CVE-2024-43631: Windows Secure Kernel Mode Elevation of Privilege Vulnerability
Published Nov 12, 2024
·Updated
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
Affected Software
32 affected componentsFixes available
Microsoft Windows Server 2025
Microsoft Windows Server 2025
Microsoft Windows Server 2022, 23H2 Edition
Microsoft Windows 11=23H2
Microsoft Windows 11=22H2
Microsoft Windows 11=22H2
Microsoft Windows 11=24H2
Microsoft Windows 11=24H2
Microsoft Windows 11=23H2
Microsoft Windows Server 2022
Microsoft Windows Server 2022
Microsoft Windows 10 21h2<10.0.19044.5131
Microsoft Windows 10 21h2<10.0.19044.5131
Microsoft Windows 10 21h2<10.0.19044.5131
Microsoft Windows 10 22h2<10.0.19045.5131
Microsoft Windows 10 22h2<10.0.19045.5131
Microsoft Windows 10 22h2<10.0.19045.5131
Microsoft Windows 11 22h2<10.0.22621.4460
Microsoft Windows 11 22h2<10.0.22621.4460
Microsoft Windows 11 23h2<10.0.22631.4460
Microsoft Windows 11 23h2<10.0.22631.4460
Microsoft Windows 11 24h2<10.0.26100.2314
Microsoft Windows 11 24h2<10.0.26100.2314
Microsoft Windows Server 2022<10.0.20348.2849
Microsoft Windows Server 2022 23h2<10.0.25398.1251
Microsoft Windows Server 2025<10.0.26100.2314
Microsoft Windows 10=22H2
Microsoft Windows 10=22H2
Microsoft Windows 10=22H2
Microsoft Windows 10=21H2
Microsoft Windows 10=21H2
Microsoft Windows 10=21H2
Remediation
Event History
Nov 12, 2024
CVE Published
via Microsoft·08:00 AM
Data Sourced
via Microsoft·08:00 AM
DescriptionSeverityWeakness
CVE Published
via MITRE·05:53 PM
Data Sourced
via MITRE·05:53 PM
DescriptionSeverity
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-43631?
CVE-2024-43631 is classified as a critical elevation of privilege vulnerability in the Windows Secure Kernel.
2
How do I fix CVE-2024-43631?
To fix CVE-2024-43631, you should apply the relevant security updates provided by Microsoft for your affected Windows version.
3
Which versions of Windows are affected by CVE-2024-43631?
CVE-2024-43631 affects various versions of Windows including Windows 10 (21H2, 22H2), Windows 11 (22H2, 23H2, 24H2), and Windows Server 2022.
4
What type of vulnerability is CVE-2024-43631?
CVE-2024-43631 is an elevation of privilege vulnerability that allows an attacker to execute arbitrary code with system-level privileges.
5
Can CVE-2024-43631 be exploited remotely?
CVE-2024-43631 requires local access to exploit, therefore it is not directly exploitable remotely.