CVE-2024-38233
Published: 10 September 2024
Summary
CVE-2024-38233 is a high-severity NULL Pointer Dereference (CWE-476) vulnerability in Microsoft Windows 10 1607. Its CVSS base score is 7.5 (High).
Operationally, ranked in the top 5.6% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
CVE-2024-38233 is a denial of service vulnerability affecting the Windows Networking component. It carries a CVSS 3.1 base score of 7.5 with the vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H and is associated with CWE-476, indicating a potential null pointer dereference that can be triggered to disrupt service availability.
An unauthenticated remote attacker can exploit the flaw over the network with low complexity and no user interaction required, resulting in a high-impact denial of service that affects only availability while leaving confidentiality and integrity intact.
The Microsoft Security Response Center advisory linked in the reference provides official guidance on available patches and mitigation measures for affected Windows systems. The associated EPSS score has remained flat at 0.1361 with no material increase since disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-37199
Vulnerability details
Windows Networking Denial of Service Vulnerability
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.