CVE-2024-43491
Microsoft
CVE-2024-43491 is a vulnerability in the Microsoft Windows 10 servicing stack that causes the rollback of fixes for optional components. This issue specifically affects Windows 10 version 1507, potentially allowing attackers to re-exploit previously mitigated vulnerabilities. Despite the CVSS score of 9.8, SOCRadar's Vulnerability Risk Score (SVRS) is 30, which highlights that although it’s important, it may not be as immediately critical as other vulnerabilities with higher SVRS scores because it only affects an end-of-life operating system. Affected systems include Windows 10 Enterprise 2015 LTSB and Windows 10 IoT Enterprise 2015 LTSB that have installed updates between March and August 2024. The vulnerability is resolved by installing the September 2024 servicing stack update (KB5043936) followed by the September 2024 security update (KB5043083). Given that Windows 10, version 1507 is largely end-of-life, organizations should prioritize patching if they still operate systems using this version, particularly the LTSB editions. Failure to apply the fixes could expose the systems to known exploits that were previously addressed.
Indicators of Compromise
Exploits
News
Social Media
Affected Software
References
CWE Details
CVE Radar
Real-time CVE Intelligence & Vulnerability Management Platform
CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.