Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

CVE-2024-38196

🗓️ 13 Aug 2024 17:29:53Reported by microsoftType 
cve
 cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 157 Views

Windows Common Log File System Driver Elevation of Privilege Vulnerabilit

Related
Detection
Affected
Refs
Social
ReporterTitlePublishedViews
Family
bdu_fstec
BDU FSTEC		The vulnerability of the driver for the common file system of Windows operating systems allows attackers to escalate their privileges.
23 Aug 202400:00
–bdu_fstec
circl
Circl		CVE-2024-38196
13 Aug 202418:05
–circl
cnnvd
CNNVD		Microsoft Windows Common Log File System Driver 输入验证错误漏洞
13 Aug 202400:00
–cnnvd
cvelist
Cvelist		CVE-2024-38196 Windows Common Log File System Driver Elevation of Privilege Vulnerability
13 Aug 202417:29
–cvelist
euvd
EUVD		EUVD-2024-37164
3 Oct 202520:07
–euvd
mskb
Microsoft KB		August 13, 2024—KB5041160 (OS Build 20348.2655)
13 Aug 202407:00
–mskb
mskb
Microsoft KB		August 13, 2024—KB5041571 (OS Build 26100.1457)
13 Aug 202407:00
–mskb
mskb
Microsoft KB		August 13, 2024—KB5041573 (OS Build 25398.1085)
13 Aug 202407:00
–mskb
mskb
Microsoft KB		August 13, 2024—KB5041578 (OS Build 17763.6189) - EXPIRED
13 Aug 202407:00
–mskb
mskb
Microsoft KB		August 13, 2024—KB5041585 (OS Builds 22621.4037 and 22631.4037)
13 Aug 202407:00
–mskb
Rows per page
NVD
Vulners
CNA
Node
OR
microsoftwindows_10_1507Range<10.0.10240.20751
microsoftwindows_10_1607Range<10.0.14393.7259
microsoftwindows_10_1809Range<10.0.17763.6189
microsoftwindows_10_21h2Range<10.0.19044.4780
microsoftwindows_10_22h2Range<10.0.19045.4780
microsoftwindows_11_21h2Range<10.0.22000.3147
microsoftwindows_11_22h2Range<10.0.22621.4037
microsoftwindows_11_23h2Range<10.0.22631.4037
microsoftwindows_11_24h2Range<10.0.26100.1457
microsoftwindows_server_2008Match-sp2
microsoftwindows_server_2008Matchr2sp1x64
microsoftwindows_server_2012Range<6.2.9200.25031
microsoftwindows_server_2012Matchr2
microsoftwindows_server_2016Range<10.0.14393.7259
microsoftwindows_server_2019Range<10.0.17763.6189
microsoftwindows_server_2022Range<10.0.20348.2655
microsoftwindows_server_2022_23h2Range<10.0.25398.1085
[
  {
    "vendor": "Microsoft",
    "product": "Windows 11 Version 24H2",
    "platforms": [
      "ARM64-based Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.26100.0",
        "lessThan": "10.0.26100.1457",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 1809",
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.17763.0",
        "lessThan": "10.0.17763.6189",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2019",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.17763.0",
        "lessThan": "10.0.17763.6189",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2019 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.17763.0",
        "lessThan": "10.0.17763.6189",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2022",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.20348.0",
        "lessThan": "10.0.20348.2655",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 11 version 21H2",
    "platforms": [
      "x64-based Systems",
      "ARM64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.0",
        "lessThan": "10.0.22000.3147",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 21H2",
    "platforms": [
      "32-bit Systems",
      "ARM64-based Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.19043.0",
        "lessThan": "10.0.19044.4780",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 11 version 22H2",
    "platforms": [
      "ARM64-based Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.22621.0",
        "lessThan": "10.0.22621.4037",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 22H2",
    "platforms": [
      "x64-based Systems",
      "ARM64-based Systems",
      "32-bit Systems"
    ],
    "versions": [
      {
        "version": "10.0.19045.0",
        "lessThan": "10.0.19045.4780",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 11 version 22H3",
    "platforms": [
      "ARM64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.22631.0",
        "lessThan": "10.0.22631.4037",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 11 Version 23H2",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.22631.0",
        "lessThan": "10.0.22631.4037",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2022, 23H2 Edition (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.25398.0",
        "lessThan": "10.0.25398.1085",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 1507",
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.10240.0",
        "lessThan": "10.0.10240.20751",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 1607",
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.14393.0",
        "lessThan": "10.0.14393.7259",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2016",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.14393.0",
        "lessThan": "10.0.14393.7259",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2016 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.14393.0",
        "lessThan": "10.0.14393.7259",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2008 Service Pack 2",
    "platforms": [
      "32-bit Systems"
    ],
    "versions": [
      {
        "version": "6.0.6003.0",
        "lessThan": "6.0.6003.22825",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2008 Service Pack 2 (Server Core installation)",
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.0.6003.0",
        "lessThan": "6.0.6003.22825",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2008  Service Pack 2",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.0.6003.0",
        "lessThan": "6.0.6003.22825",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2008 R2 Service Pack 1",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.1.7601.0",
        "lessThan": "6.1.7601.27277",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.1.7601.0",
        "lessThan": "6.1.7601.27277",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.2.9200.0",
        "lessThan": "6.2.9200.25031",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.2.9200.0",
        "lessThan": "6.2.9200.25031",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012 R2",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.3.9600.0",
        "lessThan": "6.3.9600.22134",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012 R2 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.3.9600.0",
        "lessThan": "6.3.9600.22134",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

