CVE-2024-43643 - Windows USB Video Class System Driver Elevation of Privilege Vulnerability

Back Back to CVE browser

MEDIUM

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

Published Nov 12, 2024

6.8

MEDIUM

CVSS 3.1

EPSS 0.74%

Description

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

Affected products

Vendor Microsoft Product Windows 10 Version 1507 Default
unknown
Affected
- ≥ 10.0.10240.0, < 10.0.10240.20826
Vendor Microsoft Product Windows 10 Version 1607 Default
unknown
Affected
- ≥ 10.0.14393.0, < 10.0.14393.7515
Vendor Microsoft Product Windows 10 Version 1809 Default
unknown
Affected
- ≥ 10.0.17763.0, < 10.0.17763.6532
Vendor Microsoft Product Windows 10 Version 21H2 Default
unknown
Affected
- ≥ 10.0.19043.0, < 10.0.19044.5131
Vendor Microsoft Product Windows 10 Version 22H2 Default
unknown
Affected
- ≥ 10.0.19045.0, < 10.0.19045.5131
Vendor Microsoft Product Windows 11 Version 23H2 Default
unknown
Affected
- ≥ 10.0.22631.0, < 10.0.22631.4460
Vendor Microsoft Product Windows 11 Version 24H2 Default
unknown
Affected
- ≥ 10.0.26100.0, < 10.0.26100.2314
Vendor Microsoft Product Windows 11 version 22H2 Default
unknown
Affected
- ≥ 10.0.22621.0, < 10.0.22621.4460
Vendor Microsoft Product Windows 11 version 22H3 Default
unknown
Affected
- ≥ 10.0.22631.0, < 10.0.22631.4460
Vendor Microsoft Product Windows Server 2008 Service Pack 2 Default
unknown
Affected
- ≥ 6.0.6003.0, < 6.0.6003.22966
Vendor Microsoft Product Windows Server 2008 R2 Service Pack 1 Default
unknown
Affected
- ≥ 6.1.7601.0, < 6.1.7601.27415
Vendor Microsoft Product Windows Server 2008 R2 Service Pack 1 (Server Core installation) Default
unknown
Affected
- ≥ 6.1.7601.0, < 6.1.7601.27415
Vendor Microsoft Product Windows Server 2008 Service Pack 2 Default
unknown
Affected
- ≥ 6.0.6003.0, < 6.0.6003.22966
Vendor Microsoft Product Windows Server 2008 Service Pack 2 (Server Core installation) Default
unknown
Affected
- ≥ 6.0.6003.0, < 6.0.6003.22966
Vendor Microsoft Product Windows Server 2012 Default
unknown
Affected
- ≥ 6.2.9200.0, < 6.2.9200.25165
Vendor Microsoft Product Windows Server 2012 (Server Core installation) Default
unknown
Affected
- ≥ 6.2.9200.0, < 6.2.9200.25165
Vendor Microsoft Product Windows Server 2012 R2 Default
unknown
Affected
- ≥ 6.3.9600.0, < 6.3.9600.22267
Vendor Microsoft Product Windows Server 2012 R2 (Server Core installation) Default
unknown
Affected
- ≥ 6.3.9600.0, < 6.3.9600.22267
Vendor Microsoft Product Windows Server 2016 Default
unknown
Affected
- ≥ 10.0.14393.0, < 10.0.14393.7515
Vendor Microsoft Product Windows Server 2016 (Server Core installation) Default
unknown
Affected
- ≥ 10.0.14393.0, < 10.0.14393.7515
Vendor Microsoft Product Windows Server 2019 Default
unknown
Affected
- ≥ 10.0.17763.0, < 10.0.17763.6532
Vendor Microsoft Product Windows Server 2019 (Server Core installation) Default
unknown
Affected
- ≥ 10.0.17763.0, < 10.0.17763.6532
Vendor Microsoft Product Windows Server 2022 Default
unknown
Affected
- ≥ 10.0.20348.0, < 10.0.20348.2849
Vendor Microsoft Product Windows Server 2022, 23H2 Edition (Server Core installation) Default
unknown
Affected
- ≥ 10.0.25398.0, < 10.0.25398.1251
Vendor Microsoft Product Windows Server 2025 Default
unknown
Affected
- ≥ 10.0.26100.0, < 10.0.26100.2314
Vendor Microsoft Product Windows Server 2025 (Server Core installation) Default
unknown
Affected
- ≥ 10.0.26100.0, < 10.0.26100.2314

