This vulnerability, identified as CVE-2024-43584, affects the Windows Scripting Engine in Microsoft Windows 11 version 21H2 (build 10.0.22000.0). It is categorized as a protection mechanism failure (CWE-693) that enables a security feature bypass. The CVSS 3.1 base score is 7.7, indicating high severity, with an attack vector limited to local access, low attack complexity, no privileges required, and no user interaction needed. The impact includes high confidentiality and integrity impact but no availability impact. Microsoft has issued an official fix to address this vulnerability.

The vulnerability allows an attacker with local access to bypass security features of the Windows Scripting Engine, potentially leading to unauthorized access or modification of sensitive information. The confidentiality and integrity of the system can be compromised. There is no known exploitation in the wild at this time.

An official fix is available from Microsoft for this vulnerability. It is recommended to apply the provided security updates to Windows 11 version 21H2 (build 10.0.22000.0) promptly to mitigate the risk. No additional mitigation steps are indicated beyond applying the official patch.