First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-38123

MediumCVSS 4.4/10Last modified Jun 17, 2026

Description

Windows Bluetooth Driver Information Disclosure Vulnerability

Metrics

CVSS 3.1 4.4/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
Microsoft	Windows 11 Version 24H2	>= 10.0.26100.0, < 10.0.26100.1457

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38123Patch, Vendor Advisory

Timeline

Published: Aug 13, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-381249.0Windows Netlogon Elevation of Privilege Vulnerability CVE-2024-381257.8Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability CVE-2024-381267.5Windows Network Address Translation (NAT) Denial of Service Vulnerability CVE-2024-381277.8Windows Hyper-V Elevation of Privilege Vulnerability CVE-2024-381288.8Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CVE-2024-381296.6Windows Kerberos Elevation of Privilege Vulnerability CVE-2024-38138.8The tagDiv Composer plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.8 via the 'td_block_t CVE-2024-381308.8Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CVE-2024-381318.8Clipboard Virtual Channel Extension Remote Code Execution Vulnerability CVE-2024-381327.5Windows Network Address Translation (NAT) Denial of Service Vulnerability CVE-2024-381337.8Windows Kernel Elevation of Privilege Vulnerability CVE-2024-381347.8Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

CVE-2024-38123: Medium severity, CVSS 4.4 | Vulnix