSOD), even on fully updated Windows 11 and 10 systems.

CLFS Bug Crashes Even Updated Windows 10, 11 Systems

A quick and easy exploit for crashing Windows computers has no fix yet nor really any way to mitigate its effects.

References

EPSS Score

19% chance of being exploited in the next 30 days.

CVSS V4

Score:
6.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 👾

    Exploit known to exist

  • 📰

    First article discovered

  • Vulnerability published

Credit

Ricardo Narvaja
.