csaf_microsoft - msrc_cve-2024-38202

msrc_cve-2024-38202

Vulnerability from csaf_microsoft

Published

2024-08-13 07:00

Modified

2024-10-15 07:00

Summary

Windows Update Stack Elevation of Privilege Vulnerability

Notes

Additional Resources

To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle

Disclaimer

The information provided in the Microsoft Knowledge Base is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.

Customer Action

Required. The vulnerability documented by this CVE requires customer action to resolve.

JSON

To clipboard

{
  "document": {
    "acknowledgments": [
      {
        "names": [
          "\u003ca href=\"https://twitter.com/_0xdeku\"\u003eAlon Leviev\u003c/a\u003e with \u003ca href=\"https://safebreach.com/\"\u003eSafeBreach\u003c/a\u003e"
        ]
      }
    ],
    "aggregate_severity": {
      "namespace": "https://www.microsoft.com/en-us/msrc/security-update-severity-rating-system",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Public",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
        "title": "Disclaimer"
      },
      {
        "category": "general",
        "text": "Required. The vulnerability documented by this CVE requires customer action to resolve.",
        "title": "Customer Action"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "secure@microsoft.com",
      "name": "Microsoft Security Response Center",
      "namespace": "https://msrc.microsoft.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "CVE-2024-38202 Windows Update Stack Elevation of Privilege Vulnerability - HTML",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38202"
      },
      {
        "category": "self",
        "summary": "CVE-2024-38202 Windows Update Stack Elevation of Privilege Vulnerability - CSAF",
        "url": "https://msrc.microsoft.com/csaf/2024/msrc_cve-2024-38202.json"
      },
      {
        "category": "external",
        "summary": "Microsoft Exploitability Index",
        "url": "https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1"
      },
      {
        "category": "external",
        "summary": "Microsoft Support Lifecycle",
        "url": "https://support.microsoft.com/lifecycle"
      },
      {
        "category": "external",
        "summary": "Common Vulnerability Scoring System",
        "url": "https://www.first.org/cvss"
      }
    ],
    "title": "Windows Update Stack Elevation of Privilege Vulnerability",
    "tracking": {
      "current_release_date": "2024-10-15T07:00:00.000Z",
      "generator": {
        "date": "2024-12-31T22:30:41.293Z",
        "engine": {
          "name": "MSRC Generator",
          "version": "1.0"
        }
      },
      "id": "msrc_CVE-2024-38202",
      "initial_release_date": "2024-08-13T07:00:00.000Z",
      "revision_history": [
        {
          "date": "2024-08-07T07:00:00.000Z",
          "legacy_version": "1",
          "number": "1",
          "summary": "Information published."
        },
        {
          "date": "2024-08-08T07:00:00.000Z",
          "legacy_version": "1.1",
          "number": "2",
          "summary": "Added an additional recommended action option and edited the details of a separate recommended action in the CVE Executive Summary."
        },
        {
          "date": "2024-10-08T07:00:00.000Z",
          "legacy_version": "2",
          "number": "3",
          "summary": "To address this elevation of privilege vulnerability Microsoft has released October 2024 security updates for all affected versions of Windows. Microsoft recommends that customers install the updates to be fully protected from the vulnerability. Customers whose systems are configured to receive automatic updates do not need to take any further action. In addition, depending on the version of Windows you are running, you might need to take additional steps to update Windows Recovery Environment (WinRE) to be protected from this vulnerability. Please refer to the FAQ section for more information."
        },
        {
          "date": "2024-10-15T07:00:00.000Z",
          "legacy_version": "2.1",
          "number": "4",
          "summary": "Executive Summary revised to correct the availability status of security updates which mitigate this vulnerability as they were released October 08, 2024 and are provided in the Security Updates table of this CVE. This is an informational change only."
        }
      ],
      "status": "final",
      "version": "4"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.17763.6414",
            "product": {
              "name": "Windows 10 Version 1809 for 32-bit Systems \u003c10.0.17763.6414",
              "product_id": "19"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.17763.6414",
            "product": {
              "name": "Windows 10 Version 1809 for 32-bit Systems 10.0.17763.6414",
              "product_id": "11568"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 1809 for 32-bit Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.17763.6414",
            "product": {
