CVE-2024-38202 | Windows - Windows Update Operational Intel

Executive Risk Summary

"An elevation of privilege vulnerability exists in Windows Update, potentially enabling an attacker with basic user privileges to reintroduce previously mitigated vulnerabilities or circumvent some features of Virtualization Based Security (VBS). The vulnerability requires additional interaction by a privileged user to be successful and can be mitigated by applying the available security update."

Operational Audit Arsenal

Target Type Executable

Target Asset Windows Update

Standard Path %windir%\System32

PowerShell

# 🛠️ Senior Engineer Universal Audit
# Target: Windows Update (Executable)
$Targets = 'Windows Update'
$SearchPaths = @("$env:windir\System32", "$env:ProgramFiles", "${env:ProgramFiles(x86)}")

Get-ChildItem -Path $SearchPaths -Include $Targets -Recurse -ErrorAction SilentlyContinue | 
Select-Object FullName, @{Name="Version";Expression={$_.VersionInfo.ProductVersion}}