CVE-2024-38135: Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
Published Aug 13, 2024
·Updated
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
Affected Software
11 affected componentsFixes available
Microsoft Windows Server 2022, 23H2 Edition
Microsoft Windows 11=23H2
Microsoft Windows 11=22H2
Microsoft Windows 11=22H2
Microsoft Windows 11=24H2
Microsoft Windows 11=24H2
Microsoft Windows 11=23H2
Microsoft Windows 11 22h2<10.0.22621.4037
Microsoft Windows 11 23h2<10.0.22631.4037
Microsoft Windows 11 24h2<10.0.26100.1457
Microsoft Windows Server 2022 23h2<10.0.25398.1085
Remediation
Event History
Aug 13, 2024
CVE Published
via Microsoft·07:00 AM
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
CVE Published
via MITRE·05:30 PM
Data Sourced
via MITRE·05:30 PM
DescriptionSeverity
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-38135?
CVE-2024-38135 is rated as a high severity elevation of privilege vulnerability affecting Windows systems.
2
How do I fix CVE-2024-38135?
To fix CVE-2024-38135, apply the prescribed security updates from Microsoft for affected versions of Windows.
3
Which versions of Windows are affected by CVE-2024-38135?
CVE-2024-38135 affects specific versions of Windows 11, including 22H2, 23H2, and 24H2, as well as Windows Server 2022 23H2.
4
What type of vulnerability is CVE-2024-38135?
CVE-2024-38135 is classified as an elevation of privilege vulnerability within the Windows Resilient File System.
5
Can CVE-2024-38135 be exploited remotely?
CVE-2024-38135 requires local access to the system for exploitation, making it less likely to be exploited remotely.