CVE-2024-20652
Published Jan 9, 2024
Last updated 4 months ago
Overview
- Description
- Windows HTML Platforms Security Feature Bypass Vulnerability
- Source
- secure@microsoft.com
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 8.1
- Impact score
- 5.9
- Exploitability score
- 2.2
- Vector string
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity
- HIGH
Weaknesses
- nvd@nist.gov
- NVD-CWE-noinfo
- secure@microsoft.com
- CWE-73
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*",
"vulnerable": true,
"matchCriteriaId": "46ABD897-272E-49BD-BCD1-79EA0908349D",
"versionEndExcluding": "10.0.10240.20402"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
"vulnerable": true,
"matchCriteriaId": "B85886E7-0E67-4BBD-9E42-4507DF422BCF",
"versionEndExcluding": "10.0.10240.20402"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
"vulnerable": true,
"matchCriteriaId": "1301CF7B-D772-4AAA-BFF2-88BF493A324E",
"versionEndExcluding": "10.0.14393.6614"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
"vulnerable": true,
"matchCriteriaId": "DDEB129C-34A6-47E5-A652-51FCE0A3A880",
"versionEndExcluding": "10.0.14393.6614"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*",
"vulnerable": true,
"matchCriteriaId": "F0470D92-707F-4073-886A-ECDC4F2E1CAC",
"versionEndExcluding": "10.0.17763.5329"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
"vulnerable": true,
"matchCriteriaId": "9C150F7E-8967-4AB8-8DF8-EBC89A10D554",
"versionEndExcluding": "10.0.17763.5329"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
"vulnerable": true,
"matchCriteriaId": "A7997F10-4040-4664-B55E-0039E25B4F79",
"versionEndExcluding": "10.0.17763.5329"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
"vulnerable": true,
"matchCriteriaId": "C541A6B6-7D07-4EA9-89FF-81D815A9476F",
"versionEndExcluding": "10.0.19044.3930"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
"vulnerable": true,
"matchCriteriaId": "5BFCE595-C6A9-4F10-9EC7-58C1D66BB436",
"versionEndExcluding": "10.0.19044.3930"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
"vulnerable": true,
"matchCriteriaId": "A49993E0-2369-48E3-A925-6405722F1A19",
"versionEndExcluding": "10.0.19044.3930"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
"vulnerable": true,
"matchCriteriaId": "5D738639-84ED-4215-82F1-7D94D68D3396",
"versionEndExcluding": "10.0.19045.3930"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
"vulnerable": true,
"matchCriteriaId": "047947E7-B85E-4D6A-9B92-E39E4828206E",
"versionEndExcluding": "10.0.19045.3930"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
"vulnerable": true,
"matchCriteriaId": "45296209-531C-48D1-84DA-FAD9E28E7999",
"versionEndExcluding": "10.0.19045.3930"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:arm64:*",
"vulnerable": true,
"matchCriteriaId": "6FA472E2-4501-4597-9979-796258111DA5",
"versionEndExcluding": "10.0.22000.2713"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:x64:*",
"vulnerable": true,
"matchCriteriaId": "0F377DD9-2DBF-4202-AF3F-6AC6A809F4E2",
"versionEndExcluding": "10.0.22000.2713"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:arm64:*",
"vulnerable": true,
"matchCriteriaId": "C48178EC-BDEE-4F78-BCFB-B125F5CA0A9E",
"versionEndExcluding": "10.0.22621.3007"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:x64:*",
"vulnerable": true,
"matchCriteriaId": "04C81079-1855-4F8C-A9E2-3E2CC796C4F0",
"versionEndExcluding": "10.0.22621.3007"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
"vulnerable": true,
"matchCriteriaId": "91F6049F-03C1-494C-8AA1-6DE27D335139",
"versionEndExcluding": "10.0.22631.3007"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
"vulnerable": true,
"matchCriteriaId": "A00CE59A-0762-4AA4-99DA-5C9545F85666",
"versionEndExcluding": "10.0.22631.3007"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
"vulnerable": true,
"matchCriteriaId": "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
"vulnerable": true,
"matchCriteriaId": "AB425562-C0A0-452E-AABE-F70522F15E1A"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DB79EE26-FC32-417D-A49C-A1A63165A968"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
}
],
"operator": "OR"
}
]
}
]