NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2024-37985

CVSS 3.1: 5.6 medium
EPSS: <1%p49
Published: Sep 17, 2024 · Sep 17, 2024
Modified: Jun 17, 2026

Analyze CVE-2024-37985 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Windows Kernel Information Disclosure Vulnerability

Vendors: microsoft

Products: windows 11 22h2, windows 11 23h2

Weakness: CWE-1037

Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news

4 stories

Microsoft's July Update Patches 143 Flaws, Including Two Actively Exploited

The Hacker NewsJul 11, 09:02 UTC · Jul 11, 2024VulnerabilityExploitedCVE-2024-38080 CVE-2024-38112 CVE-2024-37985+32 · 1 read

60

Microsoft Fixes Four Zero

Infosecurity MagazineJul 10, 09:40 UTC · Jul 10, 2024Exploit / PoCExploitedCVE-2024-38080 CVE-2024-38112 CVE-2024-35264+62 · 1 read

60

Microsoft Patch Tuesday for July 2024 fixed 2 actively exploited zero

Security AffairsJul 10, 08:48 UTC · Jul 10, 2024VulnerabilityExploitedCVE-2024-38080 CVE-2024-38112 CVE-2024-37985+14 · 1 read

60

Microsoft fixes two zero-days exploited by attackers (CVE-2024-38080, CVE-2024-38112)

Help Net SecurityJul 9, 00:00 UTC · Jul 9, 2024VulnerabilityExploitedCVE-2024-38080 CVE-2024-38112 CVE-2024-35264+56 · 1 read

60