CVE-2024-21306 — Missing Authentication for Critical Function in Microsoft Windows 10 Version 21h2

CWE-306 — Missing Authentication for Critical Function7 documents4 sources
Severity
5.7MEDIUMCNA
No vector
EPSS
29.6%
top 3.37%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
7
Microsoft Windows 10 Version 21h2Microsoft Windows 10 Version 22h2Microsoft Windows 11 Version 21h2+4 more
Timeline
PublishedJan 9

Description

Microsoft Bluetooth Driver Spoofing Vulnerability Microsoft Bluetooth Driver Spoofing Vulnerability

Affected Packages7 packages

▶CVEListV5microsoft/windows_server_202210.0.20348.0 — 10.0.20348.2227
▶CVEListV5microsoft/windows_10_version_21h210.0.19043.0 — 10.0.19044.3930
▶CVEListV5microsoft/windows_10_version_22h210.0.19045.0 — 10.0.19045.3930
▶CVEListV5microsoft/windows_11_version_21h210.0.0 — 10.0.22000.2713
▶CVEListV5microsoft/windows_11_version_22h210.0.22621.0 — 10.0.22621.3007

🔴Vulnerability Details

1
CVEList
Microsoft Bluetooth Driver Spoofing Vulnerability↗2024-01-09
▶

📋Vendor Advisories

1
Microsoft
Microsoft Bluetooth Driver Spoofing Vulnerability↗2024-01-09
▶

🕵️Threat Intelligence

5
Trendmicro
The January 2024 Security Update Review↗2024-01-09
▶
Trendmicro
The January 2024 Security Update Review↗2024-01-09
▶
Trendmicro
The January 2024 Security Update Review↗2024-01-09
▶
Bleepingcomputer
Microsoft January 2024 Patch Tuesday fixes 49 flaws, 12 RCE bugs↗2024-01-09
▶
Trendmicro
The January 2024 Security Update Review↗2024-01-09
▶
CVE-2024-21306 — Microsoft vulnerability | cvebase