MSRC-CVE-2024-20690 — Windows Nearby Sharing Spoofing Vulnerability

Summary

Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?
This vulnerability could be triggered when a malicious actor spoofs a machine with the same name that a user is searching for.

Security updates
10.0.17763.5329 — https://support.microsoft.com/help/5034127
10.0.22000.2713 — https://support.microsoft.com/help/5034121
10.0.19044.3930 — https://support.microsoft.com/help/5034122
10.0.22621.3007 — https://support.microsoft.com/help/5034123

Vulnerabilities 1

Medium 6.5

CVE-2024-20690

Windows Nearby Sharing Spoofing Vulnerability

Windows Nearby Sharing Spoofing Vulnerability

Microsoft Windows 10 Version 1809 Windows 10 Version 21H2 Windows 10 Version 22H2 Windows

Jan 9, 2024

Revision history

2024-01-09 #1
Information published.

References

CVE-2024-20690 Windows Nearby Sharing Spoofing Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20690
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss