CVE-2024-38136

Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability
References
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*

History

16 Aug 2024, 15:26

Type Values Removed Values Added
First Time Microsoft windows 10 1809
Microsoft windows Server 2019
Microsoft windows 10 21h2
Microsoft windows 11 22h2
Microsoft windows 11 24h2
Microsoft windows 11 23h2
Microsoft windows Server 2022
Microsoft windows 10 22h2
Microsoft
Microsoft windows Server 2022 23h2
Microsoft windows 11 21h2
Summary
  • (es) Vulnerabilidad de elevación de privilegios en la extensión del servicio PSM de Windows Resource Manager
CWE CWE-362
References () https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38136 - () https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38136 - Patch, Vendor Advisory
CPE cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*

13 Aug 2024, 18:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-08-13 18:15

Updated : 2024-08-16 15:26


NVD link : CVE-2024-38136

Mitre link : CVE-2024-38136

CVE.ORG link : CVE-2024-38136


JSON object : View

Products Affected

microsoft

  • windows_11_21h2
  • windows_server_2022
  • windows_server_2022_23h2
  • windows_11_23h2
  • windows_10_1809
  • windows_server_2019
  • windows_10_22h2
  • windows_10_21h2
  • windows_11_22h2
  • windows_11_24h2
CWE
CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CWE-416

Use After Free