CVE-2024-38217: Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability
Microsoft Windows Mark of the Web (MOTW) contains a protection mechanism failure vulnerability that allows an attacker to bypass MOTW-based defenses. This can result in a limited loss of integrity and availability of security features such as Protected View in Microsoft Office, which rely on MOTW tagging.
Other sources
Windows Mark of the Web Security Feature Bypass Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.1.7601.27320Patch KB5043092 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.3.9600.22175Patch KB5043138 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.2.9200.25073Patch KB5043125 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.0.6003.22870Patch KB5043087 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.14393.7336Patch KB5043051 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.10240.20766Patch KB5043083 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.1742Patch KB5043080 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22631.4169Patch KB5043076 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.25398.1128Patch KB5043055 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19045.4894Patch KB5043064 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22621.4169Patch KB5043076 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19044.4894Patch KB5043064 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22000.3197Patch KB5043067 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.2700Fixed in 10.0.20348.2695Patch KB5042880 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.6293Patch KB5043050
Event History
Frequently Asked Questions
What is the severity of CVE-2024-38217?
CVE-2024-38217 has been rated with a moderate severity level due to its impact on the integrity and availability of security features like Protected View.
How do I fix CVE-2024-38217?
To fix CVE-2024-38217, it is recommended to apply the latest security patches provided by Microsoft for the affected versions of Windows.
Which versions of Windows are affected by CVE-2024-38217?
CVE-2024-38217 affects multiple versions of Windows, including Windows 10, Windows Server 2016, Windows Server 2019, Windows 11, and Windows Server 2022.
What type of vulnerability is CVE-2024-38217?
CVE-2024-38217 is classified as a protection mechanism failure vulnerability that allows attackers to bypass Mark of the Web-based defenses.
What are the potential impacts of CVE-2024-38217?
The potential impacts of CVE-2024-38217 include a limited loss of integrity and availability of security features in Microsoft Office applications.