              "name": "Windows 10 Version 1809 for x64-based Systems \u003c10.0.17763.6414",
              "product_id": "18"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.17763.6414",
            "product": {
              "name": "Windows 10 Version 1809 for x64-based Systems 10.0.17763.6414",
              "product_id": "11569"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 1809 for x64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.17763.6414",
            "product": {
              "name": "Windows Server 2019 \u003c10.0.17763.6414",
              "product_id": "17"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.17763.6414",
            "product": {
              "name": "Windows Server 2019 10.0.17763.6414",
              "product_id": "11571"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2019"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.17763.6414",
            "product": {
              "name": "Windows Server 2019 (Server Core installation) \u003c10.0.17763.6414",
              "product_id": "16"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.17763.6414",
            "product": {
              "name": "Windows Server 2019 (Server Core installation) 10.0.17763.6414",
              "product_id": "11572"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2019 (Server Core installation)"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.20348..2762",
            "product": {
              "name": "Windows Server 2022 \u003c10.0.20348..2762",
              "product_id": "15"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.20348..2762",
            "product": {
              "name": "Windows Server 2022 10.0.20348..2762",
              "product_id": "11923"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2022"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.20348..2762",
            "product": {
              "name": "Windows Server 2022 (Server Core installation) \u003c10.0.20348..2762",
              "product_id": "14"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.20348..2762",
            "product": {
              "name": "Windows Server 2022 (Server Core installation) 10.0.20348..2762",
              "product_id": "11924"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2022 (Server Core installation)"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.22000.3260",
            "product": {
              "name": "Windows 11 version 21H2 for x64-based Systems \u003c10.0.22000.3260",
              "product_id": "13"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.22000.3260",
            "product": {
              "name": "Windows 11 version 21H2 for x64-based Systems 10.0.22000.3260",
              "product_id": "11926"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 11 version 21H2 for x64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.22000.3260",
            "product": {
              "name": "Windows 11 version 21H2 for ARM64-based Systems \u003c10.0.22000.3260",
              "product_id": "12"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.22000.3260",
            "product": {
              "name": "Windows 11 version 21H2 for ARM64-based Systems 10.0.22000.3260",
              "product_id": "11927"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 11 version 21H2 for ARM64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.19044.5011",
            "product": {
              "name": "Windows 10 Version 21H2 for 32-bit Systems \u003c10.0.19044.5011",
              "product_id": "11"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.19044.5011",
            "product": {
              "name": "Windows 10 Version 21H2 for 32-bit Systems 10.0.19044.5011",
              "product_id": "11929"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 21H2 for 32-bit Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.19044.5011",
            "product": {
              "name": "Windows 10 Version 21H2 for ARM64-based Systems \u003c10.0.19044.5011",
              "product_id": "10"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.19044.5011",
            "product": {
              "name": "Windows 10 Version 21H2 for ARM64-based Systems 10.0.19044.5011",
              "product_id": "11930"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 21H2 for ARM64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.19044.5011",
            "product": {
              "name": "Windows 10 Version 21H2 for x64-based Systems \u003c10.0.19044.5011",
              "product_id": "9"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.19044.5011",
            "product": {
              "name": "Windows 10 Version 21H2 for x64-based Systems 10.0.19044.5011",
              "product_id": "11931"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 21H2 for x64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.22621.4317",
            "product": {
              "name": "Windows 11 Version 22H2 for ARM64-based Systems \u003c10.0.22621.4317",
              "product_id": "8"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.22621.4317",
