CVE-2024-38264

Summary

CVE-2024-38264 is a newly disclosed vulnerability affecting Microsoft Virtual Hard Disks (VHDX) that can result in a Denial of Service (DoS) condition. An attacker can exploit this issue by sending specially crafted requests to the VHDX file, causing it to become unresponsive and preventing the virtual machine from booting up. The exact cause of the vulnerability is still under investigation, but it is believed to stem from improper handling of certain data structures within the VHDX file format. Microsoft is currently working on a patch to address this issue and advises users to apply the update as soon as it becomes available to mitigate potential risks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.