CVE-2024-26232 - Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

Back Back to CVE browser

HIGH

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

Published Apr 9, 2024

7.3

HIGH

CVSS 3.1

EPSS 0.93%

Description

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

Affected products

Vendor Microsoft Product Windows 10 Version 1507 Default
n/a
- Version
  10.0.10240.0
  Status
  affected
  Constraints
  <10.0.10240.20596
Vendor Microsoft Product Windows 10 Version 1607 Default
n/a
- Version
  10.0.14393.0
  Status
  affected
  Constraints
  <10.0.14393.6897
Vendor Microsoft Product Windows 10 Version 1809 Default
n/a
- Version
  10.0.0
  Status
  affected
  Constraints
  <10.0.17763.5696
- Version
  10.0.17763.0
  Status
  affected
  Constraints
  <10.0.17763.5696
Vendor Microsoft Product Windows 10 Version 21H2 Default
n/a
- Version
  10.0.19043.0
  Status
  affected
  Constraints
  <10.0.19044.4291
Vendor Microsoft Product Windows 10 Version 22H2 Default
n/a
- Version
  10.0.19045.0
  Status
  affected
  Constraints
  <10.0.19045.4291
Vendor Microsoft Product Windows 11 Version 23H2 Default
n/a
- Version
  10.0.22631.0
  Status
  affected
  Constraints
  <10.0.22631.3447
Vendor Microsoft Product Windows 11 version 21H2 Default
n/a
- Version
  10.0.0
  Status
  affected
  Constraints
  <10.0.22000.2899
Vendor Microsoft Product Windows 11 version 22H2 Default
n/a
- Version
  10.0.22621.0
  Status
  affected
  Constraints
  <10.0.22621.3447
Vendor Microsoft Product Windows 11 version 22H3 Default
n/a
- Version
  10.0.22631.0
  Status
  affected
  Constraints
  <10.0.22631.3447
Vendor Microsoft Product Windows Server 2008 Service Pack 2 Default
n/a
- Version
  6.0.6003.0
  Status
  affected
  Constraints
  <6.0.6003.22618
Vendor Microsoft Product Windows Server 2008 R2 Service Pack 1 Default
n/a
- Version
  6.1.7601.0
  Status
  affected
  Constraints
  <6.1.7601.27067
Vendor Microsoft Product Windows Server 2008 R2 Service Pack 1 (Server Core installation) Default
n/a
- Version
  6.1.7601.0
  Status
  affected
  Constraints
  <6.1.7601.27067
Vendor Microsoft Product Windows Server 2008 Service Pack 2 Default
n/a
- Version
  6.0.6003.0
  Status
  affected
  Constraints
  <6.0.6003.22618
Vendor Microsoft Product Windows Server 2008 Service Pack 2 (Server Core installation) Default
n/a
- Version
  6.0.6003.0
  Status
  affected
  Constraints
  <6.0.6003.22618
Vendor Microsoft Product Windows Server 2012 Default
n/a
- Version
  6.2.9200.0
  Status
  affected
  Constraints
  <6.2.9200.24821
Vendor Microsoft Product Windows Server 2012 (Server Core installation) Default
n/a
- Version
  6.2.9200.0
  Status
  affected
  Constraints
  <6.2.9200.24821
Vendor Microsoft Product Windows Server 2012 R2 Default
n/a
- Version
  6.3.9600.0
  Status
  affected
  Constraints
  <6.3.9600.21924
Vendor Microsoft Product Windows Server 2012 R2 (Server Core installation) Default
n/a
- Version
  6.3.9600.0
  Status
  affected
  Constraints
  <6.3.9600.21924
Vendor Microsoft Product Windows Server 2016 Default
n/a
- Version
  10.0.14393.0
  Status
  affected
  Constraints
  <10.0.14393.6897
Vendor Microsoft Product Windows Server 2016 (Server Core installation) Default
n/a
- Version
  10.0.14393.0
  Status
  affected
  Constraints
  <10.0.14393.6897
Vendor Microsoft Product Windows Server 2019 Default
n/a
- Version
  10.0.17763.0
  Status
  affected
  Constraints
  <10.0.17763.5696
Vendor Microsoft Product Windows Server 2019 (Server Core installation) Default
n/a
- Version
  10.0.17763.0
  Status
  affected
  Constraints
  <10.0.17763.5696
Vendor Microsoft Product Windows Server 2022 Default
n/a
- Version
  10.0.20348.0
  Status
  affected
  Constraints
  <10.0.20348.2402
Vendor Microsoft Product Windows Server 2022, 23H2 Edition (Server Core installation) Default
n/a
- Version
  10.0.25398.0
  Status
  affected
  Constraints
  <10.0.25398.830

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Microsoft

Windows 10 Version 1507

n/a

Version	Status	Constraints
10.0.10240.0	affected	<10.0.10240.20596

Microsoft

Windows 10 Version 1607

n/a

Version	Status	Constraints
10.0.14393.0	affected	<10.0.14393.6897

Microsoft

Windows 10 Version 1809

n/a

Version	Status	Constraints
10.0.0	affected	<10.0.17763.5696
10.0.17763.0	affected	<10.0.17763.5696

Microsoft

Windows 10 Version 21H2

n/a

Version	Status	Constraints
10.0.19043.0	affected	<10.0.19044.4291

Microsoft

Windows 10 Version 22H2

n/a

Version	Status	Constraints
10.0.19045.0	affected	<10.0.19045.4291

Microsoft

Windows 11 Version 23H2

n/a

Version	Status	Constraints
10.0.22631.0	affected	<10.0.22631.3447

Microsoft

Windows 11 version 21H2

n/a

Version	Status	Constraints
10.0.0	affected	<10.0.22000.2899

Microsoft

Windows 11 version 22H2

n/a

Version	Status	Constraints
10.0.22621.0	affected	<10.0.22621.3447

Microsoft

Windows 11 version 22H3

n/a

Version	Status	Constraints
10.0.22631.0	affected	<10.0.22631.3447

Microsoft

Windows Server 2008 Service Pack 2

n/a

Version	Status	Constraints
6.0.6003.0	affected	<6.0.6003.22618

Microsoft

Windows Server 2008 R2 Service Pack 1

n/a

Version	Status	Constraints
6.1.7601.0	affected	<6.1.7601.27067

Microsoft

Windows Server 2008 R2 Service Pack 1 (Server Core installation)

n/a

Version	Status	Constraints
6.1.7601.0	affected	<6.1.7601.27067

Microsoft

Windows Server 2008 Service Pack 2

n/a

Version	Status	Constraints
6.0.6003.0	affected	<6.0.6003.22618

Microsoft

Windows Server 2008 Service Pack 2 (Server Core installation)

n/a

Version	Status	Constraints
6.0.6003.0	affected	<6.0.6003.22618

Microsoft

Windows Server 2012

n/a

Version	Status	Constraints
6.2.9200.0	affected	<6.2.9200.24821

Microsoft

Windows Server 2012 (Server Core installation)

n/a

Version	Status	Constraints
6.2.9200.0	affected	<6.2.9200.24821

Microsoft

Windows Server 2012 R2

n/a

Version	Status	Constraints
6.3.9600.0	affected	<6.3.9600.21924

Microsoft

Windows Server 2012 R2 (Server Core installation)

n/a

Version	Status	Constraints
6.3.9600.0	affected	<6.3.9600.21924

Microsoft

Windows Server 2016

n/a

Version	Status	Constraints
10.0.14393.0	affected	<10.0.14393.6897

Microsoft

Windows Server 2016 (Server Core installation)

n/a

Version	Status	Constraints
10.0.14393.0	affected	<10.0.14393.6897

Microsoft

Windows Server 2019

n/a

Version	Status	Constraints
10.0.17763.0	affected	<10.0.17763.5696

Microsoft

Windows Server 2019 (Server Core installation)

n/a

Version	Status	Constraints
10.0.17763.0	affected	<10.0.17763.5696

Microsoft

Windows Server 2022

n/a

Version	Status	Constraints
10.0.20348.0	affected	<10.0.20348.2402

Microsoft

Windows Server 2022, 23H2 Edition (Server Core installation)

n/a

Version	Status	Constraints
10.0.25398.0	affected	<10.0.25398.830

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-843

References (1)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26232
vendor-advisoryVendor Advisory

Link	Providers	Tags
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26232		vendor-advisoryVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Apr 9, 2024

Updated May 3, 2025

Reserved Feb 15, 2024

Link CVE-2024-26232

CISA Vulnrichment

Updated May 15, 2024

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2024-26232

Red Hat

Severity n/a

Public date n/a

Links CVE-2024-26232