CVE-2024-38178: Microsoft Windows Scripting Engine Memory Corruption Vulnerability
Microsoft Windows Scripting Engine contains a memory corruption vulnerability that allows unauthenticated attacker to initiate remote code execution via a specially crafted URL.
Other sources
Scripting Engine Memory Corruption Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.25398.1085Patch KB5041573 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22631.4037Patch KB5041585 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19045.4780Patch KB5041580 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.10240.20751Patch KB5041782 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.3.9600.22134Fixed in 1.001Patch KB5041770 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.14393.7259Patch KB5041773 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19044.4780Patch KB5041580 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22621.4037Patch KB5041585 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.2655Patch KB5041160 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22000.3147Patch KB5041592 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.6189Patch KB5041578 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.1457Patch KB5041571
Event History
Frequently Asked Questions
What is the severity of CVE-2024-38178?
CVE-2024-38178 has a critical severity rating as it allows unauthenticated attackers to execute remote code.
How do I fix CVE-2024-38178?
To fix CVE-2024-38178, install the security patches provided by Microsoft for the affected Windows products.
What products are affected by CVE-2024-38178?
CVE-2024-38178 affects multiple versions of Windows, including Windows Server 2019, Windows 10, and Windows 11.
Can CVE-2024-38178 be exploited remotely?
Yes, CVE-2024-38178 can be exploited remotely through a specially crafted URL.
Is user authentication required to exploit CVE-2024-38178?
No, CVE-2024-38178 does not require user authentication for exploitation.