Skip to content
OpenAdvisories
High MSRC-CVE-2024-43583 1 CVE

Winlogon Elevation of Privilege Vulnerability

Published Oct 8, 2024 · Updated Dec 10, 2024 · Revision 3

Vendor: Microsoft

Summary

Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited, publicly disclosed before the fix — Exploitation More Likely. Customer action: Required.

Details

What privileges could be gained by an attacker who successfully exploited this vulnerability?
An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.

Are there any further actions I need to take to be protected from this vulnerability?
Yes. To address this vulnerability, ensure that a Microsoft first-party Input Method Editor (IME) is enabled on your device. By doing so, you can help protect your device from potential vulnerabilities associated with a third-party IME during the sign in process.
For further information on how to enable a Microsoft first-party IME on your device, see KB5046254: Vulnerability when using a third-party Input Method Editor at the Microsoft Windows sign in screen.

Security updates
10.0.17763.6659 — https://support.microsoft.com/help/5048661
10.0.20348.2966 — https://support.microsoft.com/help/5048654
10.0.20348.2908 — https://support.microsoft.com/help/5048800
10.0.22000.3260 — https://support.microsoft.com/help/5044280
10.0.19044.5247 — https://support.microsoft.com/help/5048652
6.1.7601.27467 — https://support.microsoft.com/help/5048695
6.1.7601.27467 — https://support.microsoft.com/help/5048676
10.0.22621.4602 — https://support.microsoft.com/help/5048685
10.0.25398.1308 — https://support.microsoft.com/help/5048653
10.0.26100.2605 — https://support.microsoft.com/help/5048667
10.0.10240.20857 — https://support.microsoft.com/help/5048703
10.0.14393.7606 — https://support.microsoft.com/help/5048671
6.0.6003.23016 — https://support.microsoft.com/help/5048710
6.0.6003.23016 — https://support.microsoft.com/help/5048744
6.2.9200.25222 — https://support.microsoft.com/help/5048699
6.3.9600.22318 — https://support.microsoft.com/help/5048735
10.0.26100.2528 — https://support.microsoft.com/help/5048794

Vulnerabilities 1

Revision history

  1. #3

    In the Security Updates table, the following changes have been made: 1) Added Windows Server 2025 as it is affected by this vulnerability. 2) To comprehensively address CVE-2024-43583, Microsoft has released December 2024 security updates for all supported editions of Windows. Microsoft recommends that customers install the updates to be fully protected from the vulnerability. Customers whose systems are configured to receive automatic updates do not need to take any further action.

  2. #2

    Updated FAQ information. This is an informational change only.

  3. #1

    Information published.

References