CVE-2024-38257

—

CVSS 3.1

7.5 high

EPSS

4%p91

Published

Sep 10, 2024 (Sep 10, 2024)

Modified

Aug 10, 2026

Description

Microsoft AllJoyn API Information Disclosure Vulnerability

Vendors: microsoft
Products: windows 10 1607, windows 10 1809, windows 10 21h1, windows 10 22h2, windows 11 21h2, windows 11 22h2, windows 11 23h2, windows server 2016, windows server 2019, windows server 2022, windows server 2022 23h2
Weakness: CWE-908
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (4.5%)

In the news3 stories

Talk of election security is good, but we still need more money to solve the problem

Cisco TalosSep 19, 18:00 UTC · Sep 19, 2024Ransomware CVE-2024-38257

60

Four zero-days included in group of 79 vulnerabilities Microsoft discloses, including one with 9.8 severity score

Cisco TalosSep 10, 19:30 UTC · Sep 10, 2024Vulnerability in the wildCVE-2024-38226 CVE-2024-38014 CVE-2024-38217+6 CVEs

60

Vulnerability in Acrobat Reader could lead to remote code execution; Microsoft patches information disclosure issue in Windows API

Cisco TalosSep 11, 16:00 UTC · Sep 11, 2024Vulnerability CVE-2024-38257 CVE-2024-39420

47