CVE-2024-38060
Published: 09 July 2024
Summary
CVE-2024-38060 is a high-severity Heap-based Buffer Overflow (CWE-122) vulnerability in Microsoft Windows Server 2012. Its CVSS base score is 8.8 (High).
Operationally, ranked in the top 6.1% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
Windows Imaging Component contains a remote code execution vulnerability tracked as CVE-2024-38060. The flaw stems from out-of-bounds write and heap-based buffer overflow conditions (CWE-787 and CWE-122) that allow an attacker to execute arbitrary code. It affects the Windows Imaging Component on supported Windows systems and carries a CVSS 3.1 base score of 8.8.
An authenticated attacker with network access and low privileges can exploit the issue without user interaction to achieve full confidentiality, integrity, and availability impact on the target system. The attack vector is rated as network-reachable with low complexity.
Microsoft’s advisory at msrc.microsoft.com directs administrators to apply the security update released on July 9, 2024, which addresses the vulnerability in the affected imaging component. No other mitigation steps are specified in the reference.
The EPSS score currently stands at 0.1177 with a recorded peak of 0.1360; the modest movement does not indicate a pronounced post-disclosure surge in exploitation interest.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-37756
Vulnerability details
Windows Imaging Component Remote Code Execution Vulnerability
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Out-of-bounds writes that corrupt control flow or inject shellcode are rendered non-executable by the same memory protections.