CVE-2024-38063criticalCWE-191

CVE-2024-38063: critical vulnerability in Microsoft Windows 10 Version 1507

Windows TCP/IP Remote Code Execution Vulnerability

Published · Updated

Follow this CVE+ Monitor Windows Server+ Monitor Windows

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

78Vexday Risk Score

Keep watching. It has an official Brazilian government alert and has a public proof of concept.

ssvc Attendcvss 9.8epss 74%
from disclosure to weapon2 days
Published on NVDAug 13
1st PoC+2d
Official alert in Brazil

Brazil's federal government published an alert, recommendation or bulletin that cites this vulnerability.

Source: CTIR Gov (GSI) and CISC Gov.br, under the CC BY-ND 3.0 license.
Windows TCP/IP Remote Code Execution Vulnerability
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Affected products
Microsoft · Windows 10 Version 1507Microsoft · Windows 10 Version 1607Microsoft · Windows 10 Version 1809Microsoft · Windows 10 Version 21H2Microsoft · Windows 10 Version 22H2Microsoft · Windows 11 version 21H2Microsoft · Windows 11 version 22H2Microsoft · Windows 11 version 22H3Microsoft · Windows 11 Version 23H2Microsoft · Windows 11 Version 24H2Microsoft · Windows Server 2008 R2 Service Pack 1Microsoft · Windows Server 2008 R2 Service Pack 1 (Server Core installation)Microsoft · Windows Server 2008 Service Pack 2Microsoft · Windows Server 2008 Service Pack 2Microsoft · Windows Server 2008 Service Pack 2 (Server Core installation)Microsoft · Windows Server 2012Microsoft · Windows Server 2012 R2Microsoft · Windows Server 2012 R2 (Server Core installation)Microsoft · Windows Server 2012 (Server Core installation)Microsoft · Windows Server 2016Microsoft · Windows Server 2016 (Server Core installation)Microsoft · Windows Server 2019Microsoft · Windows Server 2019 (Server Core installation)Microsoft · Windows Server 2022Microsoft · Windows Server 2022, 23H2 Edition (Server Core installation)
public PoCs found — 31
githubgithub.com/ynwarcs/CVE-2024-38063★ 695githubgithub.com/Sachinart/CVE-2024-38063-poc★ 87githubgithub.com/ThemeHackers/CVE-2024-38063★ 43githubgithub.com/patchpoint/CVE-2024-38063★ 20githubgithub.com/diegoalbuquerque/CVE-2024-38063★ 13githubgithub.com/KernelKraze/CVE-2024-38063_PoC★ 9githubgithub.com/zenzue/CVE-2024-38063-POC★ 7githubgithub.com/PumpkinBridge/Windows-CVE-2024-38063★ 4githubgithub.com/thanawee321/CVE-2024-38063★ 3githubgithub.com/Dragkob/CVE-2024-38063★ 3githubgithub.com/AdminPentester/CVE-2024-38063-★ 2githubgithub.com/Th3Tr1ckst3r/CVE-2024-38063★ 2githubgithub.com/AvidanMaatuk/CVE-2024-38063★ 1githubgithub.com/AliHj98/cve-2024-38063-Anonyvader★ 1githubgithub.com/jip-0-0-0-0-0/CVE-2024-38063-scanner★ 1githubgithub.com/becrevex/CVE-2024-38063★ 1githubgithub.com/brownpanda29/Cve-2024-38063★ 1githubgithub.com/Faizan-Khanx/CVE-2024-38063★ 1githubgithub.com/RohitMalik7/cve-2024-38063-detection-mitigation-system★ 0githubgithub.com/p33d/cve-2024-38063★ 0githubgithub.com/dweger-scripts/CVE-2024-38063-Remediation★ 0githubgithub.com/almogopp/Disable-IPv6-CVE-2024-38063-Fix★ 0githubgithub.com/ps-interactive/cve-2024-38063★ 0githubgithub.com/FrancescoDiSalesGithub/quick-fix-cve-2024-38063★ 0githubgithub.com/ArenaldyP/CVE-2024-38063-Medium★ 0githubgithub.com/idkwastaken/CVE-2024-38063★ 0githubgithub.com/fredagsguf/Windows-CVE-2024-38063★ 0githubgithub.com/Skac44/CVE-2024-38063★ 0githubgithub.com/thealice01/CVE-2024-38063★ 0githubgithub.com/arrhenius975/CVE-2024-38063-Exploit-Refactoring★ 0githubgithub.com/SALMA-ESSAOUD/CVE-CVSS--CVE-2024-38063-IPv6-TCP-IP-Remote-Code-Execution-Analysis★ 0
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Microsoft Windows 10 Version 1507

In the same product, most dangerous first.

CVE-2021-34527HIGHWindows Print Spooler Remote Code Execution VulnerabilityEPSS 99.8%KEVCVE-2023-36884HIGHWindows Search Remote Code Execution VulnerabilityEPSS 99.4%KEVCVE-2024-21412HIGHInternet Shortcut Files Security Feature Bypass VulnerabilityEPSS 99.4%KEVCVE-2022-30190HIGHMicrosoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution VulnerabilityEPSS 98.5%KEVCVE-2021-40444HIGHMicrosoft MSHTML Remote Code Execution VulnerabilityEPSS 97.8%KEVCVE-2023-36025HIGHWindows SmartScreen Security Feature Bypass VulnerabilityEPSS 88.2%KEV