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Microsoft	Windows 10 Version 1507	unknown	Affected ≥ 10.0.10240.0, < 10.0.10240.20826
Microsoft	Windows 10 Version 1607	unknown	Affected ≥ 10.0.14393.0, < 10.0.14393.7515
Microsoft	Windows 10 Version 1809	unknown	Affected ≥ 10.0.17763.0, < 10.0.17763.6532
Microsoft	Windows 10 Version 21H2	unknown	Affected ≥ 10.0.19043.0, < 10.0.19044.5131
Microsoft	Windows 10 Version 22H2	unknown	Affected ≥ 10.0.19045.0, < 10.0.19045.5131
Microsoft	Windows 11 Version 23H2	unknown	Affected ≥ 10.0.22631.0, < 10.0.22631.4460
Microsoft	Windows 11 Version 24H2	unknown	Affected ≥ 10.0.26100.0, < 10.0.26100.2314
Microsoft	Windows 11 version 22H2	unknown	Affected ≥ 10.0.22621.0, < 10.0.22621.4460
Microsoft	Windows 11 version 22H3	unknown	Affected ≥ 10.0.22631.0, < 10.0.22631.4460
Microsoft	Windows Server 2008 Service Pack 2	unknown	Affected ≥ 6.0.6003.0, < 6.0.6003.22966
Microsoft	Windows Server 2008 R2 Service Pack 1	unknown	Affected ≥ 6.1.7601.0, < 6.1.7601.27415
Microsoft	Windows Server 2008 R2 Service Pack 1 (Server Core installation)	unknown	Affected ≥ 6.1.7601.0, < 6.1.7601.27415
Microsoft	Windows Server 2008 Service Pack 2	unknown	Affected ≥ 6.0.6003.0, < 6.0.6003.22966
Microsoft	Windows Server 2008 Service Pack 2 (Server Core installation)	unknown	Affected ≥ 6.0.6003.0, < 6.0.6003.22966
Microsoft	Windows Server 2012	unknown	Affected ≥ 6.2.9200.0, < 6.2.9200.25165
Microsoft	Windows Server 2012 (Server Core installation)	unknown	Affected ≥ 6.2.9200.0, < 6.2.9200.25165
Microsoft	Windows Server 2012 R2	unknown	Affected ≥ 6.3.9600.0, < 6.3.9600.22267
Microsoft	Windows Server 2012 R2 (Server Core installation)	unknown	Affected ≥ 6.3.9600.0, < 6.3.9600.22267
Microsoft	Windows Server 2016	unknown	Affected ≥ 10.0.14393.0, < 10.0.14393.7515
Microsoft	Windows Server 2016 (Server Core installation)	unknown	Affected ≥ 10.0.14393.0, < 10.0.14393.7515
Microsoft	Windows Server 2019	unknown	Affected ≥ 10.0.17763.0, < 10.0.17763.6532
Microsoft	Windows Server 2019 (Server Core installation)	unknown	Affected ≥ 10.0.17763.0, < 10.0.17763.6532
Microsoft	Windows Server 2022	unknown	Affected ≥ 10.0.20348.0, < 10.0.20348.2849
Microsoft	Windows Server 2022, 23H2 Edition (Server Core installation)	unknown	Affected ≥ 10.0.25398.0, < 10.0.25398.1251
Microsoft	Windows Server 2025	unknown	Affected ≥ 10.0.26100.0, < 10.0.26100.2314
Microsoft	Windows Server 2025 (Server Core installation)	unknown	Affected ≥ 10.0.26100.0, < 10.0.26100.2314

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-125

Out-of-bounds Read

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-40388
Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43643
vendor-advisoryPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-40388		Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43643		vendor-advisoryPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Nov 12, 2024

Updated Jul 8, 2025

Reserved Aug 14, 2024

Link CVE-2024-43643

CISA Vulnrichment

Updated Nov 13, 2024

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2024-43643

Red Hat

No data

ENISA EUVD

Assigner microsoft

Published Nov 12, 2024

Updated Jul 8, 2025

Link EUVD-2024-40388

GitHub

No data