CVE-2024-38264: Microsoft Windows 11 22h2

Medium severity, CVSS 5.9. EPSS: 1.3% chance of exploitation in the next 30 days.

Microsoft Virtual Hard Disk (VHDX) Denial of Service Vulnerability

Affected products

• Microsoft Windows 11 22h2: before 10.0.22621.4460 (fixed in 10.0.22621.4460)
• Microsoft Windows 11 23h2: before 10.0.22631.4460 (fixed in 10.0.22631.4460)
• Microsoft Windows 11 24h2: before 10.0.26100.2314 (fixed in 10.0.26100.2314)
• Microsoft Windows Server 2022 23h2: before 10.0.25398.1251 (fixed in 10.0.25398.1251)
• Microsoft Windows Server 2025: before 10.0.26100.2314 (fixed in 10.0.26100.2314)

Published 2024-11-12. Last modified 2026-06-17.