CVE-2024-38089

Microsoft Defender for IoT Elevation of Privilege Vulnerability

State: Published
Severity: 9.1 Critical
Published: Jul 9, 2024
Updated: Dec 9, 2025
Reserved: Jun 11, 2024

Description

Microsoft Defender for IoT Elevation of Privilege Vulnerability

Scores

CVSS	Score	Vector	Source
3.1	9.1 Critical	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C	microsoft

Weaknesses

CWE-269 Improper Privilege Management

Affected Products

Product	Versions
Microsoft Defender for IoTMicrosoft	22.0.0 to before 24.1.4Affected

References

Microsoft Defender for IoT Elevation of Privilege Vulnerabilityvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.