CVE-2024-43468

CriticalCVSS 9.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Microsoft Configuration Manager Remote Code Execution Vulnerability

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Oct 8, 2024
Last modified
Jun 17, 2026
Added to CISA KEV
Feb 12, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-434698.8Azure CycleCloud Remote Code Execution VulnerabilityCVE-2024-43477.2The WP Fastest Cache plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.2.6 via the specificDCVE-2024-434707.3Azure Network Watcher VM Agent Elevation of Privilege VulnerabilityCVE-2024-434728.3Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityCVE-2024-434747.5Microsoft SQL Server Information Disclosure VulnerabilityCVE-2024-434757.3Microsoft Windows Admin Center Information Disclosure VulnerabilityCVE-2024-434765.4Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityCVE-2024-434777.5Improper access control in Decentralized Identity Services resulted in a vulnerability that allows an unauthenticated attacker to disable VeCVE-2024-434798.5Microsoft Power Automate Desktop Remote Code Execution VulnerabilityCVE-2024-43484.3A vulnerability, which was classified as problematic, was found in osCommerce 4. Affected is an unknown function of the file /catalog/all-prCVE-2024-434806.6Azure Service Fabric for Linux Remote Code Execution VulnerabilityCVE-2024-434818.8Power BI Report Server Spoofing Vulnerability
CVE-2024-43468: Critical severity, CVSS 9.8 | Vulnix