CVE:CVE-2023-24937
CNNVD:CNNVD-202306-907
Microsoft Windows CryptoAPI是美国微软（Microsoft）公司的一个在Windows 操作系统中添加的密码编译机能。作为资料加密与解密功能的重要基础，CryptoAPI 支持同步，异步的密钥加密处理，以及操作系统中的数字证书 的管理工作。
Microsoft Windows CryptoAPI存在安全漏洞。以下产品和版本受到影响：Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based Systems,Windows 10 Version 1809 for ARM64-based Systems,Windows Server 2019,Windows Server 2019 (Server Core installation),Windows Server 2022,Windows Server 2022 (Server Core installation),Windows 11 version 21H2 for x64-based Systems,Windows 11 version 21H2 for ARM64-based Systems,Windows 10 Version 21H2 for 32-bit Systems,Windows 10 Version 21H2 for ARM64-based Systems,Windows 10 Version 21H2 for x64-based Systems,Windows 11 Version 22H2 for ARM64-based Systems,Windows 11 Version 22H2 for x64-based Systems,Windows 10 Version 22H2 for x64-based Systems,Windows 10 Version 22H2 for ARM64-based Systems,Windows 10 Version 22H2 for 32-bit Systems。
solution:Upgrade microsoft windows_10_1809 to a higher version than 10.0.17763.4499,and avoid the version (,10.0.17763.4499); Upgrade microsoft windows_10_21h2 to a higher version than 10.0.19045.3087,and avoid the version (,10.0.19045.3087); Upgrade microsoft windows_10_22h2 to a higher version than 10.0.19045.3087,and avoid the version (,10.0.19045.3087); Upgrade microsoft windows_11_21h2 to a higher version than 10.0.22000.2057,and avoid the version (,10.0.22000.2057); Upgrade microsoft windows_11_22h2 to a higher version than 10.0.22621.1848,and avoid the version (,10.0.22621.1848); Upgrade microsoft windows_server_2019 to a higher version than -; Upgrade microsoft windows_server_2022 to a higher version than -