            "product": {
              "name": "Windows 11 Version 22H2 for ARM64-based Systems 10.0.22621.4317",
              "product_id": "12085"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 11 Version 22H2 for ARM64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.22621.4317",
            "product": {
              "name": "Windows 11 Version 22H2 for x64-based Systems \u003c10.0.22621.4317",
              "product_id": "7"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.22621.4317",
            "product": {
              "name": "Windows 11 Version 22H2 for x64-based Systems 10.0.22621.4317",
              "product_id": "12086"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 11 Version 22H2 for x64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.19045.5011",
            "product": {
              "name": "Windows 10 Version 22H2 for x64-based Systems \u003c10.0.19045.5011",
              "product_id": "6"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.19045.5011",
            "product": {
              "name": "Windows 10 Version 22H2 for x64-based Systems 10.0.19045.5011",
              "product_id": "12097"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 22H2 for x64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.19045.5011",
            "product": {
              "name": "Windows 10 Version 22H2 for ARM64-based Systems \u003c10.0.19045.5011",
              "product_id": "5"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.19045.5011",
            "product": {
              "name": "Windows 10 Version 22H2 for ARM64-based Systems 10.0.19045.5011",
              "product_id": "12098"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 22H2 for ARM64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.19045.5011",
            "product": {
              "name": "Windows 10 Version 22H2 for 32-bit Systems \u003c10.0.19045.5011",
              "product_id": "4"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.19045.5011",
            "product": {
              "name": "Windows 10 Version 22H2 for 32-bit Systems 10.0.19045.5011",
              "product_id": "12099"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 22H2 for 32-bit Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.22631.4317",
            "product": {
              "name": "Windows 11 Version 23H2 for ARM64-based Systems \u003c10.0.22631.4317",
              "product_id": "3"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.22631.4317",
            "product": {
              "name": "Windows 11 Version 23H2 for ARM64-based Systems 10.0.22631.4317",
              "product_id": "12242"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 11 Version 23H2 for ARM64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.22631.4317",
            "product": {
              "name": "Windows 11 Version 23H2 for x64-based Systems \u003c10.0.22631.4317",
              "product_id": "2"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.22631.4317",
            "product": {
              "name": "Windows 11 Version 23H2 for x64-based Systems 10.0.22631.4317",
              "product_id": "12243"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 11 Version 23H2 for x64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.25398.1189",
            "product": {
              "name": "Windows Server 2022, 23H2 Edition (Server Core installation) \u003c10.0.25398.1189",
              "product_id": "1"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.25398.1189",
            "product": {
              "name": "Windows Server 2022, 23H2 Edition (Server Core installation) 10.0.25398.1189",
              "product_id": "12244"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2022, 23H2 Edition (Server Core installation)"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.14393.7428",
            "product": {
              "name": "Windows 10 Version 1607 for 32-bit Systems \u003c10.0.14393.7428",
              "product_id": "22"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.14393.7428",
            "product": {
              "name": "Windows 10 Version 1607 for 32-bit Systems 10.0.14393.7428",
              "product_id": "10852"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 1607 for 32-bit Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.14393.7428",
            "product": {
              "name": "Windows 10 Version 1607 for x64-based Systems \u003c10.0.14393.7428",
              "product_id": "21"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.14393.7428",
            "product": {
              "name": "Windows 10 Version 1607 for x64-based Systems 10.0.14393.7428",
              "product_id": "10853"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 1607 for x64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.14393.7428",
            "product": {
              "name": "Windows Server 2016 \u003c10.0.14393.7428",
              "product_id": "23"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.14393.7428",
