CVE-2024-43582
Published: 08 October 2024
Summary
CVE-2024-43582 is a high-severity Use After Free (CWE-416) vulnerability in Microsoft Windows 10 21H2. Its CVSS base score is 8.1 (High).
Operationally, ranked in the top 3.6% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
CVE-2024-43582 is a remote code execution vulnerability affecting the Remote Desktop Protocol Server component. It carries a CVSS 3.1 score of 8.1 and is associated with CWE-416, indicating a use-after-free flaw that can be triggered over the network.
An unauthenticated remote attacker can exploit the issue without user interaction by sending specially crafted RDP traffic. Successful exploitation grants the ability to execute arbitrary code with the privileges of the RDP server process, resulting in full confidentiality, integrity, and availability impact on the affected system.
The official Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43582 provides patch and mitigation guidance for supported Windows versions.
The associated EPSS score stands at 0.2604 with no material increase from a lower baseline.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-40336
Vulnerability details
Remote Desktop Protocol Server Remote Code Execution Vulnerability
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Use-after-free exploits that achieve arbitrary code execution are blocked or significantly hardened by non-executable pages and ASLR.