HIGH

CVE-2024-43572

Microsoft Windows 10 1507 2024-10-08 CVSS v3.1

CVSS

7.8

KEV

Description

Microsoft Management Console Remote Code Execution Vulnerability

Summary dbcve.org

Microsoft Management Console (MMC) contains a remote code execution vulnerability. The CVSS 7.8 score indicates the vulnerability likely requires some form of user interaction or local access to exploit, allowing an attacker to execute arbitrary code in the context of the current user.

Mitigation

Apply the Microsoft security update for CVE-2024-43572 via Windows Update or the Microsoft Update Catalog to patch the vulnerable Microsoft Management Console component.

Patch Commit

Weakness (CWE)

CWE-707

EPSS Score

66.7%

Probability of exploitation in next 30 days

99.3th percentile

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43572 Patch, Vendor Advisory https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-43572 US Government Resource

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE