CVE-2024-38203

MEDIUM

Windows Package Library Manager - Info Disclosure

Title source: llm

Description

Windows Package Library Manager Information Disclosure Vulnerability

References (1)

Scores

CVSS v3 6.2
EPSS 0.0010
EPSS Percentile 26.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Classification

CWE
CWE-693
Status published

Affected Products (28)

microsoft/windows_10_1507 < 10.0.10240.20826
microsoft/windows_10_1507 < 10.0.10240.20826
microsoft/windows_10_1607 < 10.0.14393.7515
microsoft/windows_10_1607 < 10.0.14393.7515
microsoft/windows_10_1809 < 10.0.17763.6532
microsoft/windows_10_1809 < 10.0.17763.6532
microsoft/windows_10_21h2 < 10.0.19044.5131
microsoft/windows_10_21h2 < 10.0.19044.5131
microsoft/windows_10_21h2 < 10.0.19044.5131
microsoft/windows_10_22h2 < 10.0.19045.5131
microsoft/windows_10_22h2 < 10.0.19045.5131
microsoft/windows_10_22h2 < 10.0.19045.5131
microsoft/windows_11_22h2 < 10.0.22621.4460
microsoft/windows_11_22h2 < 10.0.22621.4460
microsoft/windows_11_23h2 < 10.0.22631.4460
... and 13 more

Timeline

Published Nov 12, 2024
Tracked Since Feb 18, 2026