CVE-2024-29064

MEDIUM

Published Apr 9, 2024 Modified Jan 9, 2025 CWE-130

Description

Windows Hyper-V Denial of Service Vulnerability

Is your site exposed to CVE-2024-29064?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

6.2

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness Type (CWE)

CWE-130 CWE-130

Affected Products

Vendor	Product	Versions
microsoft	windows_10_1507	< 10.0.10240.20596
microsoft	windows_10_1607	< 10.0.14393.6897
microsoft	windows_10_1809	< 10.0.17763.5696
microsoft	windows_10_21h2	< 10.0.19044.4291
microsoft	windows_10_22h2	< 10.0.19045.4291
microsoft	windows_11_21h2	< 10.0.22000.2899
microsoft	windows_11_22h2	< 10.0.22621.3447
microsoft	windows_11_23h2	< 10.0.22631.3447
microsoft	windows_server_2016	< 10.0.14393.6897
microsoft	windows_server_2019	< 10.0.17763.5696
microsoft	windows_server_2022	< 10.0.20348.2402
microsoft	windows_server_2022_23h2	< 10.0.25398.830

References

Advisories & Patches

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29064 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29064

Frequently Asked Questions

What is CVE-2024-29064? +

Windows Hyper-V Denial of Service Vulnerability It has a CVSS v3.1 base score of 6.2 (MEDIUM).

How severe is CVE-2024-29064? +

CVE-2024-29064 has a CVSS v3.1 score of 6.2 out of 10, rated MEDIUM. This is a medium-severity vulnerability that should be remediated as part of regular maintenance.

What products are affected by CVE-2024-29064? +

CVE-2024-29064 affects products from microsoft, specifically: windows_10_1507, windows_10_1607, windows_10_1809, windows_10_21h2, windows_10_22h2, windows_11_21h2, windows_11_22h2, windows_11_23h2, windows_server_2016, windows_server_2019, windows_server_2022, windows_server_2022_23h2. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2024-29064? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2026-14587

Neo4j's Bolt modern handshake decoder treats an overlong capability bit mask the same way it treats a truncated bit mask. …

CVE-2026-85494

Improper handling of length parameter inconsistency, Uncaught exception, Inefficient Algorithmic Complexity, Memory allocation with excessive size value, Initialization of a …

CVE-2026-54466

websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.7.5, the frame format in draft versions of the …

CVE-2026-6432

Improper bounds validation in EmberZNet SDK versions 9.0.2 and earlier may result in crashes or dynamic memory leakage.

CVE-2026-83745

Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift nodejs and D lang …

CVE-2026-77619

Vector is a high-performance observability data pipeline. From 0.15.0 until 0.57.0, the logstash source reads a 32-bit compressed-frame length from …