CVE-2024-20666 — Improper Input Validation in Microsoft Windows 10 Version 1507

CWE-20 — Improper Input ValidationCWE-284 — Improper Access ControlCWE-693 — Protection Mechanism Failure17 documents5 sources
Severity
6.6MEDIUMCNA
No vector
EPSS
15.7%
top 5.27%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
26
Microsoft Windows 10 Version 1507Microsoft Windows 10 Version 1607Microsoft Windows 10 Version 1809+23 more
Timeline
PublishedJan 9
Latest updateOct 8

Description

BitLocker Security Feature Bypass Vulnerability BitLocker Security Feature Bypass Vulnerability

Affected Packages26 packages

▶CVEListV5microsoft/windows_server_201610.0.14393.0 — 10.0.14393.6614
▶CVEListV5microsoft/windows_server_201910.0.17763.0 — 10.0.17763.5329
▶CVEListV5microsoft/windows_server_202210.0.20348.0 — 10.0.20348.2227
▶CVEListV5microsoft/windows_10_version_150710.0.10240.0 — 10.0.10240.20402
▶CVEListV5microsoft/windows_10_version_160710.0.14393.0 — 10.0.14393.6614

🔴Vulnerability Details

2
CVEList
BitLocker Security Feature Bypass Vulnerability↗2024-01-09
▶
VulnCheck
Microsoft Windows Improper Input Validation↗2024
▶

📋Vendor Advisories

3
Microsoft
BitLocker Security Feature Bypass Vulnerability↗2024-10-08
▶
Microsoft
Windows Update Stack Elevation of Privilege Vulnerability↗2024-08-13
▶
Microsoft
BitLocker Security Feature Bypass Vulnerability↗2024-01-09
▶

🕵️Threat Intelligence

12
Bleepingcomputer
Microsoft retires Windows updates causing 0x80070643 errors↗2024-08-14
▶
Bleepingcomputer
Microsoft won't fix Windows 0x80070643 errors, manual fix required↗2024-05-02
▶
Bleepingcomputer
Microsoft fixes Copilot issue blocking Windows 11 upgrades↗2024-02-08
▶
Bleepingcomputer
Microsoft: Recent updates cause Sysprep Windows validation errors↗2024-01-24
▶
Bleepingcomputer
Microsoft working on a fix for Windows 10 0x80070643 errors↗2024-01-15
▶
CVE-2024-20666 — Improper Input Validation in Microsoft | cvebase