Medium · 5.5 CVE-2024-43500 EUVD-2024-40756GHSA-rf6g-5rmm-3x58

Windows Resilient File System (ReFS) Information Disclosure Vulnerability

Published Oct 8, 2024 · Updated Aug 19, 2026 · Assigned by microsoft

Vendor: Microsoft Product: Windows 11 version 22H2 Product: Windows 11 version 22H3 Product: Windows 11 version 23H2 Product: Windows 11 Version 24H2 Product: Windows Server 2022, 23H2 Edition (Server Core installation) Platform: Windows

Description

Windows Resilient File System (ReFS) Information Disclosure Vulnerability

Affected products

Vendor	Product	Affected	Fixed
Microsoft	Windows 11 version 22H2	10.0.22621.0 – < 10.0.22621.4317	10.0.22621.4317
Microsoft	Windows 11 version 22H3	10.0.22631.0 – < 10.0.22631.4317	10.0.22631.4317
Microsoft	Windows 11 Version 23H2	10.0.22631.0 – < 10.0.22631.4317	10.0.22631.4317
Microsoft	Windows 11 Version 24H2	10.0.26100.0 – < 10.0.26100.2033	10.0.26100.2033
Microsoft	Windows Server 2022, 23H2 Edition (Server Core installation)	10.0.25398.0 – < 10.0.25398.1189	10.0.25398.1189

Advisories 3

WID-SEC-2024-3121 Microsoft Windows: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 22, 2024
NCSC-2024-0392 Kwetsbaarheden verholpen in Microsoft Windows NCSC-NL (Netherlands) · Oct 8, 2024
MSRC-CVE-2024-43500 Windows Resilient File System (ReFS) Information Disclosure Vulnerability Microsoft Security Response Center · Oct 8, 2024

References

Windows Resilient File System (ReFS) Information Disclosure Vulnerability vendor-advisory patch