PT-2024-4976 · Microsoft · Windows Kernel

Published 2024-07-09 · Updated 2024-09-29 · CVE-2024-37985

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Windows Kernel (affected versions not specified)

Description: The issue is related to a Windows kernel information disclosure vulnerability. It is associated with processor optimization, removal, or modification of critical security code. Exploitation of this issue may allow an attacker to disclose protected information through a side-channel attack. The vulnerability affects ARM-based systems and has been exploited in the wild.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1037

Related Identifiers

BDU:2024-05500

CVE-2024-37985

Affected Products

Windows Kernel

References · 26

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37985 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-05500 · Security Note
• https://osv.dev/vulnerability/CVE-2024-37985 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-37985 · Security Note
• https://twitter.com/patchnow24x7/status/1810902243337719977 · Twitter Post
• https://twitter.com/patchnow24x7/status/1810902341098557578 · Twitter Post
• https://t.me/true_secator/5952 · Telegram Post
• https://twitter.com/patchnow24x7/status/1810902391501508629 · Twitter Post
• https://t.me/cvedetector/5881 · Telegram Post
• https://twitter.com/the_yellow_fall/status/1836254591761215830 · Twitter Post
• https://twitter.com/patchnow24x7/status/1810901954115350978 · Twitter Post
• https://dl.acm.org/doi/10.1145/3576915.3623124 · Note
• https://twitter.com/ohhara_shiojiri/status/1836264846209532289 · Twitter Post
• https://twitter.com/iSecurity/status/1836365076854640869 · Twitter Post
• https://twitter.com/patchnow24x7/status/1810902293350600955 · Twitter Post