Summary
Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
What type of information could be disclosed by this vulnerability?
The type of information that could be disclosed if an attacker successfully exploited this vulnerability is Windows cryptographic secrets.
What type of information could be disclosed by this vulnerability?
An attacker who successfully exploited this vulnerability could disclose sensitive information such as KeyGuard (KG) keys, which are intended to be per-boot and used to protect sensitive data.
If an attacker can persist these keys, they could potentially decrypt any information that was encrypted with the KG key, leading to the exposure of a wide range of sensitive and confidential information.
Security updates
10.0.17763.5936 — https://support.microsoft.com/help/5039217
10.0.20348.2527 — https://support.microsoft.com/help/5039227
10.0.20348.2522 — https://support.microsoft.com/help/5039330
10.0.22000.3019 — https://support.microsoft.com/help/5039213
10.0.19044.4529 — https://support.microsoft.com/help/5039211
10.0.22621.3737 — https://support.microsoft.com/help/5039212
10.0.25398.950 — https://support.microsoft.com/help/5039236
Vulnerabilities 1
-
Medium 5.5
Windows Cryptographic Services Information Disclosure Vulnerability
Windows Cryptographic Services Information Disclosure Vulnerability
Revision history
-
#1
Information published.
References
-
CVE-2024-30096 Windows Cryptographic Services Information Disclosure Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30096
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss