Vulnerabilities > CVE-2024-43552 - Unspecified vulnerability in Microsoft products

CVSS 7.3 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

NVD

Published: 2024-10-08

Updated: 2024-10-17

Summary

Windows Shell Remote Code Execution Vulnerability

Vulnerable Configurations

Part	Description	Count
OS	Microsoft Microsoft Windows Server 2022 23H2 - Microsoft Windows Server 2022 23H2 10.0.25398.521 Microsoft Windows Server 2022 23H2 10.0.25398.531 Microsoft Windows Server 2022 23H2 10.0.25398.584 Microsoft Windows Server 2022 23H2 10.0.25398.643 Microsoft Windows Server 2022 23H2 10.0.25398.709 Microsoft Windows 11 22H2 - Microsoft Windows 11 22H2 10.0.22000.1702 Microsoft Windows 11 22H2 10.0.22621.521 Microsoft Windows 11 22H2 10.0.22621.525 Microsoft Windows 11 22H2 10.0.22621.608 Microsoft Windows 11 22H2 10.0.22621.674 Microsoft Windows 11 22H2 10.0.22621.675 Microsoft Windows 11 22H2 10.0.22621.755 Microsoft Windows 11 22H2 10.0.22621.819 Microsoft Windows 11 22H2 10.0.22621.900 Microsoft Windows 11 22H2 10.0.22621.1413 Microsoft Windows 11 22H2 10.0.22621.1485 Microsoft Windows 11 22H2 10.0.22621.1555 Microsoft Windows 11 22H2 10.0.22621.1635 Microsoft Windows 11 22H2 10.0.22621.1992 Microsoft Windows 11 22H2 10.0.22621.2070 Microsoft Windows 11 22H2 10.0.22621.2215 Microsoft Windows 11 22H2 10.0.22621.2275 Microsoft Windows 11 22H2 10.0.22621.2283 Microsoft Windows 11 22H2 10.0.22621.2361 Microsoft Windows 11 22H2 10.0.22621.2428 Microsoft Windows 11 23H2 - Microsoft Windows 11 23H2 10.0.22631.2428 Microsoft Windows 11 23H2 10.0.22631.2506 Microsoft Windows 11 23H2 10.0.22631.2715 Microsoft Windows 11 23H2 10.0.22631.2861 Microsoft Windows 11 23H2 10.0.22631.3007 Microsoft Windows 11 24H2 *	54

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43552

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.