VDB
CISA-2024-28907
CISA-2024-28907
PUBLISHED
CVSS 7.8 HIGH
Reported by microsoft · Published April 9, 2024
Microsoft Brokering File System Elevation of Privilege Vulnerability
Risk Scores
CVSS 3.1
7.8
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Windows Server 2022, 23H2 Edition (Server Core installation) | 10.0.25398.0 |
| Microsoft | Windows Server 2022, 23H2 Edition (Server Core installation) | 10.0.25398.0, 10.0.25398.0 |
| microsoft | windows_server_23h2 | 10.0.25398.0, 10.0.25398.0 |
Timeline
- Apr 9, 2024 CVE Published
- Jan 23, 2025 CVE Updated
- Apr 26, 2026 Security Advisory