CVE-2024-38137

Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability
References
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*

History

16 Aug 2024, 15:27

Type Values Removed Values Added
CPE cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*
First Time Microsoft windows 10 21h2
Microsoft windows 11 22h2
Microsoft windows 11 24h2
Microsoft windows 11 23h2
Microsoft windows Server 2022
Microsoft windows 10 22h2
Microsoft
Microsoft windows Server 2022 23h2
Microsoft windows 11 21h2
CWE CWE-362
References () https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38137 - () https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38137 - Patch, Vendor Advisory
Summary
  • (es) Vulnerabilidad de elevación de privilegios en la extensión del servicio PSM de Windows Resource Manager

13 Aug 2024, 18:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-08-13 18:15

Updated : 2024-08-16 15:27


NVD link : CVE-2024-38137

Mitre link : CVE-2024-38137

CVE.ORG link : CVE-2024-38137


JSON object : View

Products Affected

microsoft

  • windows_server_2022_23h2
  • windows_11_22h2
  • windows_11_23h2
  • windows_server_2022
  • windows_11_24h2
  • windows_11_21h2
  • windows_10_22h2
  • windows_10_21h2
CWE
CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CWE-416

Use After Free

CWE-591

Sensitive Data Storage in Improperly Locked Memory