Main Vulnerability Database Vulnerabilities #VU86460

Information disclosure in Microsoft Windows and Windows Server - CVE-2024-21340

Published: February 13, 2024

Vulnerability identifier: #VU86460

CSH Severity: Low

CVSS v4: 5.1 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-21340

CWE-ID: CWE-200

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local attacker to gain access to potentially sensitive information.

The vulnerability exists due to excessive data output by the application in the Windows Kernel. An attacker with physical access can gain unauthorized access to sensitive information on the system.

Affected software

Microsoft Windows
Windows Server

How to mitigate CVE-2024-21340

Install updates from vendor's website.

External References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21340

Related Security Bulletins