What is the severity of CVE-2024-37985?

CVE-2024-37985 is rated as a medium severity Windows Kernel Information Disclosure Vulnerability.

How do I fix CVE-2024-37985?

To fix CVE-2024-37985, apply the security update provided in KB5040442.

What versions of Windows are affected by CVE-2024-37985?

CVE-2024-37985 affects Windows 11 versions 22H2 and 23H2 on arm64 architecture.

What type of vulnerability is CVE-2024-37985?

CVE-2024-37985 is classified as an information disclosure vulnerability within the Windows Kernel.

Is CVE-2024-37985 exploited in the wild?

As of now, there is no public information indicating that CVE-2024-37985 is being actively exploited in the wild.

Vulnerability/
CVE-2024-37985

medium

5.9

CWE

1037

9/7/2024

17/9/2024

5/5/2025

CVE-2024-37985: Windows Kernel Information Disclosure Vulnerability

First published: Tue Jul 09 2024(Updated: )

Windows Kernel Information Disclosure Vulnerability

Credit: secure@microsoft.com

Affected Software	Affected Version	How to fix
Windows 11	=22H2	fix available externally
Windows 11	=23H2	fix available externally
Windows 11	<10.0.22621.3880
Windows 11	<10.0.22631.3880

Remedy

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37985

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2024-37985?
CVE-2024-37985 is rated as a medium severity Windows Kernel Information Disclosure Vulnerability.
How do I fix CVE-2024-37985?
To fix CVE-2024-37985, apply the security update provided in KB5040442.
What versions of Windows are affected by CVE-2024-37985?
CVE-2024-37985 affects Windows 11 versions 22H2 and 23H2 on arm64 architecture.
What type of vulnerability is CVE-2024-37985?
CVE-2024-37985 is classified as an information disclosure vulnerability within the Windows Kernel.
Is CVE-2024-37985 exploited in the wild?
As of now, there is no public information indicating that CVE-2024-37985 is being actively exploited in the wild.

agent/type
agent/first-publish-date
collector/the-register
source/The Register
alias/CVE-2024-38080
alias/CVE-2024-38112
alias/CVE-2024-35264
alias/CVE-2024-37985
alias/CVE-2024-38074
alias/CVE-2024-38076
alias/CVE-2024-38077
alias/CVE-2024-38060
alias/CVE-2024-38023
alias/CVE-2024-34123
alias/CVE-2024-20781
alias/CVE-2024-20782
alias/CVE-2024-20783
alias/CVE-2024-20785
alias/CVE-2024-34139
alias/CVE-2024-34140
alias/CVE-2024-26006
alias/CVE-2024-26015
alias/CVE-2024-6151
alias/CVE-2024-6286
alias/CVE-2024-31320
agent/references
agent/title
collector/msrc
source/Microsoft
agent/author
agent/weakness
agent/event
collector/msrc-cve
agent/description
agent/severity
agent/remedy
agent/trending
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/source
agent/softwarecombine
agent/tags
agent/software-canonical-lookup
agent/software-canonical-lookup-request
collector/nvd-api
source/NVD
vendor/microsoft
canonical/windows 11
version/windows 11/22h2
version/windows 11/23h2

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.