CVE-2024-37985

—1

CVSS 3.1

5.6 medium

EPSS

<1%p49

Published

Sep 17, 2024 (Sep 17, 2024)

Modified

Jun 17, 2026

Description

Windows Kernel Information Disclosure Vulnerability

Vendors: microsoft
Products: windows 11 22h2, windows 11 23h2
Weakness: CWE-1037
Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news4 stories

Microsoft's July Update Patches 143 Flaws, Including Two Actively Exploited

The Hacker NewsJul 11, 09:02 UTC · Jul 11, 2024Vulnerability in the wildCVE-2024-38080 CVE-2024-38112 CVE-2024-37985+3 CVEs

60

Microsoft Fixes Four Zero

Infosecurity MagazineJul 10, 09:40 UTC · Jul 10, 2024Exploit / PoC in the wildCVE-2024-38080 CVE-2024-38112 CVE-2024-35264+6 CVEs

60

Microsoft Patch Tuesday for July 2024 fixed 2 actively exploited zero

Security AffairsJul 10, 08:48 UTC · Jul 10, 2024Vulnerability in the wildCVE-2024-38080 CVE-2024-38112 CVE-2024-37985+1 CVEs

60

Microsoft fixes two zero-days exploited by attackers (CVE-2024-38080, CVE-2024-38112)

Help Net SecurityJul 9, 00:00 UTC · Jul 9, 2024Vulnerability in the wildCVE-2024-38080 CVE-2024-38112 CVE-2024-35264+5 CVEs

60