            "product": {
              "name": "Windows Server 2016 10.0.14393.7428",
              "product_id": "10816"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2016"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.14393.7428",
            "product": {
              "name": "Windows Server 2016 (Server Core installation) \u003c10.0.14393.7428",
              "product_id": "20"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.14393.7428",
            "product": {
              "name": "Windows Server 2016 (Server Core installation) 10.0.14393.7428",
              "product_id": "10855"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2016 (Server Core installation)"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-38202",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "notes": [
        {
          "category": "general",
          "text": "Microsoft",
          "title": "Assigning CNA"
        },
        {
          "category": "faq",
          "text": "The attacker must have permissions to access the target\u0027s System directory to plant the malicious folder that would be used as part of the exploitation.",
          "title": "According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?"
        },
        {
          "category": "faq",
          "text": "Depending on the version of Windows you are running, you might need to take additional steps to update Windows Recovery Environment (WinRE) to be protected from this vulnerability.\nFor the latest version of Windows the process of updating WinRE is now fully automated.  The following versions of Windows require no additional steps as WinRE will be updated as a part of the Latest Cumulative Update if you are getting updates from Windows Update and WSUS:\nWindows 11 Version 23H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 22H2 for x64-based Systems, Windows 11 Version 22H2 for ARM64-based Systems\nFor the following versions of Windows, the WinRE updates listed are available. These updates automatically apply the latest Safe OS Dynamic Update to WinRE from the running Windows OS:\nWindows Server 2022 (Server Core installation) (KB5046399: Windows Recovery Environment update for Azure Stack HCI, version 22H2 and Windows Server 2022: October 8, 2024), Windows Server 2022 (KB5046399: Windows Recovery Environment update for Azure Stack HCI, version 22H2 and Windows Server 2022: October 8, 2024), Windows Server 2022, 23H2 Edition (Server Core installation) (KB5046399: Windows Recovery Environment update for Azure Stack HCI, version 22H2 and Windows Server 2022: October 8, 2024), Windows 11 version 21H2 for x64-based Systems (KB5046398: Windows Recovery Environment update for Windows 11, version 21H2: October 8, 2024), Windows 10 Version 22H2 for x64-based Systems (KB5046400: Windows Recovery Environment update for Windows 10, version 21H2 and 22H2: October 8, 2024), Windows 10 Version 22H2 for 32-bit Systems (KB5046400: Windows Recovery Environment update for Windows 10, version 21H2 and 22H2: October 8, 2024), Windows 10 Version 21H2 for x64-based Systems (KB5046400: Windows Recovery Environment update for Windows 10, version 21H2 and 22H2: October 8, 2024), Windows 10 Version 21H2 for 32-bit Systems (KB5046400: Windows Recovery Environment update for Windows 10, version 21H2 and 22H2: October 8, 2024)\nAs an alternative to updates provided in the preceding list or if your version of Windows is not listed, you can download the latest Windows Safe OS Dynamic Update from the Microsoft Update Catalog then apply the WinRE update. For more information reference\u202fAdd an update package to Windows RE. To automate your installation, Microsoft has developed a sample script that can help with updating WinRE from the running Windows OS. Please see KB5034957: Updating the WinRE partition on deployed devices to address security vulnerabilities in CVE-2024-20666 for more information.\nUse DISM /Get-Packages on a mounted WinRE image to ensure the latest Safe OS Dynamic Update package is present. For more information, see Check the WinRE image version.",
          "title": "Are there additional steps that I need to take to be protected from this vulnerability?"
        },
        {
          "category": "faq",
          "text": "An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.",
          "title": "What privileges could be gained by an attacker who successfully exploited this vulnerability?"
        },
        {
          "category": "faq",
          "text": "To successfully exploit this vulnerability, an attacker must convince or trick an administrative user into performing a system restore.",
          "title": "According to the CVSS metric, user interaction is required (UI:R). What does that mean for this vulnerability?"
        }
      ],
      "product_status": {
        "fixed": [
          "10816",
          "10852",
          "10853",
          "10855",
          "11568",
          "11569",
          "11571",
          "11572",
          "11923",
