Lucene search
MicrosoftVULNRICHMENT:CVE-2024-38137HistoryAug 13, 2024 - 5:30 p.m.
CVE-2024-38137 Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability
2024-08-1317:30:13
CWE-591
CWE-416
microsoft
github.com
8
windows resource manager
psm service extension
elevation of privilege
CVSS3
7
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
AI Score
6.8
Confidence
Low
EPSS
0.001
Percentile
22.4%
SSVC
Exploitation
none
Automatable
no
Technical Impact
total
Related
nvd
nvd
CVE-2024-38137
2024-08-13 18:15:17
mscve
mscve
cvelist
cvelist
cve
cve
CVE-2024-38137
2024-08-13 18:15:17
mskb
mskb
August 13, 2024âKB5041592 (OS Build 22000.3147)
2024-08-13 07:00:00
August 13, 2024âKB5041571 (OS Build 26100.1457)
2024-08-13 07:00:00
August 13, 2024âKB5041580 (OS Builds 19044.4780 and 19045.4780)
2024-08-13 07:00:00
nessus
nessus
KB5041580: Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (August 2024)
2024-08-13 00:00:00
KB5041592: Windows 11 version 21H2 Security Update (August 2024)
2024-08-13 00:00:00
KB5041585: Windows 11 version 22H2 Security Update (August 2024)
2024-08-13 00:00:00
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB5041592)
2024-08-14 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5041580)
2024-08-14 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5041585)
2024-08-14 00:00:00
kaspersky
kaspersky
KLA71484 Multiple vulnerabilities in Microsoft Windows
2024-08-13 00:00:00
rapid7blog
rapid7blog
Patch Tuesday - August 2024
2024-08-13 23:36:30
CVSS3
7
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
AI Score
6.8
Confidence
Low
EPSS
0.001
Percentile
22.4%
SSVC
Exploitation
none
Automatable
no
Technical Impact
total
Related for VULNRICHMENT:CVE-2024-38137