MSRC-CVE-2024-26160 — Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability

Summary

Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

Details

What type of information could be disclosed by this vulnerability?
The type of information that could be disclosed if an attacker successfully exploited this vulnerability is the contents of Kernel memory. An attacker could read the contents of Kernel memory from a user mode process.

Security updates
10.0.22621.3296 — https://support.microsoft.com/help/5035853
10.0.25398.763 — https://support.microsoft.com/help/5035856

Vulnerabilities 1

Medium 5.5

CVE-2024-26160 Public exploit EPSS 11%

Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability

Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability

Microsoft Windows 11 version 23H2 Windows 11 version 22H2 Windows Server 2022, 23H2 Edition (Server Core installation) Windows

Mar 12, 2024

Revision history

2024-03-12 #1
Information published.

References

CVE-2024-26160 Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26160
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss