9.8
CRITICAL
CVE-2024-38063
Microsoft Windows TCP/IP Remote Code Execution
Description

Windows TCP/IP Remote Code Execution Vulnerability

INFO

Published Date :

Aug. 13, 2024, 6:15 p.m.

Last Modified :

Aug. 16, 2024, 8:54 p.m.

Source :

[email protected]

Remotely Exploitable :

Yes !

Impact Score :

5.9

Exploitability Score :

3.9
Public PoC/Exploit Available at Github

CVE-2024-38063 has a 34 public PoC/Exploit available at Github. Go to the Public Exploits tab to see the list.

Affected Products

The following products are affected by CVE-2024-38063 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Microsoft windows_server_2008
2 Microsoft windows_server_2012
3 Microsoft windows_server_2016
4 Microsoft windows_server_2019
5 Microsoft windows_10_1607
6 Microsoft windows_10_1809
7 Microsoft windows_10_21h2
8 Microsoft windows_10_22h2
9 Microsoft windows_server_2022
10 Microsoft windows_11_21h2
11 Microsoft windows_11_22h2
12 Microsoft windows_10_1507
13 Microsoft windows_11_23h2
14 Microsoft windows_server_2022_23h2
15 Microsoft windows_server_23h2
16 Microsoft windows_server_2012_r2
17 Microsoft windows_server_2008_r2
18 Microsoft windows_server_2008_sp2
19 Microsoft windows_11_24h2
: Total Affected Vendor : 1 | Products : 19
References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2024-38063.

URL Resource
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38063 Patch Vendor Advisory

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Profile Photo
Faizan-Khanx/CVE-2024-38063

CVE-2024-38063 - Remotely Exploiting The Kernel Via IPv6

HTML

Updated: 6 days, 7 hours ago
1 stars 0 fork 0 watcher
Born at : Sept. 10, 2024, 7:15 a.m. This repo has been linked 2 different CVEs too.
Profile Photo
FrancescoDiSalesGithub/quick-fix-cve-2024-38063

quick powershell script to fix cve-2024-38063

blueteam cve-2024-38063 fix powershell script workaround

PowerShell

Updated: 1 week, 1 day ago
0 stars 0 fork 0 watcher
Born at : Sept. 7, 2024, 4:27 p.m. This repo has been linked 1 different CVEs too.
Profile Photo
Brownpanda29/Cve-2024-38063

None

Python

Updated: 1 week, 6 days ago
0 stars 1 fork 1 watcher
Born at : Sept. 3, 2024, 2:36 p.m. This repo has been linked 1 different CVEs too.
Profile Photo
ps-interactive/cve-2024-38063

None

Python

Updated: 2 weeks ago
0 stars 0 fork 0 watcher
Born at : Sept. 2, 2024, 2:16 p.m. This repo has been linked 1 different CVEs too.
Profile Photo
Th3Tr1ckst3r/Denyv6

An IPv6 exploitation tool which demonstrates advanced networking techniques being used in the wild with CVE-2024-38063.

cve-2024-38063 cve-2024-38063-poc networking-concepts networking-in-python pentest-tool

Updated: 2 weeks ago
1 stars 0 fork 0 watcher
Born at : Sept. 2, 2024, 5 a.m. This repo has been linked 1 different CVEs too.
Profile Photo
KernelKraze/CVE-2024-38063_PoC

This is a C language program designed to test the Windows TCP/IP Remote Code Execution Vulnerability (CVE-2024-38063). It sends specially crafted IPv6 packets with embedded shellcode to exploit the vulnerability.

