CVE-2024-26170

published 2024-03-12

CVE-2024-26170: Windows Composite Image File System (CimFS) Elevation of Privilege Vulnerability

high 7.8 CVSS 3.1

AV L AC L PR L UI N S U C H I H A H

Windows Composite Image File System (CimFS) Elevation of Privilege Vulnerability

Affected

28 ranges · showing 25

Vendor	Product	Version range	Fixed in
microsoft	windows_10_21h2	< 10.0.19044.4170	10.0.19044.4170
microsoft	windows_10_22h2	< 10.0.19045.4170	10.0.19045.4170
microsoft	windows_10_version_21h2	>= 10.0.19043.0 < 10.0.19044.4170	10.0.19044.4170
microsoft	windows_10_version_22h2	>= 10.0.19045.0 < 10.0.19045.4170	10.0.19045.4170
microsoft	windows_11_21h2	< 10.0.22000.2836	10.0.22000.2836
microsoft	windows_11_22h2	< 10.0.22621.3296	10.0.22621.3296
microsoft	windows_11_23h2	< 10.0.22631.3296	10.0.22631.3296
microsoft	windows_11_version_21h2	>= 10.0.0 < 10.0.22000.2836	10.0.22000.2836
microsoft	windows_11_version_22h2	>= 10.0.22621.0 < 10.0.22621.3296	10.0.22621.3296
microsoft	windows_11_version_22h3	>= 10.0.22631.0 < 10.0.22631.3296	10.0.22631.3296
microsoft	windows_11_version_23h2	>= 10.0.22631.0 < 10.0.22631.3296	10.0.22631.3296
microsoft	windows_server_2022	< 10.0.20348.2340	10.0.20348.2340
microsoft	windows_server_2022	>= 10.0.20348.0 < 10.0.20348.2340	10.0.20348.2340
microsoft	windows_server_2022_23h2	< 10.0.25398.763	10.0.25398.763
msrc	windows_10_version_21h2_for_32-bit_systems	—	—
msrc	windows_10_version_21h2_for_arm64-based_systems	—	—
msrc	windows_10_version_21h2_for_x64-based_systems	—	—
msrc	windows_10_version_22h2_for_32-bit_systems	—	—
msrc	windows_10_version_22h2_for_arm64-based_systems	—	—
msrc	windows_10_version_22h2_for_x64-based_systems	—	—
msrc	windows_11_version_21h2_for_arm64-based_systems	—	—
msrc	windows_11_version_21h2_for_x64-based_systems	—	—
msrc	windows_11_version_22h2_for_arm64-based_systems	—	—
msrc	windows_11_version_22h2_for_x64-based_systems	—	—
msrc	windows_11_version_23h2_for_arm64-based_systems	—	—

CWE-20