Lucene search
HistoryJan 09, 2024 - 6:15 p.m.
CVE-2024-20653
microsoft; log file system; elevation of privilege; vulnerability; 2024
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.1 High
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.8%
Microsoft Common Log File System Elevation of Privilege Vulnerability
Affected configurations
Node
microsoftwindows_10_1507Range<10.0.10240.20402x64
ORmicrosoftwindows_10_1507Range<10.0.10240.20402x86
ORmicrosoftwindows_10_1607Range<10.0.14393.6614x64
ORmicrosoftwindows_10_1607Range<10.0.14393.6614x86
ORmicrosoftwindows_10_1809Range<10.0.17763.5329arm64
ORmicrosoftwindows_10_1809Range<10.0.17763.5329x64
ORmicrosoftwindows_10_1809Range<10.0.17763.5329x86
ORmicrosoftwindows_10_21h2Range<10.0.19044.3930arm64
ORmicrosoftwindows_10_21h2Range<10.0.19044.3930x64
ORmicrosoftwindows_10_21h2Range<10.0.19044.3930x86
ORmicrosoftwindows_10_22h2Range<10.0.19045.3930arm64
ORmicrosoftwindows_10_22h2Range<10.0.19045.3930x64
ORmicrosoftwindows_10_22h2Range<10.0.19045.3930x86
ORmicrosoftwindows_11_21h2Range<10.0.22000.2713arm64
ORmicrosoftwindows_11_21h2Range<10.0.22000.2713x64
ORmicrosoftwindows_11_22h2Range<10.0.22621.3007arm64
ORmicrosoftwindows_11_22h2Range<10.0.22621.3007x64
ORmicrosoftwindows_11_23h2Range<10.0.22631.3007arm64
ORmicrosoftwindows_11_23h2Range<10.0.22631.3007x64
ORmicrosoftwindows_server_2008Match-sp2x64
ORmicrosoftwindows_server_2008Match-sp2x86
ORmicrosoftwindows_server_2012Match-
ORmicrosoftwindows_server_2012Matchr2
ORmicrosoftwindows_server_2016Match-
ORmicrosoftwindows_server_2019Match-
ORmicrosoftwindows_server_2022Match-
Related
prion
prion
Privilege escalation
2024-01-09 18:15:00
cvelist
cvelist
mscve
mscve
Microsoft Common Log File System Elevation of Privilege Vulnerability
2024-01-09 08:00:00
cnvd
cnvd
Microsoft Common Log File System Elevation of Privilege Vulnerability
2024-01-12 00:00:00
cve
cve
CVE-2024-20653
2024-01-09 18:15:47
thn
thn
Microsoft's January 2024 Windows Update Patches 48 New Vulnerabilities
2024-01-10 05:26:00
qualysblog
qualysblog
Microsoft and Adobe Patch Tuesday, January 2024 Security Update Review
2024-01-09 20:39:49
nessus
nessus
KB5034176: Windows Server 2008 Security Update (January 2024)
2024-01-09 00:00:00
KB5034167: Windows Server 2008 R2 Security Update (January 2024)
2024-01-09 00:00:00
KB5034184: Windows Server 2012 Security Update (January 2024)
2024-01-09 00:00:00
mskb
mskb
January 9, 2024âKB5034176 (Security-only update)
2024-01-09 08:00:00
January 9, 2024âKB5034173 (Monthly Rollup)
2024-01-09 08:00:00
January 9, 2024âKB5034169 (Monthly Rollup)
2024-01-09 08:00:00
kaspersky
kaspersky
KLA62824 Multiple vulnerabilities in Microsoft Products (ESU)
2024-01-09 00:00:00
KLA62827 Multiple vulnerabilities in Microsoft Windows
2024-01-09 00:00:00
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB5034134)
2024-01-10 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5034119)
2024-01-10 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5034121)
2024-01-10 00:00:00
rapid7blog
rapid7blog
Patch Tuesday - January 2024
2024-01-09 21:23:10
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.1 High
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.8%
Related for NVD:CVE-2024-20653