What’s Vulnerable › Vulnerabilities

CVE-2024-45383

• Severity: medium (CVSS 5.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-09-12 · updated 2026-06-17
• Weakness: CWE-664

Description

A mishandling of IRP requests vulnerability exists in the HDAudBus_DMA interface of Microsoft High Definition Audio Bus Driver 10.0.19041.3636 (WinBuild.160101.0800). A specially crafted application can issue multiple IRP Complete requests which leads to a local denial-of-service. An attacker can execute malicious script/application to trigger this vulnerability.

Affected products

• Microsoft High Definition Audio Bus Driver: 10.0.19041.3636
• Microsoft HDAudBus.sys: 10.0.19041.3636 (WinBuild.160101.0800)

References

• https://talosintelligence.com/vulnerability_reports/TALOS-2024-2008
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2008

Get alerted when CVE-2024-45383 or the next vulnerability affects your stack