PatchTheCVECVE-2024-38202: Summary Microsoft was notified that an elevation of privilege vulnerability exists in Windows Update, potentia
CVE-2024-38202 is a high-severity flaw (CVSS 7.3) affecting windows 10 1607, windows 10 1809, windows 10 21h2. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Summary Microsoft was notified that an elevation of privilege vulnerability exists in Windows Update, potentially enabling an attacker with basic user privileges to reintroduce previously mitigated vulnerabilities or circumvent some features of Virtualization Based Security (VBS). However, an attacker attempting to exploit this vulnerability requires additional interaction by a privileged user to be successful. Microsoft has developed a security
Why this priority
- High severity
- On your watchlist
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 7.3 (High) |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | Required |
| EPSS exploit chance | 1.7% (top 23%) |
| CISA exploited list | No |
| Weakness | CWE-284 |
| Published | 2024-08-08 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2024-38202?
windows 10 1607: mitigate or apply the listed mitigation; windows 10 1809: mitigate or apply the listed mitigation; windows 10 21h2: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2024-38202 being exploited?
CVE-2024-38202 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2024-38202 affect?
CVE-2024-38202 affects windows 10 1607, windows 10 1809, windows 10 21h2. Severity is high (CVSS 7.3). Summary Microsoft was notified that an elevation of privilege vulnerability exists in Windows Update, potentially enabling an attacker with basic user privileges to reintroduce previously mitigated vulnerabilities or circumvent some feature
How urgent is CVE-2024-38202?
Priority 50/100. High severity; On your watchlist
Software pages
Related CVEs
- CVE-2026-69966 HIGH 7.8 UPGRADE UPGRADE Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privile
- CVE-2026-69967 MEDIUM 5.5 UPGRADE UPGRADE Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
- CVE-2026-83666 HIGH 7.0 UPGRADE UPGRADE Concurrent execution using shared resource with improper synchronization ('race condition') in Active Director
- CVE-2026-83667 MEDIUM 6.5 UPGRADE UPGRADE Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a ne
- CVE-2026-83670 HIGH 7.5 UPGRADE UPGRADE Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose infor