CVE-2024-38147: Microsoft DWM Core Library Elevation of Privilege Vulnerability
Published Aug 13, 2024
·Updated
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Affected Software
25 affected componentsFixes available
Microsoft Windows Server 2022, 23H2 Edition
Microsoft Windows 11=23H2
Microsoft Windows 11=22H2
Microsoft Windows 11=22H2
Microsoft Windows 11=24H2
Microsoft Windows 11=24H2
Microsoft Windows 11=21H2
Microsoft Windows 11=21H2
Microsoft Windows 11=23H2
Microsoft Windows Server 2022
Microsoft Windows Server 2022
Microsoft Windows 10 21h2<10.0.19044.4780
Microsoft Windows 10 22h2<10.0.19045.4780
Microsoft Windows 11 21h2<10.0.22000.3147
Microsoft Windows 11 22h2<10.0.22621.4037
Microsoft Windows 11 23h2<10.0.22631.4037
Microsoft Windows 11 24h2<10.0.26100.1457
Microsoft Windows Server 2022<10.0.20348.2655
Microsoft Windows Server 2022 23h2<10.0.25398.1085
Microsoft Windows 10=22H2
Microsoft Windows 10=22H2
Microsoft Windows 10=22H2
Microsoft Windows 10=21H2
Microsoft Windows 10=21H2
Microsoft Windows 10=21H2
Remediation
Event History
Aug 13, 2024
CVE Published
via Microsoft·07:00 AM
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
CVE Published
via MITRE·05:30 PM
Data Sourced
via MITRE·05:30 PM
DescriptionSeverity
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-38147?
CVE-2024-38147 has a severity rating that indicates it can lead to an elevation of privilege.
2
How do I fix CVE-2024-38147?
To fix CVE-2024-38147, apply the latest patches available for your affected Microsoft Windows product.
3
Which versions of Windows are affected by CVE-2024-38147?
CVE-2024-38147 affects Windows 10, Windows 11, and Windows Server 2022 across various versions.
4
Can CVE-2024-38147 be exploited remotely?
CVE-2024-38147 is classified as an elevation of privilege vulnerability and typically requires local access or exploitation to authenticate.
5
What are the recommended actions for CVE-2024-38147?
It is recommended to regularly check for updates and install security patches pertaining to CVE-2024-38147 as soon as they become available.