6.5 Medium

CVE-2024-57972 The pairing API request handler in Microsoft HoloLens 1 (Windows Holographic) through 10.0.17763.3046 and HoloLens 2…

Description

The pairing API request handler in Microsoft HoloLens 1 (Windows Holographic) through 10.0.17763.3046 and HoloLens 2 (Windows Holographic) through 10.0.22621.1244 allows remote attackers to cause a Denial of Service (resource consumption and device unusability) by sending many requests through the Device Portal framework.

Affected products and versions

Product	Affected versions	Fixed in
HoloLens 10	10 → 10.0.22621.1244	No fix stated

Do you use HoloLens?

Track this CVE Watch HoloLens Check my SBOMs

www.cveye.io/en/cve/CVE-2024-57972

Timeline

Published March 6, 2025
Last modified March 7, 2025

References

github.com github.com

Track this CVE