CVE-2024-26160HighCVSS 5.5

Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability

Published
March 12, 2024
Last Modified
—

🔗 CVE IDs covered (1)

CVE-2024-26160 →

📋 Description

What type of information could be disclosed by this vulnerability? The type of information that could be disclosed if an attacker successfully exploited this vulnerability is the contents of Kernel memory. An attacker could read the contents of Kernel memory from a user mode process.

🎯 Affected products5

  • Windows 11 Version 22H2 for ARM64-based Systems
  • Windows 11 Version 22H2 for x64-based Systems
  • Windows 11 Version 23H2 for ARM64-based Systems
  • Windows 11 Version 23H2 for x64-based Systems
  • Windows Server 2022, 23H2 Edition (Server Core installation)

✅ Remediation

KB5035853 (Security Update) — fixed build 10.0.22621.3296 KB5035853 (Security Update) — fixed build 10.0.22631.3296 KB5035856 (Security Update) — fixed build 10.0.25398.763

🔗 References (5)