Windows 11 22h2 CVE-2024-37985

MEDIUM

Processor Optimization Removal or Modification of Security-critical Code (CWE-1037)

2024-09-17 secure@microsoft.com

Information Disclosure Microsoft Windows 11 22h2 Windows 11 23h2

5.6

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

5.6 MEDIUM

AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

1

CVE Published

Sep 17, 2024 - 23:15 nvd

MEDIUM 5.6

DescriptionNVD

Windows Kernel Information Disclosure Vulnerability

AnalysisAI

Windows Kernel Information Disclosure Vulnerability. Rated medium severity (CVSS 5.6).

Technical ContextAI

This vulnerability is classified under CWE-1037. Affected products include: Microsoft Windows 11 22H2, Microsoft Windows 11 23H2.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Windows 11 22h2

View all

CVE-2021-34527 HIGH Act Now POC

<p>A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged fi

CVE-2023-36884 HIGH Act Now POC

Windows Search Remote Code Execution Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely explo

CVE-2024-21412 HIGH Act Now POC

Internet Shortcut Files Security Feature Bypass Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is rem

CVE-2023-44487 HIGH Act Now POC

Denial of service against HTTP/2 server implementations allows remote unauthenticated attackers to exhaust server resour

CVE-2024-30088 HIGH Act Now POC

Windows Kernel contains a TOCTOU race condition vulnerability allowing local privilege escalation, exploited by the OilR

CVE-2025-33053 HIGH Act Now POC

Windows Internet Shortcut Files (.url) contain an external control vulnerability (CVE-2025-33053, CVSS 8.8) that enables

CVE-2025-33073 HIGH Act Now POC

Windows SMB contains an improper access control vulnerability (CVE-2025-33073, CVSS 8.8) enabling authenticated attacker

CVE-2024-21338 HIGH Act Now POC

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack co

CVE-2025-21293 HIGH Act Now POC

Active Directory Domain Services contains an elevation of privilege vulnerability that allows authenticated domain users

CVE-2024-35250 HIGH Act Now POC

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is l

CVE-2024-43461 HIGH Act Now

Windows MSHTML Platform Spoofing Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitab

CVE-2025-30397 HIGH Act Now POC

Microsoft Scripting Engine contains a type confusion vulnerability allowing unauthorized remote code execution over the

Same weakness CWE-1037 – Processor Optimization Removal or Modification of Security-critical Code

View all

CVE-2025-48810 MEDIUM

CVE-2025-48809 MEDIUM

CVE-2025-26636 MEDIUM

CVE-2024-45335 MEDIUM

Same technique Information Disclosure

View all

CVE-2019-2725 CRITICAL POC

CVE-2021-34523 CRITICAL POC

CVE-2013-2251 CRITICAL POC

CVE-2017-5638 CRITICAL POC

CVE-2025-24813 CRITICAL POC

CVE-2015-1701 HIGH POC

CVE-2017-0147 HIGH POC

CVE-2014-6324 HIGH POC

Share

CVE-2024-37985 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy