5.5

CVE-2024-30034

Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability

Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
MicrosoftWindows 10 1809 Version < 10.0.17763.5820
MicrosoftWindows 10 21h2 Version < 10.0.19044.4412
MicrosoftWindows 10 22h2 Version < 10.0.19045.4412
MicrosoftWindows 11 21h2 Version < 10.0.22000.2960
MicrosoftWindows 11 22h2 Version < 10.0.22621.3593
MicrosoftWindows 11 23h2 Version < 10.0.22631.3593
MicrosoftWindows Server 2019 Version < 10.0.17763.5820
MicrosoftWindows Server 2022 Version < 10.0.20348.2461
MicrosoftWindows Server 2022 23h2 Version < 10.0.25398.887
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.07% 0.862
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
secure@microsoft.com 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')

The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.