Findings

CVE-2024-43572

Microsoft Windows Management Console Remote Code Execution Vulnerability

Published Oct 8, 2024 · updated Jun 17, 2026 · microsoft windows 10 1507

Microsoft Windows Management Console contains unspecified vulnerability that allows for remote code execution.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 8, 2024 · Catalog

    Detected

    Microsoft Windows Management Console contains unspecified vulnerability that allows for remote code execution.

  2. Oct 8, 2024 · CISA KEV

    Known exploited

    Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

  3. Oct 29, 2024 · CISA KEV

    Remediation due

    Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

  4. Jun 17, 2026 · Catalog

    Updated

    Microsoft Windows Management Console contains unspecified vulnerability that allows for remote code execution.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CISA due date Oct 29, 2024

Affected

  • cpe microsoft/windows 10 1507version unspecified
  • cpe microsoft/windows 10 1607version unspecified
  • cpe microsoft/windows 10 1809version unspecified
  • cpe microsoft/windows 10 21h2version unspecified
  • vendor Microsoft Windowsversion unspecified

Sources

  • CISA KEVCVE-2024-43572

    Microsoft Windows Management Console contains unspecified vulnerability that allows for remote code execution.

    cisa.gov
  • CVE.orgCVE-2024-43572

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2024-43572

    30-day exploitation probability 66.7%

    first.org
  • NIST NVDCVE-2024-43572

    Microsoft Management Console Remote Code Execution Vulnerability

    nvd.nist.gov

References