Vulnerabilitycritical
Windows Downgrade Attack Risks Exposing Patched Systems to Old Vulnerabilities
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-21302 | Summary: As of July 8, 2025 Microsoft has completed mitigations to address this vulnerability | 6.7 | 2% | ||
| CVE-2024-38202 | Summary Microsoft was notified that an elevation of privilege vulnerability exists in Windows Update, potentially enabling an attacker with basic user… | 7.3 | 2% |
From the original article
2 min read at thehackernews.com
Ravie Lakshmanan Aug 08, 2024 Windows Security / Vulnerability Microsoft said it is developing security updates to address two loopholes that it said could be abused to stage downgrade attacks against the Windows update architecture and replace current versions of the operating system files with older versions. CVE-2024-38202 (CVSS score: 7. 3) - Windows Update Stack Elevation of Privilege Vulnerability
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.