CVE-2024-21320

MEDIUM

Microsoft Windows 10 1507 < 10.0.10240.20402 - Information Disclosure

Title source: rule

Description

Windows Themes Spoofing Vulnerability

Exploits (2)

exploitdb WORKING POC

by Abinesh kamal K U · textremotewindows

https://www.exploit-db.com/exploits/52092

View Code ZIP pw:eip

nomisec NO CODE 2 stars

by sxyrxyy · poc

https://github.com/sxyrxyy/CVE-2024-21320-POC

View Code ZIP pw:eip

References (3)

[Patch, Vendor Advisory] https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21320

[Third Party Advisory] https://www.vicarius.io/vsociety/posts/cve-2024-21320-detection-script-windows-themes-spoofing-vulnerability

[Third Party Advisory] https://www.vicarius.io/vsociety/posts/cve-2024-21320-mitigation-script-windows-themes-spoofing-vulnerability

Scores

CVSS v3 6.5

EPSS 0.2560

EPSS Percentile 96.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Details

CWE

CWE-200

Status published

Products (13)

microsoft/windows_10_1507 < 10.0.10240.20402

microsoft/windows_10_1607 < 10.0.14393.6614

microsoft/windows_10_1809 < 10.0.17763.5329

microsoft/windows_10_21h2 < 10.0.19044.3930

microsoft/windows_10_22h2 < 10.0.19045.3930

microsoft/windows_11_21h2 < 10.0.22000.2713

microsoft/windows_11_22h2 < 10.0.22621.3007

microsoft/windows_11_23h2 < 10.0.22631.3007

microsoft/windows_server_2012

microsoft/windows_server_2012 r2

... and 3 more

Published Jan 09, 2024

Tracked Since Feb 18, 2026