C Python

Updated: 1 week, 1 day ago
3 stars 1 fork 1 watcher
Born at : Sept. 1, 2024, 9:20 a.m. This repo has been linked 1 different CVEs too.
Profile Photo
ThemeHackers/CVE-2024-38063

CVE-2024-38063 is a critical security vulnerability in the Windows TCP/IP stack that allows for remote code execution (RCE)

Python

Updated: 1 week, 1 day ago
4 stars 0 fork 0 watcher
Born at : Aug. 31, 2024, 1:56 p.m. This repo has been linked 1 different CVEs too.
Profile Photo
AntonioTanco/Disable-IPv6-via-Powershell

None

PowerShell

Updated: 2 weeks, 4 days ago
0 stars 0 fork 0 watcher
Born at : Aug. 29, 2024, 4:17 a.m. This repo has been linked 1 different CVEs too.
Profile Photo
AdminPentester/CVE-2024-38063-

Remotely Exploiting The Kernel Via IPv6

Updated: 2 weeks, 3 days ago
1 stars 0 fork 0 watcher
Born at : Aug. 28, 2024, 3:28 p.m. This repo has been linked 2 different CVEs too.
Profile Photo
zenzue/CVE-2024-38063-POC

potential memory corruption vulnerabilities in IPv6 networks.

Python

Updated: 1 week, 1 day ago
4 stars 3 fork 3 watcher
Born at : Aug. 28, 2024, 8:57 a.m. This repo has been linked 1 different CVEs too.
Profile Photo
PumpkinBridge/Windows-CVE-2024-38063

Windows TCP/IP IPv6(CVE-2024-38063)

Python

Updated: 1 week, 4 days ago
2 stars 0 fork 0 watcher
Born at : Aug. 28, 2024, 1:46 a.m. This repo has been linked 1 different CVEs too.
Profile Photo
patchpoint/CVE-2024-38063

None

Python

Updated: 1 week, 4 days ago
14 stars 2 fork 2 watcher
Born at : Aug. 27, 2024, 3:21 p.m. This repo has been linked 1 different CVEs too.
Profile Photo
ynwarcs/CVE-2024-38063

poc for CVE-2024-38063 (RCE in tcpip.sys)

Python

Updated: 1 week, 1 day ago
540 stars 99 fork 99 watcher
Born at : Aug. 24, 2024, 6:25 p.m. This repo has been linked 1 different CVEs too.
Profile Photo
haroonawanofficial/CVE-2024-38063-Research-Tool

This is a functional proof of concept (PoC) for CVE-2024-38063. However, it's important to note that this CVE is theoretical and not exploitable in a real-world scenario. To enhance understanding for learners, I have developed a research tool that covers both past and newly reported TCP/IP vulnerabilities in CVEs

Perl

Updated: 2 weeks ago
4 stars 1 fork 1 watcher
Born at : Aug. 24, 2024, 3:04 p.m. This repo has been linked 1 different CVEs too.
Profile Photo
Th3Tr1ckst3r/CVE-2024-38063

CVE-2024-38063 research so you don't have to.

cve-2024-38063 cve-2024-38063-poc

Updated: 2 weeks, 2 days ago
2 stars 0 fork 0 watcher
Born at : Aug. 23, 2024, 6:28 a.m. This repo has been linked 1 different CVEs too.

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2024-38063 vulnerability anywhere in the article.

  • Cybersecurity News
20+ Victims and Counting: Lynx Ransomware’s Swift Rise

The Tor site of Lynx | Image: Rapid7In a recent report from Rapid7 Labs, the Lynx ransomware group has emerged as a new threat in the ever-evolving landscape of cybercrime. Identified in July 2024, Ly ... Read more

Published Date: Sep 15, 2024 (1 day, 19 hours ago)
CVE-2024-45409 CVE-2024-39714 CVE-2024-38650 CVE-2024-43403 CVE-2024-38063 CVE-2017-0199
  • Cybersecurity News
Citrix Workspace App Users Urged to Update Following Two Privilege Escalation Flaws

In a security advisory released recently, Cloud Software Group has disclosed two vulnerabilities affecting the widely used Citrix Workspace app for Windows. These vulnerabilities, identified as CVE-20 ... Read more

Published Date: Sep 13, 2024 (3 days, 12 hours ago)
CVE-2024-7890 CVE-2024-7889 CVE-2024-45032 CVE-2024-35783 CVE-2024-33698 CVE-2024-7261 CVE-2024-43202 CVE-2024-38063 CVE-2024-6387 CVE-2024-1024 ...+1 more CVE
  • Cybersecurity News
CVE-2024-45409 (CVSS 10): Critical Ruby-SAML Flaw Leaves User Accounts Exposed

A critical security vulnerability, CVE-2024-45409, has been identified in the Ruby-SAML library, a widely used tool for implementing SAML (Security Assertion Markup Language) authorization on the clie ... Read more

Published Date: Sep 12, 2024 (4 days, 17 hours ago)
CVE-2024-45409 CVE-2024-8517 CVE-2024-38063 CVE-2024-41107 CVE-2024-36383 CVE-2024-31214 CVE-2024-24809
  • Cybersecurity News
CosmicBeetle’s ScRansom Ransomware: A Growing Threat to European and Asian Businesses

Encryption scheme utilized by the latest ScRansom samples | Image: ESETIn a significant development tracked by ESET researchers, the threat actor known as CosmicBeetle has intensified its ransomware o ... Read more

Published Date: Sep 12, 2024 (4 days, 17 hours ago)
CVE-2024-45032 CVE-2024-35783 CVE-2024-33698 CVE-2024-7261 CVE-2024-43202 CVE-2024-38063 CVE-2023-27532 CVE-2017-0144
  • Cybersecurity News
LNK Stomping (CVE-2024-38217): Microsoft Patches Years-Old Zero-Day Flaw

Image: Elastic SecurityMicrosoft’s September 2024 security update addresses a zero-day vulnerability affecting Smart App Control and SmartScreen. This vulnerability, dubbed “LNK stomping” (CVE-2024-38 ... Read more

Published Date: Sep 11, 2024 (5 days, 12 hours ago)
CVE-2024-38217 CVE-2024-45032 CVE-2024-35783 CVE-2024-33698 CVE-2024-7261 CVE-2024-43202 CVE-2024-38063
  • Cybersecurity News
Earth Preta’s Cyber Arsenal Expands: New Malware and Strategies Target APAC Governments

A new report from Trend Micro has revealed that Earth Preta, the notorious cyber espionage group, has significantly evolved its tactics and malware arsenal, posing a heightened threat to government en ... Read more

Published Date: Sep 11, 2024 (5 days, 18 hours ago)
CVE-2024-39714 CVE-2024-38650 CVE-2024-43403 CVE-2024-38063 CVE-2024-38200 CVE-2024-29849
  • Cybersecurity News
CVE-2024-8517: Critical SPIP Flaw Leaves Websites Vulnerable to Remote Attacks, PoC Published

The popular open-source content management system (CMS), SPIP, is facing a critical security vulnerability that could allow unauthenticated attackers to execute malicious code on affected servers. The ... Read more

Published Date: Sep 11, 2024 (5 days, 18 hours ago)
CVE-2024-39714 CVE-2024-38650 CVE-2024-8517 CVE-2024-43403 CVE-2024-38063 CVE-2024-38200
  • Cybersecurity News
HAProxy Vulnerability CVE-2024-45506 Under Active Exploit: Urgent Patching Required

In the latest security advisory, HAProxy revealed that CVE-2024-45506, a vulnerability in its popular load balancing and proxy software, is now actively exploited. The vulnerability, which has a CVSS ... Read more

Published Date: Sep 09, 2024 (1 week ago)
CVE-2024-39714 CVE-2024-38650 CVE-2024-45506 CVE-2024-43403 CVE-2024-7646 CVE-2024-38063 CVE-2024-38200 CVE-2023-25725
  • Cybersecurity News
AISURU Botnet Identified in Massive DDoS Attack on Steam

A massive, coordinated DDoS attack disrupted Steam services globally and the Perfect World Esports platform in China on the weekend of August 24-26, coinciding with the launch of the highly anticipate ... Read more

Published Date: Sep 02, 2024 (2 weeks ago)
CVE-2024-38653 CVE-2024-38063 CVE-2024-7029 CVE-2024-36268 CVE-2024-42458 CVE-2024-5274 CVE-2024-31214 CVE-2024-24809
  • The Register
Proof-of-concept code released for zero-click critical IPv6 Windows hole

Windows users who haven't yet installed the latest fixes to their operating systems will need to get a move on, as code now exists to exploit a critical Microsoft vulnerability announced by Redmond tw ... Read more

Published Date: Aug 28, 2024 (2 weeks, 4 days ago)
CVE-2024-38063
  • Cybersecurity News
CVE-2024-6633 (CVSS 9.8): Critical Flaw in Fortra FileCatalyst Workflow

