Lucene search

K
nvd[email protected]NVD:CVE-2024-38217
HistorySep 10, 2024 - 5:15 p.m.

CVE-2024-38217

2024-09-1017:15:24
CWE-693
web.nvd.nist.gov
10
cve-2024-38217
windows
mark of the web
security
feature bypass
vulnerability

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

EPSS

0.003

Percentile

68.3%

Windows Mark of the Web Security Feature Bypass Vulnerability

Affected configurations

Nvd
Node
microsoftwindows_10_1507Range<10.0.10240.20766x64
OR
microsoftwindows_10_1507Range<10.0.10240.20766x86
OR
microsoftwindows_10_1607Range<10.0.14393.7336x64
OR
microsoftwindows_10_1607Range<10.0.14393.7336x86
OR
microsoftwindows_10_1809Range<10.0.17763.6293
OR
microsoftwindows_10_21h2Range<10.0.19044.4894
OR
microsoftwindows_10_22h2Range<10.0.19045.4894
OR
microsoftwindows_11_21h2Range<10.0.22000.3197
OR
microsoftwindows_11_22h2Range<10.0.22621.4169
OR
microsoftwindows_11_23h2Range<10.0.22631.4169
OR
microsoftwindows_11_24h2Range<10.0.26100.1742arm64
OR
microsoftwindows_11_24h2Range<10.0.26100.1742x64
OR
microsoftwindows_server_2008Match-sp2x64
OR
microsoftwindows_server_2008Match-sp2x86
OR
microsoftwindows_server_2008Matchr2x64
OR
microsoftwindows_server_2012Match-x64
OR
microsoftwindows_server_2012Matchr2x64
OR
microsoftwindows_server_2016Range<10.0.14393.7336
OR
microsoftwindows_server_2019Range<10.0.17763.6293
OR
microsoftwindows_server_2022Range<10.0.20348.2700
OR
microsoftwindows_server_2022_23h2Range<10.0.25398.1128
VendorProductVersionCPE
microsoftwindows_10_1507*cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*
microsoftwindows_10_1507*cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*
microsoftwindows_10_1607*cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*
microsoftwindows_10_1607*cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*
microsoftwindows_10_1809*cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*
microsoftwindows_10_21h2*cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*
microsoftwindows_10_22h2*cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*
microsoftwindows_11_21h2*cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*
microsoftwindows_11_22h2*cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*
microsoftwindows_11_23h2*cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*
Rows per page:
1-10 of 211

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

EPSS

0.003

Percentile

68.3%