CVE-2024-37984: 
vulnerability analysis and mitigation

CVE-2024-37984 is a Secure Boot Security Feature Bypass Vulnerability that affects multiple versions of Microsoft Windows operating systems. The vulnerability was disclosed on July 09, 2024, and has been assigned a CVSS v3.1 base score of 8.4 (High) (NVD). The affected systems include various versions of Windows 10, Windows 11, and Windows Server from 2012 to 2022 (Rapid7).

The vulnerability has been classified with a CVSS vector of CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating a Local attack vector, Low attack complexity, No privileges required, No user interaction needed, and High impact on Confidentiality, Integrity, and Availability. The vulnerability is associated with CWE-121 (Stack-based Buffer Overflow) (NVD).

The vulnerability poses significant risks as it affects the Secure Boot feature and could potentially allow an attacker to bypass security features. With a High severity rating across Confidentiality, Integrity, and Availability, successful exploitation could lead to complete system compromise (NVD).

The vulnerability requires local access to the system for exploitation, with no privileges required and no user interaction needed. The attack complexity is considered Low, making it potentially easier to exploit once local access is obtained (AttackerKB).

Microsoft has released security updates to address this vulnerability across affected systems. Updates are available for Windows 10 (versions 1507, 1607, 1809, 21H2, 22H2), Windows 11 (versions 21H2, 22H2, 23H2), and Windows Server (2012, 2012 R2, 2016, 2019, 2022) (Rapid7).