crstux

🔥Top10TrendingCVEs(05/08/2025)

MalwarePatrol

#RaspberryRobin #malware has improved its hiding methods, now uses Chacha-20 for network encryption, and includes a new local privilege escalation exploit (CVE-2024-38196). It also embeds fake C2 server addresses. #ThreatIntelligence #onpatrol4malware

rst_cloud

#threatreport #LowCompleteness Tracking Updates to Raspberry Robin | 04-08-2025 Source: https://t.co/v410tq1lBd Key details below ↓ Actors/Campaigns: Raspberry_robin Threats: Raspberry_robin, CVEs: CVE-2024-38196 \[[Vulners](https://t.co/Vz6MoTcWwL)] - CVSS V3.1: *7.8*, - Vulners: Exploitation: Unknown Soft: - microsoft windows_10_1507 (<10.0.10240.20751) - microsoft windows_10_1607 (<10.0.14393.7259) - microsoft windows_10_1809 (<10.0.17763.6189) - microsoft windows_10_21h2 (<10.0.19044.4780) ... LLM extracted TTPs:` T1001, T1027, T1059, T1068, T1071.001, T1090.003, T1204, T1497.001, T1564.001 IOCs: - File: 1 - Hash: 2 Algorithms: aes, chacha20, crc-64, rc4, aes-ctr Programming Languages: python #threatreport: Raspberry Robin, also known as Roshtyak, is a sophisticated downloader that has been active since 2021, primarily propagating through compromised USB devices. Continued efforts to evolve its capabilities have led to new obfuscation techniques and the adoption of a more advanced encryption method. Recent updates reveal a transition from AES-CTR to the ChaCha-20 encryption algorithm for securing network communications. This shift improves security by using a hardcoded 32-byte encryption key, with randomly generated counter and nonce values for each request, complicating decryption for potential adversaries. The malware has also integrated a new local privilege escalation exploit, CVE-2024-38196, which allows it to gain elevated privileges on targeted systems, posing an increased risk to security. Additionally, Raspberry Robin employs invalid TOR onion domains within its command-and-control (C2) infrastructure, utilizing a hardcoded algorithm to dynamically rectify these corrupted domains. This adjustment aims to obfuscate detection measures and make it more challenging for analysts to extract Indicators of Compromise (IOCs). The malware's obfuscation strategies have seen significant advancements. Recent modifications include embedding obfuscated stack pointers that hinder analysis with tools like IDA, resulting in decompilation failures that require manual resolution. Conditional statements within the malware’s code are also obfuscated, complicating the logic analysis during reverse engineering. While the encryption of network data primarily remains consistent, variations in the initial values of the CRC-64 algorithm, which is still utilized, add another layer of complexity by randomizing these values per sample and campaign. Raspberry Robin further complicates detection and reverse-engineering by introducing expiration dates within its binary code, restricting the execution of each sample to a one-week period. This constant evolution underscores Raspberry Robin's persistent threat profile, as it incorporates updated obfuscation techniques, advanced encryption methods, and tactical maneuvers to avoid detection. Despite its relatively low publicized presence compared to other malware families, continued enhancements solidify its status as a significant concern for cybersecurity teams.

jq0904

Another ITW Windows CLFS nday exploit, patched on 2024.08, maybe CVE-2024-38196? https://t.co/FZZTKZJgL7

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
17 Jun 2026 07:39Current
7.7High risk
Vulners AI Score7.7
CVSS 3.17.8
EPSS0.05722
SSVC
CWE-20In Wild
windowslog fileelevation of privilegevulnerabilitycve-2024-38196
157