CVE-2024-38155

Security Center Broker Information Disclosure Vulnerability

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38155	Patch Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:microsoft:windows_10_1809::::::::
	cpe:2.3:o:microsoft:windows_10_21h2::::::::
	cpe:2.3:o:microsoft:windows_10_22h2::::::::
	cpe:2.3:o:microsoft:windows_11_21h2::::::::
	cpe:2.3:o:microsoft:windows_11_22h2::::::::
	cpe:2.3:o:microsoft:windows_11_23h2::::::::
	cpe:2.3:o:microsoft:windows_11_24h2::::::::

History

16 Aug 2024, 20:39

Type	Values Removed	Values Added
First Time		Microsoft windows 10 1809 Microsoft windows 10 21h2 Microsoft windows 11 22h2 Microsoft windows 11 24h2 Microsoft windows 11 23h2 Microsoft windows 10 22h2 Microsoft Microsoft windows 11 21h2
References	~~() https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38155 -~~	() https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38155 - Patch, Vendor Advisory
Summary		(es) Vulnerabilidad de divulgación de información del agente del centro de seguridad
CWE		NVD-CWE-noinfo
CPE		cpe:2.3:o:microsoft:windows_11_21h2:::::::: cpe:2.3:o:microsoft:windows_10_1809:::::::: cpe:2.3:o:microsoft:windows_11_23h2:::::::: cpe:2.3:o:microsoft:windows_11_22h2:::::::: cpe:2.3:o:microsoft:windows_10_21h2:::::::: cpe:2.3:o:microsoft:windows_10_22h2:::::::: cpe:2.3:o:microsoft:windows_11_24h2::::::::

13 Aug 2024, 18:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-08-13 18:15

Updated : 2024-08-16 20:39

NVD link : CVE-2024-38155

Mitre link : CVE-2024-38155

CVE.ORG link : CVE-2024-38155

JSON object : View

Products Affected

microsoft

windows_10_22h2
windows_11_21h2
windows_11_24h2
windows_11_23h2
windows_11_22h2
windows_10_1809
windows_10_21h2

CWE

NVD-CWE-noinfo CWE-125

Out-of-bounds Read

{"id": "CVE-2024-38155", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "secure@microsoft.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "published": "2024-08-13T18:15:21.753", "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38155", "tags": ["Patch", "Vendor Advisory"], "source": "secure@microsoft.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}, {"type": "Secondary", "source": "secure@microsoft.com", "description": [{"lang": "en", "value": "CWE-125"}]}], "descriptions": [{"lang": "en", "value": "Security Center Broker Information Disclosure Vulnerability"}, {"lang": "es", "value": "Vulnerabilidad de divulgaci\u00f3n de informaci\u00f3n del agente del centro de seguridad"}], "lastModified": "2024-08-16T20:39:26.020", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C0893DB0-24BA-41A1-907E-8B6F66741A0E", "versionEndExcluding": "10.0.17763.6189"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8D75E5B4-14B7-4D0F-96B5-2B9C270B7F98", "versionEndExcluding": "10.0.19044.4780"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3F9C3ED0-C639-42B9-8512-5CAD50B7095B", "versionEndExcluding": "10.0.19045.4780"}, {"criteria": "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "66EC161E-9908-4511-933C-727D46A8271E", "versionEndExcluding": "10.0.22000.3147"}, {"criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EE5B452D-B921-4E5F-9C79-360447CD3BF8", "versionEndExcluding": "10.0.22621.4037"}, {"criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B56F0E20-88FD-4A42-B5DE-06A6D2FAC6FA", "versionEndExcluding": "10.0.22631.4037"}, {"criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3C7E2433-4D16-40E5-973A-42F651779A47", "versionEndExcluding": "10.0.26100.1457"}], "operator": "OR"}]}], "sourceIdentifier": "secure@microsoft.com"}