CVE-2024-38257

HighCVSS 7.5/10Last modified Aug 10, 2026

Description

Microsoft AllJoyn API Information Disclosure Vulnerability

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-908

Affected software

VendorProductVersions
MicrosoftWindows 10 Version 1607>= 10.0.14393.0, < 10.0.14393.7336
MicrosoftWindows 10 Version 1809>= 10.0.17763.0, < 10.0.17763.6293
MicrosoftWindows 10 Version 21H2>= 10.0.19043.0, < 10.0.19044.4894
MicrosoftWindows 10 Version 22H2>= 10.0.19045.0, < 10.0.19045.4894
MicrosoftWindows 11 version 21H2>= 10.0.0, < 10.0.22000.3197
MicrosoftWindows 11 version 22H2>= 10.0.22621.0, < 10.0.22621.4169
MicrosoftWindows 11 version 22H3>= 10.0.22631.0, < 10.0.22631.4169
MicrosoftWindows 11 Version 23H2>= 10.0.22631.0, < 10.0.22631.4169
MicrosoftWindows Server 2016>= 10.0.14393.0, < 10.0.14393.7336
MicrosoftWindows Server 2016 (Server Core installation)>= 10.0.14393.0, < 10.0.14393.7336
MicrosoftWindows Server 2019>= 10.0.17763.0, < 10.0.17763.6293
MicrosoftWindows Server 2019 (Server Core installation)>= 10.0.17763.0, < 10.0.17763.6293
MicrosoftWindows Server 2022>= 10.0.20348.0, < 10.0.20348.2700
MicrosoftWindows Server 2022, 23H2 Edition (Server Core installation)>= 10.0.25398.0, < 10.0.25398.1128

References

Timeline

Published
Sep 10, 2024
Last modified
Aug 10, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-382587.5Windows Remote Desktop Licensing Service Information Disclosure VulnerabilityCVE-2024-382598.8Microsoft Management Console Remote Code Execution VulnerabilityCVE-2024-38268.6In versions of Akana in versions prior to and including 2022.1.3 validation is broken when using the SAML Single Sign-On (SSO) functionalityCVE-2024-382608.8Windows Remote Desktop Licensing Service Remote Code Execution VulnerabilityCVE-2024-382617.8Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVE-2024-382627.5Windows Remote Desktop Licensing Service Remote Code Execution VulnerabilityCVE-2024-382637.5Windows Remote Desktop Licensing Service Remote Code Execution VulnerabilityCVE-2024-382645.9Microsoft Virtual Hard Disk (VHDX) Denial of Service VulnerabilityCVE-2024-382658.8Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVE-2024-382664.9An improper restriction of operations within the bounds of a memory buffer in the parameter type parser of the Zyxel VMG8825-T50K firmware vCVE-2024-382674.9An improper restriction of operations within the bounds of a memory buffer in the IPv6 address parser of the Zyxel VMG8825-T50K firmware verCVE-2024-382684.9An improper restriction of operations within the bounds of a memory buffer in the MAC address parser of the Zyxel VMG8825-T50K firmware vers
CVE-2024-38257: High severity, CVSS 7.5 | Vulnix