Skip to content
OpenAdvisories
High MSRC-CVE-2024-38032 1 CVE

Microsoft Xbox Remote Code Execution Vulnerability

Published Jul 9, 2024 · Updated Jul 9, 2024

Summary

Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to gather information specific to the environment and take additional actions prior to exploitation to prepare the target environment.

According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?
The user would have to click on a specially crafted URL to be compromised by the attacker.

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to obtain special or uncommon hardware.

How could an attacker exploit the vulnerability?
An unauthenticated attacker could send a malicious networking packet to an adjacent system that is employing a Wi-Fi networking adapter, which could enable remote code execution.

Security updates
10.0.22000.3079 — https://support.microsoft.com/help/5040431
10.0.19044.4651 — https://support.microsoft.com/help/5040427
10.0.22621.3880 — https://support.microsoft.com/help/5040442

Vulnerabilities 1

Revision history

  1. #1

    Information published.

References