          "11924",
          "11926",
          "11927",
          "11929",
          "11930",
          "11931",
          "12085",
          "12086",
          "12097",
          "12098",
          "12099",
          "12242",
          "12243",
          "12244"
        ],
        "known_affected": [
          "1",
          "2",
          "3",
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11",
          "12",
          "13",
          "14",
          "15",
          "16",
          "17",
          "18",
          "19",
          "20",
          "21",
          "22",
          "23"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-38202 Windows Update Stack Elevation of Privilege Vulnerability - HTML",
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38202"
        },
        {
          "category": "self",
          "summary": "CVE-2024-38202 Windows Update Stack Elevation of Privilege Vulnerability - CSAF",
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38202"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-08-07T07:00:00.000Z",
          "details": "10.0.17763.6414:Security Update:https://support.microsoft.com/help/5044277",
          "product_ids": [
            "19",
            "18",
            "17",
            "16"
          ],
          "url": "https://support.microsoft.com/help/5044277"
        },
        {
          "category": "vendor_fix",
          "date": "2024-08-07T07:00:00.000Z",
          "details": "10.0.20348..2762:Security Update:https://support.microsoft.com/help/5044281",
          "product_ids": [
            "15",
            "14"
          ],
          "url": "https://support.microsoft.com/help/5044281"
        },
        {
          "category": "vendor_fix",
          "date": "2024-08-07T07:00:00.000Z",
          "details": "10.0.22000.3260:Security Update:https://support.microsoft.com/help/5044280",
          "product_ids": [
            "13",
            "12"
          ],
          "url": "https://support.microsoft.com/help/5044280"
        },
        {
          "category": "vendor_fix",
          "date": "2024-08-07T07:00:00.000Z",
          "details": "10.0.19044.5011:Security Update:https://support.microsoft.com/help/5044273",
          "product_ids": [
            "11",
            "10",
            "9"
          ],
          "url": "https://support.microsoft.com/help/5044273"
        },
        {
          "category": "vendor_fix",
          "date": "2024-08-07T07:00:00.000Z",
          "details": "10.0.22621.4317:Security Update:https://support.microsoft.com/help/5044285",
          "product_ids": [
            "8",
            "7"
          ],
          "url": "https://support.microsoft.com/help/5044285"
        },
        {
          "category": "vendor_fix",
          "date": "2024-08-07T07:00:00.000Z",
          "details": "10.0.19045.5011:Security Update:https://support.microsoft.com/help/5044273",
          "product_ids": [
            "6",
            "5",
            "4"
          ],
          "url": "https://support.microsoft.com/help/5044273"
        },
        {
          "category": "vendor_fix",
          "date": "2024-08-07T07:00:00.000Z",
          "details": "10.0.22631.4317:Security Update:https://support.microsoft.com/help/5044285",
          "product_ids": [
            "3",
            "2"
          ],
          "url": "https://support.microsoft.com/help/5044285"
        },
        {
          "category": "vendor_fix",
          "date": "2024-08-07T07:00:00.000Z",
          "details": "10.0.25398.1189:Security Update:https://support.microsoft.com/help/5044288",
          "product_ids": [
            "1"
          ],
          "url": "https://support.microsoft.com/help/5044288"
        },
        {
          "category": "vendor_fix",
          "date": "2024-08-07T07:00:00.000Z",
          "details": "10.0.14393.7428:Security Update:https://support.microsoft.com/help/5044293",
          "product_ids": [
            "22",
            "21",
            "23",
            "20"
          ],
          "url": "https://support.microsoft.com/help/5044293"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalsScore": 0.0,
            "exploitCodeMaturity": "PROOF_OF_CONCEPT",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "remediationLevel": "UNAVAILABLE",
            "reportConfidence": "CONFIRMED",
            "scope": "UNCHANGED",
            "temporalScore": 6.9,
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "3",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "12",
            "13",
            "14",
            "15",
            "16",
            "17",
            "18",
            "19",
            "20",
            "21",
            "22",
            "23"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Elevation of Privilege"
        },
        {
          "category": "exploit_status",
          "details": "Exploited:No;Latest Software Release:Exploitation Less Likely"
        }
      ],
      "title": "Windows Update Stack Elevation of Privilege Vulnerability"
    }
  ]
}

cve-2024-38202

Vulnerability from cvelistv5

Published

2024-08-08 01:59

Modified

2025-01-23 01:25

Severity ?

7.3 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C

Summary

Summary Microsoft was notified that an elevation of privilege vulnerability exists in Windows Update, potentially enabling an attacker with basic user privileges to reintroduce previously mitigated vulnerabilities or circumvent some features of Virtualization Based Security (VBS). However, an attacker attempting to exploit this vulnerability requires additional interaction by a privileged user to be successful. Microsoft has developed a security update to mitigate this threat which was made available October 08, 2024 and is provided in the Security Updates table of this CVE for customers to download. Note: Depending on your version of Windows, additional steps may be required to update Windows Recovery Environment (WinRE) to be protected from this vulnerability. Please refer to the FAQ section for more information. Guidance for customers who cannot immediately implement the update is provided in the Recommended Actions section of this CVE to help reduce the risks associated with this vulnerability and to protect their systems. If there are any further updates regarding mitigations for this vulnerability, this CVE will be updated and customers will be notified. We highly encourage customers to subscribe to Security Update Guide notifications to receive an alert if an update occurs. Details A security researcher informed Microsoft of an elevation of privilege vulnerability in Windows Update potentially enabling an attacker with basic user privileges to reintroduce previously mitigated vulnerabilities or circumvent some features of VBS. For exploitation to succeed, an attacker must trick or convince an Administrator or a user with delegated permissions into performing a system restore which inadvertently triggers the vulnerability. Microsoft has developed a security update to mitigate this threat which was made available October 08, 2024 and is provided in the Security Updates table of this CVE for customers to download. Note: Depending on your version of Windows, additional steps may be required to update Windows Recovery Environment (WinRE) to be protected from this vulnerability. Please refer to the FAQ section for more information. Guidance for customers who cannot immediately implement the update is provided in the Recommended Actions section of this CVE to help reduce the risks associated with this vulnerability and to protect their systems. If there are any further... See more at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38202

References

▼	URL	Tags
	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38202	vendor-advisory

Impacted products

Vendor

Product

Version

▼

Microsoft

Windows 10 Version 1809

Version: 10.0.17763.0 < 10.0.17763.6414

Microsoft	Windows Server 2019	Version: 10.0.17763.0 < 10.0.17763.6414
Microsoft	Windows Server 2019 (Server Core installation)	Version: 10.0.17763.0 < 10.0.17763.6414
Microsoft	Windows Server 2022	Version: 10.0.20348.0 < 10.0.20348.2762
Microsoft	Windows 11 version 21H2	Version: 10.0.0 < 10.0.22000.3260
Microsoft	Windows 10 Version 21H2	Version: 10.0.19043.0 < 10.0.19044.5011
Microsoft	Windows 11 version 22H2	Version: 10.0.22621.0 < 10.0.22621.4317
Microsoft	Windows 10 Version 22H2	Version: 10.0.19045.0 < 10.0.19045.5011
Microsoft	Windows 11 version 22H3	Version: 10.0.22631.0 < 10.0.22631.4317
Microsoft	Windows 11 Version 23H2	Version: 10.0.22631.0 < 10.0.22631.4317
Microsoft	Windows Server 2022, 23H2 Edition (Server Core installation)	Version: 10.0.25398.0 < 10.0.25398.1189
Microsoft	Windows 10 Version 1607	Version: 10.0.14393.0 < 10.0.14393.7428
Microsoft	Windows Server 2016	Version: 10.0.14393.0 < 10.0.14393.7428
Microsoft	Windows Server 2016 (Server Core installation)	Version: 10.0.14393.0 < 10.0.14393.7428

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-38202",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-09T03:55:42.933240Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-09T12:37:35.618Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 1809",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.6414",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2019",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.6414",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2019 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.6414",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2022",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.20348.2762",
              "status": "affected",
              "version": "10.0.20348.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems",
            "ARM64-based Systems"
          ],
          "product": "Windows 11 version 21H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.22000.3260",
              "status": "affected",
              "version": "10.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 21H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.19044.5011",
              "status": "affected",
              "version": "10.0.19043.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 11 version 22H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.22621.4317",
              "status": "affected",
              "version": "10.0.22621.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems",
            "ARM64-based Systems",
            "32-bit Systems"
          ],
          "product": "Windows 10 Version 22H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.19045.5011",
              "status": "affected",
              "version": "10.0.19045.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "ARM64-based Systems"
          ],
          "product": "Windows 11 version 22H3",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.22631.4317",
              "status": "affected",
              "version": "10.0.22631.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows 11 Version 23H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.22631.4317",
              "status": "affected",
              "version": "10.0.22631.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2022, 23H2 Edition (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.25398.1189",
              "status": "affected",
              "version": "10.0.25398.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 1607",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.7428",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2016",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.7428",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2016 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.7428",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.17763.6414",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.17763.6414",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.17763.6414",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.20348.2762",
                  "versionStartIncluding": "10.0.20348.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_21H2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "10.0.22000.3260",
                  "versionStartIncluding": "10.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.19044.5011",
                  "versionStartIncluding": "10.0.19043.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_22H2:*:*:*:*:*:*:arm64:*",
                  "versionEndExcluding": "10.0.22621.4317",
                  "versionStartIncluding": "10.0.22621.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "10.0.19045.5011",
                  "versionStartIncluding": "10.0.19045.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*",
                  "versionEndExcluding": "10.0.22631.4317",
                  "versionStartIncluding": "10.0.22631.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "10.0.22631.4317",
                  "versionStartIncluding": "10.0.22631.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_23h2:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.25398.1189",
                  "versionStartIncluding": "10.0.25398.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.14393.7428",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.14393.7428",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.14393.7428",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2024-08-07T07:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Summary\nMicrosoft was notified that an elevation of privilege vulnerability exists in Windows Update, potentially enabling an attacker with basic user privileges to reintroduce previously mitigated vulnerabilities or circumvent some features of Virtualization Based Security (VBS). However, an attacker attempting to exploit this vulnerability requires additional interaction by a privileged user to be successful.\nMicrosoft has developed a security update to mitigate this threat which was made available October 08, 2024 and is provided in the Security Updates table of this CVE for customers to download. Note: Depending on your version of Windows, additional steps may be required to update Windows Recovery Environment (WinRE) to be protected from this vulnerability. Please refer to the FAQ section for more information. Guidance for customers who cannot immediately implement the update is provided in the Recommended Actions section of this CVE to help reduce the risks associated with this vulnerability and to protect their systems.\nIf there are any further updates regarding mitigations for this vulnerability, this CVE will be updated and customers will be notified. We highly encourage customers to subscribe to Security Update Guide notifications to receive an alert if an update occurs.\nDetails\nA security researcher informed Microsoft of an elevation of privilege vulnerability in Windows Update potentially enabling an attacker with basic user privileges to reintroduce previously mitigated vulnerabilities or circumvent some features of VBS. For exploitation to succeed, an attacker must trick or convince an Administrator or a user with delegated permissions into performing a system restore which inadvertently triggers the vulnerability.\nMicrosoft has developed a security update to mitigate this threat which was made available October 08, 2024 and is provided in the Security Updates table of this CVE for customers to download. Note: Depending on your version of Windows, additional steps may be required to update Windows Recovery Environment (WinRE) to be protected from this vulnerability. Please refer to the FAQ section for more information. Guidance for customers who cannot immediately implement the update is provided in the Recommended Actions section of this CVE to help reduce the risks associated with this vulnerability and to protect their systems.\nIf there are any further... See more at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38202"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-284",
              "description": "CWE-284: Improper Access Control",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-01-23T01:25:38.932Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Windows Update Stack Elevation of Privilege Vulnerability",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38202"
        }
      ],
      "title": "Windows Update Stack Elevation of Privilege Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2024-38202",
    "datePublished": "2024-08-08T01:59:34.177Z",
    "dateReserved": "2024-06-11T22:36:08.221Z",
    "dateUpdated": "2025-01-23T01:25:38.932Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted