CVE-2024-38063: falha crítica em Microsoft Windows 10 Version 1507
Windows TCP/IP Remote Code Execution Vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
78Vexday Risk Score
Acompanhe. Ela tem alerta oficial do governo brasileiro e tem prova de conceito pública.
ssvc Attendcvss 9.8epss 74%
da publicação à arma2 dias
Publicada no NVD13 de ago.
1ª PoC+2d
Alerta oficial no Brasil
O governo federal publicou alerta, recomendação ou boletim que cita esta vulnerabilidade.
- CTIR Gov · ALERTA 14/2024Falha crítica no sistema operacional Windowsler no gov.br ↗
Fonte: CTIR Gov (GSI) e CISC Gov.br, sob licença CC BY-ND 3.0.
Windows TCP/IP Remote Code Execution Vulnerability
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Produtos afetados
Microsoft · Windows 10 Version 1507Microsoft · Windows 10 Version 1607Microsoft · Windows 10 Version 1809Microsoft · Windows 10 Version 21H2Microsoft · Windows 10 Version 22H2Microsoft · Windows 11 version 21H2Microsoft · Windows 11 version 22H2Microsoft · Windows 11 version 22H3Microsoft · Windows 11 Version 23H2Microsoft · Windows 11 Version 24H2Microsoft · Windows Server 2008 R2 Service Pack 1Microsoft · Windows Server 2008 R2 Service Pack 1 (Server Core installation)Microsoft · Windows Server 2008 Service Pack 2Microsoft · Windows Server 2008 Service Pack 2Microsoft · Windows Server 2008 Service Pack 2 (Server Core installation)Microsoft · Windows Server 2012Microsoft · Windows Server 2012 R2Microsoft · Windows Server 2012 R2 (Server Core installation)Microsoft · Windows Server 2012 (Server Core installation)Microsoft · Windows Server 2016Microsoft · Windows Server 2016 (Server Core installation)Microsoft · Windows Server 2019Microsoft · Windows Server 2019 (Server Core installation)Microsoft · Windows Server 2022Microsoft · Windows Server 2022, 23H2 Edition (Server Core installation)PoCs públicas encontradas — 31
githubgithub.com/ynwarcs/CVE-2024-38063★ 695githubgithub.com/Sachinart/CVE-2024-38063-poc★ 87githubgithub.com/ThemeHackers/CVE-2024-38063★ 43githubgithub.com/patchpoint/CVE-2024-38063★ 20githubgithub.com/diegoalbuquerque/CVE-2024-38063★ 13githubgithub.com/KernelKraze/CVE-2024-38063_PoC★ 9githubgithub.com/zenzue/CVE-2024-38063-POC★ 7githubgithub.com/PumpkinBridge/Windows-CVE-2024-38063★ 4githubgithub.com/thanawee321/CVE-2024-38063★ 3githubgithub.com/Dragkob/CVE-2024-38063★ 3githubgithub.com/AdminPentester/CVE-2024-38063-★ 2githubgithub.com/Th3Tr1ckst3r/CVE-2024-38063★ 2githubgithub.com/AvidanMaatuk/CVE-2024-38063★ 1githubgithub.com/AliHj98/cve-2024-38063-Anonyvader★ 1githubgithub.com/jip-0-0-0-0-0/CVE-2024-38063-scanner★ 1githubgithub.com/becrevex/CVE-2024-38063★ 1githubgithub.com/brownpanda29/Cve-2024-38063★ 1githubgithub.com/Faizan-Khanx/CVE-2024-38063★ 1githubgithub.com/RohitMalik7/cve-2024-38063-detection-mitigation-system★ 0githubgithub.com/p33d/cve-2024-38063★ 0githubgithub.com/dweger-scripts/CVE-2024-38063-Remediation★ 0githubgithub.com/almogopp/Disable-IPv6-CVE-2024-38063-Fix★ 0githubgithub.com/ps-interactive/cve-2024-38063★ 0githubgithub.com/FrancescoDiSalesGithub/quick-fix-cve-2024-38063★ 0githubgithub.com/ArenaldyP/CVE-2024-38063-Medium★ 0githubgithub.com/idkwastaken/CVE-2024-38063★ 0githubgithub.com/fredagsguf/Windows-CVE-2024-38063★ 0githubgithub.com/Skac44/CVE-2024-38063★ 0githubgithub.com/thealice01/CVE-2024-38063★ 0githubgithub.com/arrhenius975/CVE-2024-38063-Exploit-Refactoring★ 0githubgithub.com/SALMA-ESSAOUD/CVE-CVSS--CVE-2024-38063-IPv6-TCP-IP-Remote-Code-Execution-Analysis★ 0⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — Microsoft Windows 10 Version 1507
No mesmo produto, das mais perigosas para as menos.
CVE-2021-34527HIGHWindows Print Spooler Remote Code Execution VulnerabilityEPSS 99.8%KEVCVE-2023-36884HIGHWindows Search Remote Code Execution VulnerabilityEPSS 99.4%KEVCVE-2024-21412HIGHInternet Shortcut Files Security Feature Bypass VulnerabilityEPSS 99.4%KEVCVE-2022-30190HIGHMicrosoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution VulnerabilityEPSS 98.5%KEVCVE-2021-40444HIGHMicrosoft MSHTML Remote Code Execution VulnerabilityEPSS 97.8%KEVCVE-2023-36025HIGHWindows SmartScreen Security Feature Bypass VulnerabilityEPSS 88.2%KEV