CVE-2024-38257

Опубликовано: 10 сент. 2024

Источник: msrc

CVSS3: 7.5

EPSS Средний

Описание

Microsoft AllJoyn API Information Disclosure Vulnerability

What type of information could be disclosed by this vulnerability?

The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized memory.

Продукт	Статья	Обновление
Windows Server 2016	5043051	Security Update
Windows 10 Version 1607 for 32-bit Systems	5043051	Security Update
Windows 10 Version 1607 for x64-based Systems	5043051	Security Update
Windows Server 2016 (Server Core installation)	5043051	Security Update
Windows 10 Version 1809 for 32-bit Systems	5043050	Security Update
Windows 10 Version 1809 for x64-based Systems	5043050	Security Update
Windows Server 2019	5043050	Security Update
Windows Server 2019 (Server Core installation)	5043050	Security Update
Windows Server 2022	5042881 5042880	Security Update SecurityHotpatchUpdate
Windows Server 2022 (Server Core installation)	5042881 5042880	Security Update SecurityHotpatchUpdate

Показывать по

Publicly Disclosed

Exploited

Latest Software Release

Exploitation Less Likely

DOS

N/A

EPSS

Процентиль: 94%

0.12261

Средний

7.5 High

CVSS3

CVE-2024-38257

CVSS3: 7.5

nvd

9 месяцев назад

Microsoft AllJoyn API Information Disclosure Vulnerability

GHSA-49px-m4gc-wgg2

CVSS3: 7.5

github

9 месяцев назад

Microsoft AllJoyn API Information Disclosure Vulnerability

BDU:2024-07200

CVSS3: 7.5

fstec

9 месяцев назад

Уязвимость технологии AllJoyn API операционной системы Windows, позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 94%

0.12261

Средний

7.5 High

CVSS3