MSRC-CVE-2024-38264 — Microsoft Virtual Hard Disk (VHDX) Denial of Service Vulnerability

Summary

Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to win a race condition.

Security updates
10.0.26100.2314 — https://support.microsoft.com/help/5046617
10.0.26100.2240 — https://support.microsoft.com/help/5046696
10.0.22621.4460 — https://support.microsoft.com/help/5046633
10.0.25398.1251 — https://support.microsoft.com/help/5046618

Vulnerabilities 1

Medium 5.9

CVE-2024-38264

Microsoft Virtual Hard Disk (VHDX) Denial of Service Vulnerability

Microsoft Virtual Hard Disk (VHDX) Denial of Service Vulnerability

Microsoft Windows Server 2025 Windows Server 2025 (Server Core installation) Windows 11 Version 24H2 Windows

Nov 12, 2024

Revision history

2024-11-12 #1
Information published.

References

CVE-2024-38264 Microsoft Virtual Hard Disk (VHDX) Denial of Service Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38264
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss