Aller au contenu
Se connecter
7.0 Élevée

CVE-2024-30090 Microsoft Streaming Service Elevation of Privilege Vulnerability

Description

Microsoft Streaming Service Elevation of Privilege Vulnerability

Détail CVSS 3.1

Vecteur CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitable avec un accès local à la machine, avec un compte ordinaire et sans action d’un utilisateur ; un attaquant peut compromettre gravement la confidentialité, l’intégrité ou la disponibilité.

Vecteur d’attaque
Local
Complexité
Élevée
Privilèges requis
Faibles
Interaction
Aucune
Portée
Inchangée
Confidentialité
Élevé
Intégrité
Élevé
Disponibilité
Élevé

Produits et versions touchés

Produit Versions touchées Corrigé en
Windows 10 Version 1809 10.0 10.0.0 → < 10.0.17763.5936 10.0.17763.5936
Windows Server 2019 10.0 10.0.17763.0 → < 10.0.17763.5936 10.0.17763.5936
Windows Server 2019 (Server Core installation) 10.0 10.0.17763.0 → < 10.0.17763.5936 10.0.17763.5936
Windows Server 2022 10.0 10.0.20348.0 → < 10.0.20348.2527 10.0.20348.2527
Windows 11 version 21H2 10.0 10.0.22000.0 → < 10.0.22000.3019 10.0.22000.3019
Windows 10 Version 21H2 10.0 10.0.19044.0 → < 10.0.19044.4529 10.0.19044.4529
Windows 11 version 22H2 10.0 10.0.22621.0 → < 10.0.22621.3737 10.0.22621.3737
Windows 10 Version 22H2 10.0 10.0.19045.0 → < 10.0.19045.4529 10.0.19045.4529
Windows 11 version 22H3 10.0 10.0.22631.0 → < 10.0.22631.3737 10.0.22631.3737
Afficher les 15 autres branches
Produit Versions touchées Corrigé en
Windows 11 Version 23H2 10.0 10.0.22631.0 → < 10.0.22631.3737 10.0.22631.3737
Windows Server 2022, 23H2 Edition (Server Core installation) 10.0 10.0.25398.0 → < 10.0.25398.950 10.0.25398.950
Windows 10 Version 1507 10.0 10.0.10240.0 → < 10.0.10240.20680 10.0.10240.20680
Windows 10 Version 1607 10.0 10.0.14393.0 → < 10.0.14393.7070 10.0.14393.7070
Windows Server 2016 10.0 10.0.14393.0 → < 10.0.14393.7070 10.0.14393.7070
Windows Server 2016 (Server Core installation) 10.0 10.0.14393.0 → < 10.0.14393.7070 10.0.14393.7070
Windows Server 2008 Service Pack 2 6.0 6.0.6003.0 → < 6.0.6003.22720 6.0.6003.22720
Windows Server 2008 Service Pack 2 (Server Core installation) 6.0 6.0.6003.0 → < 6.0.6003.22720 6.0.6003.22720
Windows Server 2008 Service Pack 2 6.0 6.0.6003.0 → < 6.0.6003.22720 6.0.6003.22720
Windows Server 2008 R2 Service Pack 1 6.1 6.1.7601.0 → < 6.1.7601.27170 6.1.7601.27170
Windows Server 2008 R2 Service Pack 1 (Server Core installation) 6.1 6.1.7601.0 → < 6.1.7601.27170 6.1.7601.27170
Windows Server 2012 6.2 6.2.9200.0 → < 6.2.9200.24919 6.2.9200.24919
Windows Server 2012 (Server Core installation) 6.2 6.2.9200.0 → < 6.2.9200.24919 6.2.9200.24919
Windows Server 2012 R2 6.3 6.3.9600.0 → < 6.3.9600.22023 6.3.9600.22023
Windows Server 2012 R2 (Server Core installation) 6.3 6.3.9600.0 → < 6.3.9600.22023 6.3.9600.22023

Autres CVE de Windows 10 Version 1809

Les 5349 CVE de Windows 10 Version 1809 →
CVE-2026-108471 Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to… 8.8 Élevée CVE-2026-108136 Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally 7.8 Élevée CVE-2026-108129 Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network 6.5 Moyenne CVE-2026-108131 No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform… 7.5 Élevée
Suivre cette CVE