Lucene search

K
mscveMicrosoftMS:CVE-2024-21431
HistoryMar 12, 2024 - 7:00 a.m.

Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability

2024-03-1207:00:00
Microsoft
msrc.microsoft.com
20
hypervisor-protected code integrity
security feature
bypass vulnerability
microsoft

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

Low

EPSS

0

Percentile

9.0%

Affected configurations

Vulners
Node
microsoftwindows_server_23h2Range<10.0.25398.763
OR
microsoftwindows_11_23h2Range<10.0.22631.3296
OR
microsoftwindows_11_23h2Range<10.0.22631.3296
OR
microsoftwindows_10_22h2Range<10.0.19045.4170
OR
microsoftwindows_10_22h2Range<10.0.19045.4170
OR
microsoftwindows_10_22h2Range<10.0.19045.4170
OR
microsoftwindows_11_22h2Range<10.0.22621.3296
OR
microsoftwindows_11_22h2Range<10.0.22621.3296
OR
microsoftwindows_10_21h2Range<10.0.19044.4170
OR
microsoftwindows_10_21h2Range<10.0.19044.4170
OR
microsoftwindows_10_21h2Range<10.0.19044.4170
OR
microsoftwindows_11_21h2Range<10.0.22000.2836
OR
microsoftwindows_11_21h2Range<10.0.22000.2836
OR
microsoftwindows_server_2022Range<10.0.20348.2340
OR
microsoftwindows_server_2022Range<10.0.20348.2333
OR
microsoftwindows_server_2022Range<10.0.20348.2340
OR
microsoftwindows_server_2022Range<10.0.20348.2333
VendorProductVersionCPE
microsoftwindows_server_23h2*cpe:2.3:o:microsoft:windows_server_23h2:*:*:*:*:*:*:*:*
microsoftwindows_11_23h2*cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*
microsoftwindows_10_22h2*cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*
microsoftwindows_11_22h2*cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*
microsoftwindows_10_21h2*cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*
microsoftwindows_11_21h2*cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*
microsoftwindows_server_2022*cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

Low

EPSS

0

Percentile

9.0%