CVE Catalog

CVE-2024-30065

MediumCVSS 5.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.84%

54th percentile - higher than 54% of all known CVEs

Summary

A vulnerability in Windows Themes allows a Denial of Service (DoS) attack. An attacker can exploit a specially crafted theme file to cause system crash or hang.

Risk Assessment

The risk is that an attacker can remotely or locally cause system unavailability, disrupting services and potentially requiring manual restart.

Recommendation

It is recommended to immediately apply security updates released by Microsoft for Windows. Also, restrict loading of custom themes from untrusted sources.

Original NVD description (English source)

Windows Themes Denial of Service Vulnerability

Vulnerability data from NVD (NIST) · CISA KEV · EPSS