cvedb.io
CVE-2024-57972
MEDIUM · CVSS 6.5
EPSS exploitation probability: 0%
Published 2025-03-06T21:15:14.687 · Last modified 2026-06-17T08:14:20.923

Summary

The pairing API request handler in Microsoft HoloLens 1 (Windows Holographic) through 10.0.17763.3046 and HoloLens 2 (Windows Holographic) through 10.0.22621.1244 allows remote attackers to cause a Denial of Service (resource consumption and device unusability) by sending many requests through the Device Portal framework.

Does this affect you?

Add your gear to cvedb and we'll alert you only when a vendor you run ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.