CVE-2024-37979 — MEDIUM (6.7)

Q: What is CVE-2024-37979?

CVE-2024-37979 is a vulnerability with a CVSS score of 6.7 (MEDIUM). Windows Kernel Elevation of Privilege Vulnerability

Q: How severe is CVE-2024-37979?

CVE-2024-37979 has been rated MEDIUM with a CVSS base score of 6.7/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2024-37979?

Check the references section above for vendor advisories and patch information. Affected products include: Microsoft Windows Server 2012, Microsoft Windows Server 2016, Microsoft Windows Server 2019, Microsoft Windows Server 2022.

Vulnerability Description

Windows Kernel Elevation of Privilege Vulnerability

CVSS Score

6.7

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Microsoft	Windows Server 2012	-
Microsoft	Windows Server 2016	< 10.0.14393.7428
Microsoft	Windows Server 2019	< 10.0.17763.6414
Microsoft	Windows Server 2022	< 10.0.20348.2762

Related Weaknesses (CWE)

CWE-822

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37979PatchVendor Advisory

FAQ

What is CVE-2024-37979?

CVE-2024-37979 is a vulnerability with a CVSS score of 6.7 (MEDIUM). Windows Kernel Elevation of Privilege Vulnerability

How severe is CVE-2024-37979?

CVE-2024-37979 has been rated MEDIUM with a CVSS base score of 6.7/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-37979?

Check the references section above for vendor advisories and patch information. Affected products include: Microsoft Windows Server 2012, Microsoft Windows Server 2016, Microsoft Windows Server 2019, Microsoft Windows Server 2022.