Home

Description

Windows Hyper-V Elevation of Privilege Vulnerability

PUBLISHED Reserved 2024-06-11 | Published 2024-07-09 | Updated 2025-10-21 | Assigner microsoft




HIGH: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CISA Known Exploited Vulnerability

Date added 2024-07-09 | Due date 2024-07-30

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Problem types

CWE-190: Integer Overflow or Wraparound

Product status

10.0.20348.0 (custom) before 10.0.20348.2582
affected

10.0.0 (custom) before 10.0.22000.3079
affected

10.0.22621.0 (custom) before 10.0.22621.3880
affected

10.0.22631.0 (custom) before 10.0.22631.3880
affected

10.0.22631.0 (custom) before 10.0.22631.3880
affected

10.0.25398.0 (custom) before 10.0.25398.1009
affected

References

www.cisa.gov/...erabilities-catalog?field_cve=CVE-2024-38080 government-resource

msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38080 (Windows Hyper-V Elevation of Privilege Vulnerability) vendor-advisory

msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38080 (Windows Hyper-V Elevation of Privilege Vulnerability) vendor-advisory

cve.org (CVE-2024-38080)

nvd.nist.gov (CVE-2024-38080)

Download JSON