Fortra, a prominent provider of enterprise file transfer solutions, has released an urgent security advisory highlighting two critical vulnerabilities within its FileCatalyst Workflow product. Designa ... Read more

Published Date: Aug 28, 2024 (2 weeks, 5 days ago)
CVE-2024-6633 CVE-2024-6632 CVE-2024-43202 CVE-2024-38063 CVE-2024-5276 CVE-2024-5275 CVE-2024-25153 CVE-2024-0204 CVE-2023-45614
  • Cybersecurity News
PoC Exploit Released for Arbitrary File Write Flaw (CVE-2024-22263) in Spring Cloud Data Flow

Security researcher Zeyad Azima from SecureLayer7 published the proof-of-concept exploit for arbitrary file write vulnerability (CVE-2024-22263) in Spring Cloud Data Flow, a widely-used tool for cloud ... Read more

Published Date: Aug 28, 2024 (2 weeks, 5 days ago)
CVE-2024-43403 CVE-2024-38063 CVE-2024-38200 CVE-2024-37084 CVE-2024-38100 CVE-2024-22263
  • Cybersecurity News
SSN, Banking Details at Risk in Major Texas Credit Union Breach

The largest credit union in Texas, Texas Dow Employees Credit Union (TDECU), has reported a significant data breach affecting more than 500,000 individuals. The incident may have compromised Social Se ... Read more

Published Date: Aug 28, 2024 (2 weeks, 5 days ago)
CVE-2024-43202 CVE-2024-38063 CVE-2024-27793 CVE-2023-45614 CVE-2023-34362
  • Dark Reading
PoC Exploit for Zero-Click Vulnerability Made Available to the Masses

Source: Ascannio via Alamy Stock PhotoA security researcher named "Ynwarcs" has published analysis of a proof-of-concept exploit code for a critical zero-click vulnerability in Windows TCP/IP.The vuln ... Read more

Published Date: Aug 27, 2024 (2 weeks, 5 days ago)
CVE-2024-38063
  • Cybersecurity News
CVE-2024-31214 & CVE-2024-24809: Traccar Users Urged to Update Immediately

Image: Horizon3Please enable JavaScriptTwo critical vulnerabilities have been discovered in the popular GPS tracking system Traccar, which is used for both personal and corporate applications. The vul ... Read more

Published Date: Aug 27, 2024 (2 weeks, 6 days ago)
CVE-2024-43403 CVE-2024-38063 CVE-2024-38200 CVE-2024-38100 CVE-2024-31214 CVE-2024-24809
  • malwaretech.com
CVE-2024-38063 - Remotely Exploiting The Kernel Via IPv6

Since the latest Windows patch dropped on the 13th of August I’ve been deep in the weeds of tcpip.sys (the kernel driver responsible for handling TCP/IP packets). A vulnerability with a 9.8 CVSS score ... Read more

Published Date: Aug 27, 2024 (2 weeks, 6 days ago)
CVE-2024-38063 CVE-2021-24086
  • Cybersecurity News
Zero-Click Windows RCE Threat: Researcher Publishes PoC Exploit for CVE-2024-38063

In a significant development for cybersecurity professionals, security researcher Ynwarcs has published an in-depth analysis and proof-of-concept (PoC) exploit code for a critical zero-click CVE-2024- ... Read more

Published Date: Aug 27, 2024 (2 weeks, 6 days ago)
CVE-2024-7263 CVE-2024-7262 CVE-2024-38063 CVE-2024-22169 CVE-2024-38054
  • Cybersecurity News
Google Chrome Faces Double Blow with New Zero-Day Flaw Exploits: CVE-2024-7965 and CVE-2024-7971

In a significant update to its security advisory, Google has confirmed that CVE-2024-7965, a high-severity zero-day vulnerability in the Chrome browser, has been actively exploited in the wild. This r ... Read more

Published Date: Aug 27, 2024 (2 weeks, 6 days ago)
CVE-2024-7971 CVE-2024-7965 CVE-2024-43202 CVE-2024-38063 CVE-2023-45614
  • Cybersecurity News
Hillstone Networks Addresses Critical RCE Vulnerability in WAF (CVE-2024-8073, CVSS 9.8)

