CVE-2024-20692

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability
References
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*

History

29 May 2024, 00:15

Type Values Removed Values Added
CWE CWE-326

28 May 2024, 21:16

Type Values Removed Values Added
CWE CWE-326

11 Apr 2024, 20:15

Type Values Removed Values Added
CWE CWE-326

12 Jan 2024, 19:10

Type Values Removed Values Added
CPE cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*
First Time Microsoft windows Server 2022 23h2
Microsoft windows Server 2016
Microsoft windows 10 1607
Microsoft windows 10 1507
Microsoft
Microsoft windows 11 21h2
Microsoft windows Server 2008
Microsoft windows Server 2022
Microsoft windows Server 2012
Microsoft windows Server 2019
Microsoft windows 10 1809
Microsoft windows 10 22h2
Microsoft windows 11 23h2
Microsoft windows 10 21h2
Microsoft windows 11 22h2
References () https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20692 - () https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20692 - Patch, Vendor Advisory
CWE CWE-668

09 Jan 2024, 18:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-01-09 18:15

Updated : 2024-05-29 00:15


NVD link : CVE-2024-20692

Mitre link : CVE-2024-20692

CVE.ORG link : CVE-2024-20692


JSON object : View

Products Affected

microsoft

  • windows_server_2012
  • windows_11_21h2
  • windows_10_1507
  • windows_server_2022_23h2
  • windows_server_2019
  • windows_10_1607
  • windows_10_21h2
  • windows_10_22h2
  • windows_10_1809
  • windows_11_22h2
  • windows_server_2008
  • windows_server_2016
  • windows_server_2022
  • windows_11_23h2
CWE
CWE-668

Exposure of Resource to Wrong Sphere

CWE-326

Inadequate Encryption Strength