CVE-2024-43524

MEDIUM

Published Oct 8, 2024 Modified Oct 17, 2024 CWE-118

Description

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

Is your site exposed to CVE-2024-43524?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

6.8

MEDIUM

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness Type (CWE)

CWE-118 CWE-118

Affected Products

Vendor	Product	Versions
microsoft	windows_10_1809	< 10.0.17763.6414
microsoft	windows_10_1809	< 10.0.17763.6414
microsoft	windows_10_21h2	< 10.0.19044.5011
microsoft	windows_10_22h2	< 10.0.19045.5011
microsoft	windows_11_21h2	< 10.0.22000.3260
microsoft	windows_11_22h2	< 10.0.22621.4317
microsoft	windows_11_23h2	< 10.0.22631.4317
microsoft	windows_11_24h2	< 10.0.26100.2033
microsoft	windows_server_2019	< 10.0.17763.6414
microsoft	windows_server_2022_23h2	< 10.0.25398.1189

References

Advisories & Patches

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43524

Frequently Asked Questions

What is CVE-2024-43524? +

Windows Mobile Broadband Driver Remote Code Execution Vulnerability It has a CVSS v3.1 base score of 6.8 (MEDIUM).

How severe is CVE-2024-43524? +

CVE-2024-43524 has a CVSS v3.1 score of 6.8 out of 10, rated MEDIUM. This is a medium-severity vulnerability that should be remediated as part of regular maintenance.

What products are affected by CVE-2024-43524? +

CVE-2024-43524 affects products from microsoft, specifically: windows_10_1809, windows_10_21h2, windows_10_22h2, windows_11_21h2, windows_11_22h2, windows_11_23h2, windows_11_24h2, windows_server_2019, windows_server_2022_23h2. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2024-43524? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2026-113239 8.8

Range error in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary …

CVE-2023-37921 7.8

Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave 3.3.115. A specially crafted .vcd file can …

CVE-2026-50367 7.8

Incorrect access of indexable resource ('range error') in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

CVE-2023-37923 7.8

Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave 3.3.115. A specially crafted .vcd file can …

CVE-2023-37922 7.8

Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave 3.3.115. A specially crafted .vcd file can …

CVE-2025-48902 6.6

Vulnerability of uncontrolled system resource applications in the setting module Impact: Successful exploitation of this vulnerability may affect availability.