PT-2024-5987 · Microsoft · Windows 11+2

Philippe Laulheret · Published 2024-08-12 · Updated 2024-12-17 · CVE-2024-38184

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Windows 10 versions prior to 10.0.19044.4651 Microsoft Windows 10 22h2 versions prior to 10.0.19045.4651 Microsoft Windows 11 21h2 versions prior to 10.0.22000.3079

Description The issue is related to a buffer overflow in the Windows Kernel-Mode Driver, which can allow an attacker to elevate their privileges. This can potentially affect the system.

Recommendations For Microsoft Windows 10 versions prior to 10.0.19044.4651, update to a version equal to or later than 10.0.19044.4651. For Microsoft Windows 10 22h2 versions prior to 10.0.19045.4651, update to a version equal to or later than 10.0.19045.4651. For Microsoft Windows 11 21h2 versions prior to 10.0.22000.3079, update to a version equal to or later than 10.0.22000.3079.

Fix

LPE

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2024-06796

CVE-2024-38184

Affected Products

Windows

Windows 10

Windows 11

References · 18

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38187 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-38184 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-38184 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38184 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2024-38184 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-06796 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38184 · Security Note
• https://blog.talosintelligence.com/finding-vulnerabilities-in-clipsp-the-driver-at-the-core-of-windows-client-license-platform · Reddit Post
• https://vuldb.com/?id.274487 · Note
• https://twitter.com/rst_cloud/status/1824670883673170053 · Twitter Post
• https://talosintelligence.com/vulnerability_reports/TALOS-2024-1964 · Note
• https://twitter.com/rst_cloud/status/1824716394807574699 · Twitter Post
• https://massgrave.dev/blog/keyhole · Note
• https://twitter.com/AnonTroyano303/status/1833570718740582770 · Twitter Post
• https://t.me/cvenotify/90987 · Telegram Post