Hillstone Networks, a global leader in network security solutions, has released a security advisory addressing a critical vulnerability (CVE-2024-8073) in its Web Application Firewall (WAF) product. T ... Read more

Published Date: Aug 26, 2024 (3 weeks ago)
CVE-2024-8073 CVE-2024-42992 CVE-2024-45163 CVE-2024-38063 CVE-2024-42458 CVE-2024-41667 CVE-2024-20399 CVE-2024-31214 CVE-2024-24809
  • Cybersecurity News
Exploit for CVE-2024-38054 Released: Elevation of Privilege Flaw in Windows Kernel Streaming WOW Thunk

Security researcher ‘Frost’ has released proof-of-concept exploit code for the CVE-2024-38054 vulnerability, escalating concerns over a recently patched Windows security flaw. This high-severity vulne ... Read more

Published Date: Aug 23, 2024 (3 weeks, 3 days ago)
CVE-2024-43202 CVE-2024-38063 CVE-2024-7553 CVE-2024-38054 CVE-2023-45614
  • Cybersecurity News
F5 Issues Security Advisories for NGINX Plus (CVE-2024-39792) & BIG-IP Next Central Manager (CVE-2024-39809)

F5, a prominent provider of application delivery and security solutions, has recently released security advisories addressing vulnerabilities in two of its products: NGINX Plus and BIG-IP Next Central ... Read more

Published Date: Aug 20, 2024 (3 weeks, 6 days ago)
CVE-2024-43202 CVE-2024-39809 CVE-2024-39792 CVE-2024-38063 CVE-2023-45614 CVE-2023-46748 CVE-2023-46747 CVE-2022-1388
  • Cybersecurity News
PrestaShop Websites Under Attack: GTAG Websocket Skimmer Steals Credit Card Data

Security researchers at Sucuri have discovered a new credit card skimmer exploiting a vulnerability in PrestaShop websites. This sophisticated attack uses a WebSocket connection to pilfer sensitive cu ... Read more

Published Date: Aug 20, 2024 (3 weeks, 6 days ago)
CVE-2024-43202 CVE-2024-38063 CVE-2023-45614 CVE-2023-39526
  • Cybersecurity News
HookChain: The Technique That Bypass Exposes EDR in 94% of Security Solutions

Image Credit: M4v3r1ckIn an ever-evolving cybersecurity landscape, where threats are becoming more sophisticated by the day, the focus on Endpoint Detection and Response (EDR) systems has never been m ... Read more

Published Date: Aug 19, 2024 (4 weeks ago)
CVE-2024-7646 CVE-2024-38063 CVE-2024-33536 CVE-2024-33535 CVE-2024-33533 CVE-2024-36268 CVE-2024-39891 CVE-2012-4792
  • Cybersecurity News
Beware of Fake PoC Exploits for 0-Click RCE CVE-2024-38063 on GitHub

Security researchers have discovered a series of fake proof-of-concept (PoC) exploit codes for the critical CVE-2024-38063 vulnerability affecting Windows systems. These fraudulent exploits, which hav ... Read more

Published Date: Aug 19, 2024 (4 weeks ago)
CVE-2024-38063 CVE-2023-31315 CVE-2024-40767 CVE-2023-6548
  • Cyber Security News
Cyber Security News Letter – Data Breaches, Vulnerability, Cyber Attack & Other Stories

The “Weekly Cyber Security News Letter – Data Breaches, Vulnerability, Cyber Attack & More” provides a comprehensive overview of the latest developments in the cybersecurity landscape. Each edition hi ... Read more

Published Date: Aug 18, 2024 (4 weeks, 1 day ago)
CVE-2024-38063 CVE-2024-22116 CVE-2023-31315 CVE-2024-5830 CVE-2024-30103
  • Cybersecurity News
Cybercriminals Evolve Social Engineering Tactics, Exploit CVE-2022-26923 in Sophisticated Campaign

Credential harvester prompt spawned by `AntiSpam.exe | Image: Rapid7 Recently, cybersecurity firm Rapid7 identified a series of sophisticated intrusion attempts linked to an ongoing social engineering ... Read more

Published Date: Aug 17, 2024 (4 weeks, 2 days ago)
CVE-2024-38063 CVE-2024-38200 CVE-2024-41110 CVE-2024-38100 CVE-2022-26923
  • schneier.com
New Windows IPv6 Zero-Click Vulnerability

The press is reporting a critical Windows vulnerability affecting IPv6. As Microsoft explained in its Tuesday advisory, unauthenticated attackers can exploit the flaw remotely in low-complexity attack ... Read more

Published Date: Aug 16, 2024 (1 month ago)
CVE-2024-38063
  • Cybersecurity News
Last Mile Reassembly Attacks Bypass Leading Secure Web Gateways

SquareX, along with its founder Vivek Ramachandran, a renowned cybersecurity expert, recently uncovered a vulnerability in Secure Web Gateway (SWG) systems, which are employed to safeguard corporate n ... Read more

Published Date: Aug 16, 2024 (1 month ago)
CVE-2024-28986 CVE-2024-38063 CVE-2024-6980 CVE-2024-6922 CVE-2024-39911 CVE-2024-38077 CVE-2024-34102
  • Cybersecurity News
Windows TCP/IP Vulnerability CVE-2024-38063: Researchers Hold Back Exploit Details Due to High Risk

In a recent August Patch Tuesday, Microsoft urgently addressed a critical security vulnerability within the Windows TCP/IP stack, identified as CVE-2024-38063. With a CVSS score of 9.8, this flaw has ... Read more

Published Date: Aug 15, 2024 (1 month ago)
CVE-2024-7570 CVE-2024-7569 CVE-2024-38063 CVE-2024-38202 CVE-2024-21302 CVE-2024-20416 CVE-2024-22442 CVE-2024-36401
  • Cybersecurity News
CVE-2024-42479 (CVSS 10) in Popular Python Package llama_cpp_python Exposes Millions to RCE

Please enable JavaScriptA severe security vulnerability has been discovered in the widely-used AI library llama_cpp_python, potentially allowing threat actors to execute malicious code on affected sys ... Read more

Published Date: Aug 15, 2024 (1 month ago)
CVE-2024-28986 CVE-2024-38063 CVE-2024-42479 CVE-2024-38856 CVE-2024-41637 CVE-2024-40075 CVE-2024-27348
  • BleepingComputer
Zero-click Windows TCP/IP RCE impacts all systems with IPv6 enabled

Microsoft warned customers this Tuesday to patch a critical TCP/IP remote code execution (RCE) vulnerability with an increased likelihood of exploitation that impacts all Windows systems using IPv6, w ... Read more

Published Date: Aug 14, 2024 (1 month ago)
CVE-2024-38063 CVE-2023-28231 CVE-2021-24086 CVE-2020-16899 CVE-2020-16898
  • BleepingComputer
Zero-click Windows TCP/IP RCE impacts all systems with IPv6 enabled, patch now

Microsoft warned customers this Tuesday to patch a critical TCP/IP remote code execution (RCE) vulnerability with an increased likelihood of exploitation that impacts all Windows systems using IPv6, w ... Read more

Published Date: Aug 14, 2024 (1 month ago)
CVE-2024-38063 CVE-2023-28231 CVE-2021-24086 CVE-2020-16899 CVE-2020-16898
  • crowdstrike.com
August 2024 Patch Tuesday: Six Zero-Days and Six Critical Vulnerabilities Amid 85 CVEs

Microsoft has released security updates for 85 vulnerabilities in its August 2024 Patch Tuesday rollout. These include six actively exploited zero-days (CVE-2024-38213, CVE-2024-38193, CVE-2024-38189, ... Read more

Published Date: Aug 14, 2024 (1 month ago)
CVE-2024-38213 CVE-2024-38199 CVE-2024-38193 CVE-2024-38189 CVE-2024-38178 CVE-2024-38160 CVE-2024-38159 CVE-2024-38140 CVE-2024-38109 CVE-2024-38107 ...+5 more CVE
  • security.nl
Microsoft verwacht misbruik van kritiek 'wormable' Windows TCP/IP-lek

