CVE-2024-38063

—1

CVSS 3.1

9.8 critical

EPSS

71%p99

Published

Aug 13, 2024 (Aug 13, 2024)

Modified

Jun 17, 2026

Description

Windows TCP/IP Remote Code Execution Vulnerability

Vendors: microsoft
Products: windows 10 1507, windows 10 1607, windows 10 1809, windows 10 21h2, windows 10 22h2, windows 11 21h2, windows 11 22h2, windows 11 23h2, windows 11 24h2, windows server 2008, windows server 2012, windows server 2016
Weakness: CWE-191
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (70.6%)

In the news4 stories

Microsoft urges customers to fix Windows RCE in the TCP/IP stack

Security AffairsAug 16, 07:10 UTC · Aug 16, 2024Vulnerability in the wildCVE-2024-38063 CVE-2024-38189 CVE-2024-38178+4 CVEs

60

Microsoft fixes 6 zero-days under active attack

Help Net SecurityAug 15, 07:12 UTC · Aug 15, 2024Exploit / PoC in the wildCVE-2024-38178 CVE-2024-38106 CVE-2024-38107+10 CVEs

60

Microsoft Patch Tuesday security updates for August 2024 six actively exploited bugs

Security AffairsAug 14, 07:17 UTC · Aug 14, 2024Vulnerability in the wildCVE-2024-38189 CVE-2024-38178 CVE-2024-38193+12 CVEs2

60

Talos discovers Microsoft kernel mode driver vulnerabilities that could lead to SYSTEM privileges; Seven other critical issues disclosed

Cisco TalosAug 13, 19:12 UTC · Aug 13, 2024Vulnerability in the wildCVE-2024-21302 CVE-2024-38184 CVE-2024-38185+10 CVEs1

60