CVE-2024-21408

—

CVSS 3.1

5.5 medium

EPSS

5%p91

Published

Mar 12, 2024 (Mar 12, 2024)

Modified

Jun 17, 2026

Description

Windows Hyper-V Denial of Service Vulnerability

Vendors: microsoft
Products: windows 10 1507, windows 10 1607, windows 10 1809, windows 10 21h2, windows 10 22h2, windows 11 21h2, windows 11 22h2, windows 11 23h2, windows server 2016, windows server 2019, windows server 2022, windows server 2022 23h2
Weakness: CWE-835
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (4.5%)

In the news5 stories

March 2024 Patch Tuesday: Microsoft fixes critical bugs in Windows Hyper-V

Help Net SecurityMar 26, 12:34 UTC · Mar 26, 2024Vulnerability in the wildCVE-2024-21338 CVE-2024-21407 CVE-2024-21408+7 CVEs

60

Microsoft's March Updates Fix 61 Vulnerabilities, Including Critical Hyper

The Hacker NewsMar 15, 00:00 UTC · Mar 15, 2024Vulnerability in the wildCVE-2024-21407 CVE-2024-21408 CVE-2024-21400+9 CVEs

60

Single RCE Bug Features Among 60 CVEs in March Patch Tuesday

Infosecurity MagazineMar 13, 10:15 UTC · Mar 13, 2024Vulnerability CVE-2024-21407 CVE-2024-21408 CVE-2024-20671+2 CVEs

60

Microsoft Patch Tuesday for March 2024 fixed 59 flaws

Security AffairsMar 12, 21:04 UTC · Mar 12, 2024Vulnerability in the wildCVE-2024-21407 CVE-2024-21408 CVE-2024-21334+1 CVEs

60

Another Patch Tuesday with no zero-days, only two critical vulnerabilities disclosed by Microsoft

Cisco TalosMar 12, 18:12 UTC · Mar 12, 2024Vulnerability in the wildCVE-2024-21408 CVE-2024-21407 CVE-2024-21334

60