Microsoft verwacht dat aanvallers misbruik zullen maken van een kritieke TCP/IP-kwetsbaarheid in Windows waardoor remote code execution zonder enige interactie van gebruikers mogelijk is. Volgens secu ... Read more

Published Date: Aug 14, 2024 (1 month ago)
CVE-2024-38063
  • The Cyber Express
Microsoft Tackles 9 Zero-Day Exploits in August 2024 Patch Tuesday Update

Microsoft has released its August 2024 Patch Tuesday update, addressing multiple vulnerabilities across its software ecosystem. This month’s update features fixes for a total of 90 vulnerabilities, in ... Read more

Published Date: Aug 14, 2024 (1 month ago)
CVE-2024-38199 CVE-2024-38160 CVE-2024-38159 CVE-2024-38140 CVE-2024-38109 CVE-2024-38063 CVE-2024-38200 CVE-2024-38202 CVE-2024-21302 CVE-2024-38206 ...+3 more CVE
  • Cyber Security News
Critical 0-Click RCE in Windows TCP/IP Stack Impacts All Systems

Microsoft has released an urgent security update to address a critical remote code execution vulnerability in the Windows TCP/IP stack. The flaw tracked as CVE-2024-38063, affects all supported Window ... Read more

Published Date: Aug 14, 2024 (1 month ago)
CVE-2024-38063
  • Cybersecurity News
CVE-2024-38063 (CVSS 9.8): 0-Click RCE Affects All Windows Systems

Please enable JavaScriptIn its latest Patch Tuesday security update, Microsoft has disclosed a critical vulnerability in the Windows TCP/IP stack that demands urgent attention. Among the 88 vulnerabil ... Read more

Published Date: Aug 14, 2024 (1 month ago)
CVE-2024-28986 CVE-2024-38063 CVE-2023-31315 CVE-2024-40767 CVE-2023-6548
  • TheCyberThrone
Microsoft Patch Tuesday-August 2024

Microsoft patched 90 CVEs in its August 2024 Patch Tuesday release, with seven rated critical, 82 rated as important, and one rated as moderate.This includes updates for vulnerabilities in Microsoft O ... Read more

Published Date: Aug 14, 2024 (1 month ago)
CVE-2024-38163 CVE-2024-38223 CVE-2024-38215 CVE-2024-38214 CVE-2024-38213 CVE-2024-38211 CVE-2024-38201 CVE-2024-38199 CVE-2024-38198 CVE-2024-38197 ...+83 more CVE

The following table lists the changes that have been made to the CVE-2024-38063 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • Initial Analysis by [email protected]

    Aug. 16, 2024

    Action Type Old Value New Value
    Changed Reference Type https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38063 No Types Assigned https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38063 Patch, Vendor Advisory
    Added CWE NIST NVD-CWE-noinfo
    Added CPE Configuration OR *cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:* versions up to (excluding) 10.0.10240.20751 *cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:* versions up to (excluding) 10.0.14393.7259 *cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:* versions up to (excluding) 10.0.17763.6189 *cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:* versions up to (excluding) 10.0.19044.4780 *cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:* versions up to (excluding) 10.0.19045.4780 *cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:* versions up to (excluding) 10.0.22000.3147 *cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:* versions up to (excluding) 10.0.22621.4037 *cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:* versions up to (excluding) 10.0.22631.4037 *cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:* versions up to (excluding) 10.0.26100.1457 *cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:* *cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:* *cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:* versions up to (excluding) 6.2.9200.25031 *cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:* *cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:* versions up to (excluding) 10.0.14393.7259 *cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:* versions up to (excluding) 10.0.17763.6189 *cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:* versions up to (excluding) 10.0.20348.2655 *cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:* versions up to (excluding) 10.0.25398.1085
  • CVE Received by [email protected]

    Aug. 13, 2024

    Action Type Old Value New Value
    Added Description Windows TCP/IP Remote Code Execution Vulnerability
    Added Reference Microsoft Corporation https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38063 [No types assigned]
    Added CWE Microsoft Corporation CWE-191
    Added CVSS V3.1 Microsoft Corporation AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2024-38063 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2024-38063 weaknesses.

CVSS31 - Vulnerability Scoring System
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
: