CVE-2024-21357: Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.3.9600.21813Patch KB5034819 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.1.7601.26961Patch KB5034809 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.2.9200.24710Patch KB5034830 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.0.6003.22511Patch KB5034833 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.14393.6709Patch KB5034767 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.10240.20469Patch KB5034774 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.25398.709Patch KB5034769 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19045.4046Patch KB5034763 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22621.3155Patch KB5034765 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22631.3155Patch KB5034765 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19044.4046Patch KB5034763 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.2322Patch KB5034770 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22000.2777Patch KB5034766 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.5458Patch KB5034768
Event History
Frequently Asked Questions
What is the severity of CVE-2024-21357?
CVE-2024-21357 is classified as a critical vulnerability that allows for remote code execution.
How do I fix CVE-2024-21357?
To mitigate CVE-2024-21357, apply the relevant security update as recommended by Microsoft.
Which software versions are affected by CVE-2024-21357?
CVE-2024-21357 affects various versions of Windows 10, Windows 11, and Windows Server, including specific updates to each.
What impact does CVE-2024-21357 have on my system?
If exploited, CVE-2024-21357 allows an attacker to execute arbitrary code on the affected system, potentially compromising its security.
Is there a workaround for CVE-2024-21357?
While a workaround is not recommended, disabling the Pragmatic General Multicast (PGM) feature may temporarily reduce the risk associated with CVE-2024-21357.