Lucene search

K
mscveMicrosoftMS:CVE-2024-26172
HistoryApr 09, 2024 - 7:00 a.m.

Windows DWM Core Library Information Disclosure Vulnerability

2024-04-0907:00:00
Microsoft
msrc.microsoft.com
12
microsoft
vulnerability
windows

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

7.3

Confidence

Low

EPSS

0

Percentile

9.0%

Affected configurations

Vulners
Node
microsoftwindows_10_1809Range<10.0.17763.5696
OR
microsoftwindows_10_1809Range<10.0.17763.5696
OR
microsoftwindows_10_1809Range<10.0.17763.5696
OR
microsoftwindows_server_2019Range<10.0.17763.5696
OR
microsoftwindows_server_2019Range<10.0.17763.5696
OR
microsoftwindows_10_22h2Range<10.0.19045.4291
OR
microsoftwindows_11_22h2Range<10.0.22621.3447
OR
microsoftwindows_11_22h2Range<10.0.22621.3447
OR
microsoftwindows_10_21h2Range<10.0.19044.4291
OR
microsoftwindows_10_21h2Range<10.0.19044.4291
OR
microsoftwindows_10_21h2Range<10.0.19044.4291
OR
microsoftwindows_11_21h2Range<10.0.22000.2899
OR
microsoftwindows_11_21h2Range<10.0.22000.2899
OR
microsoftwindows_server_2022Range<10.0.20348.2402
OR
microsoftwindows_server_2022Range<10.0.20348.2402
OR
microsoftwindows_server_23h2Range<10.0.25398.830
OR
microsoftwindows_11_23h2Range<10.0.22631.3447
OR
microsoftwindows_11_23h2Range<10.0.22631.3447
OR
microsoftwindows_10_22h2Range<10.0.19045.4291
OR
microsoftwindows_10_22h2Range<10.0.19045.4291
VendorProductVersionCPE
microsoftwindows_10_1809*cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*
microsoftwindows_server_2019*cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
microsoftwindows_10_22h2*cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*
microsoftwindows_11_22h2*cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*
microsoftwindows_10_21h2*cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*
microsoftwindows_11_21h2*cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*
microsoftwindows_server_2022*cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*
microsoftwindows_server_23h2*cpe:2.3:o:microsoft:windows_server_23h2:*:*:*:*:*:*:*:*
microsoftwindows_11_23h2*cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

7.3

Confidence

Low

EPSS

0

Percentile

9.0%