CVE-2024-38119
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk52th percentile - higher than 52% of all known CVEs
Summary
A remote code execution vulnerability in Windows Network Address Translation (NAT) allows an attacker to execute code remotely.
Risk Assessment
An attacker could exploit this vulnerability to take control of the system without authentication.
Recommendation
Install the latest Windows security updates.
Other vulnerabilities in Windows NAT
See all- CVE-2026-56179High
Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network.
- CVE-2026-56181High
Origin validation error in Windows Network Address Translation (NAT) allows an unauthenticated attacker to perform spoofing over an adjacent network.
- CVE-2024-21344Medium
A Denial of Service vulnerability in Windows Network Address Translation (NAT) allows an attacker to cause service failure or unavailability. The attack can be performed remotely without authentication.
- CVE-2024-21343Medium
Denial of service vulnerability in Windows Network Address Translation (NAT). An attacker could cause the NAT service to crash, potentially disrupting network connectivity.
- CVE-2021-26879High
Denial of service vulnerability in Windows Network Address Translation (NAT). An attacker could exploit this to cause a service failure.
Original NVD description (English source)
Windows Network Address Translation (NAT) Remote Code Execution Vulnerability