Description
Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability
Reserved 2024-03-22 | Published 2024-05-14 | Updated 2024-12-31 | Assigner
microsoftHIGH: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Problem types
CWE-125: Out-of-bounds Read
Product status
10.0.17763.0 before 10.0.17763.5820
affected
10.0.0 before 10.0.17763.5820
affected
10.0.17763.0 before 10.0.17763.5820
affected
10.0.17763.0 before 10.0.17763.5820
affected
10.0.20348.0 before 10.0.20348.2461
affected
10.0.0 before 10.0.22000.2960
affected
10.0.19043.0 before 10.0.19044.4412
affected
10.0.22621.0 before 10.0.22621.3593
affected
10.0.19045.0 before 10.0.19045.4412
affected
10.0.22631.0 before 10.0.22631.3593
affected
10.0.22631.0 before 10.0.22631.3593
affected
10.0.25398.0 before 10.0.25398.887
affected
References
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29994 (Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability) vendor-advisory
cve.org (CVE-2024-29994)
nvd.nist.gov (CVE-2024-29994)
Download JSON
Subscribe to our newsletter to learn more about our work.