Constellation · CASCA

Constellation explorer

Every signal has a story.Follow the evidence.

Return to triage

Find a CVE by identifier or text

↵ select

Minimum eligible CVSSOrderKEV only

Start with evidence

Current exploration

CVE-2024-38217

Your trail

Where next?

Selected cve

CVE-2024-38217

Windows Mark of the Web Security Feature Bypass Vulnerability

46 retained evidence references · snapshot-bound · open authoritative view

StateSource-scoped evidence

Priority59.8–73.2

Coverage85.0%

Connections40

Choose an action.

Evidence state

identity unresolved
known present
source constrained
evidence unknown

Snapshot-bound reason tuple

Last verified source snapshot retainedfactor_a_kev

The admitted source contract constrains coverage for this claim.

Revision: evidence-policy-v1.1.0
Cutoff: 2026-10-22T18:07:53.945Z
Resolution: Review source contract

Evidence supportedfactor_b_epss

Eligible evidence is present for this bounded claim.

Revision: evidence-policy-v1.1.0
Cutoff: 2026-10-22T18:07:53.945Z
Resolution: None

Evidence supportedfactor_c_cvss

Eligible evidence is present for this bounded claim.

Revision: casca-direct-cvss-eligibility-v1
Cutoff: 2026-10-22T18:07:53.945Z
Resolution: None

Source-reported scopefactor_d_breadth

The source assertion is retained, but its canonical identity is unresolved.

Revision: casca-factor-d-obligations-v1
Cutoff: 2026-10-22T18:07:53.945Z
Resolution: Resolve identity

Connections 40

has cited scope1 retained · stored CVE-2024-38217 → Microsoft · Windows Server 2022

6baeb398-6b4d-41ab-9753-52ca9f58c963

has cited scope1 retained · stored CVE-2024-38217 → Microsoft · Windows Server 2022, 23H2 Edition (Server Core installation)

6122eb00-ee55-437a-9e09-76a9df81c770

has cited scope1 retained · stored CVE-2024-38217 → Microsoft · Windows 11 Version 24H2

4d82058d-021c-4193-97ef-d0a64a85e409

has cited scope1 retained · stored CVE-2024-38217 → Microsoft · Windows 11 version 22H3

0d998fd1-c997-4632-bd59-dadbc4708274

has cited scope1 retained · stored CVE-2024-38217 → Microsoft · Windows 11 Version 23H2

a998d677-31e5-400f-834e-13fe5fd852d1

has cited scope1 retained · stored CVE-2024-38217 → Microsoft · Windows Server 2016

e69ec279-a53b-44be-9eec-f71117a7cc74

has cited scope1 retained · stored CVE-2024-38217 → Microsoft · Windows Server 2008 Service Pack 2 (Server Core installation)

de538213-016d-470b-9c32-dde816a6bdce

has cited scope1 retained · stored CVE-2024-38217 → Microsoft · Windows 11 version 22H2

92fd389e-bc04-41b9-bf1b-db3d78c7b440

has cited scope1 retained · stored CVE-2024-38217 → Microsoft · Windows Server 2008 Service Pack 2

f8f73c35-356c-4ab7-a5ac-01b0b9ac5798

has cited scope1 retained · stored CVE-2024-38217 → Microsoft · Windows Server 2008 R2 Service Pack 1

d5412cde-c281-479b-9139-e39d17b828e4

has cited scope1 retained · stored CVE-2024-38217 → Microsoft · Windows Server 2012

221b22a9-301e-4a20-b880-3deea7cf8480

has cited scope1 retained · stored CVE-2024-38217 → Microsoft · Windows Server 2008 Service Pack 2

4bd8e3de-5554-4113-aefb-eb2d710d15b0

has cited scope1 retained · stored CVE-2024-38217 → Microsoft · Windows Server 2012 (Server Core installation)

541c4a71-33ea-4d7f-86fb-c14d3497d759

has cited scope1 retained · stored CVE-2024-38217 → Microsoft · Windows Server 2016 (Server Core installation)

f803b3eb-3a1d-4aa0-8a51-5d2207f21fcd

has cited scope1 retained · stored CVE-2024-38217 → Microsoft · Windows Server 2012 R2 (Server Core installation)

69f61546-bad4-4962-9d07-75260563692e

has cited scope1 retained · stored CVE-2024-38217 → Microsoft · Windows 10 Version 1809

ce504ec9-78ed-402c-b677-36829703cb02

has cited scope1 retained · stored CVE-2024-38217 → Microsoft · Windows Server 2008 R2 Service Pack 1 (Server Core installation)

794695e4-3f0f-420c-b586-bc0eda070448

has cited scope1 retained · stored CVE-2024-38217 → Microsoft · Windows 10 Version 22H2

3216fc73-757d-4aef-a020-b1868f306d0a

has cited scope1 retained · stored CVE-2024-38217 → Microsoft · Windows 10 Version 1507

3ec14be0-910e-435e-b6a7-c97430a7bea0

has cited scope1 retained · stored CVE-2024-38217 → Microsoft · Windows 10 Version 21H2

c1d96c1e-ef69-40c2-ab43-c8e29bc0c0e1

has cited scope1 retained · stored CVE-2024-38217 → Microsoft · Windows 11 version 21H2

38b390ea-82ef-4138-a152-fcbd96643117

has cited scope1 retained · stored CVE-2024-38217 → Microsoft · Windows Server 2019

3008b00d-d0c9-4e51-9647-fd1321c0ba5c

has cited scope1 retained · stored CVE-2024-38217 → Microsoft · Windows 10 Version 1607

3070ecec-4ef9-491d-905e-4753b32717ed

has cited scope1 retained · stored CVE-2024-38217 → Microsoft · Windows Server 2012 R2

10ba4263-5ba4-4911-beda-145751b7bf23

has cited scope1 retained · stored CVE-2024-38217 → Microsoft · Windows Server 2019 (Server Core installation)

c630aa64-136e-4a7d-ac30-c948bf43314a

has vulnerable target scope1 retained · stored CVE-2024-38217 → microsoft · windows_11_23h2

4c02c218-af68-4e36-ab7e-73e050579efb

has vulnerable target scope1 retained · stored CVE-2024-38217 → microsoft · windows_server_2016

c41a2789-4956-4147-98a4-4a6f03adec7e

has vulnerable target scope2 retained · stored CVE-2024-38217 → microsoft · windows_server_2008

509993ad-047c-4a1c-8006-b3ca2742c48edd9b9d1a-3e61-4db3-b741-32a4e760f1a1

has vulnerable target scope1 retained · stored CVE-2024-38217 → microsoft · windows_server_2019

36181fcb-4260-49ab-adb0-cf2b52132f99

has vulnerable target scope2 retained · stored CVE-2024-38217 → microsoft · windows_server_2012

ced990e9-ab31-44e4-af50-b280d2c9d546f603d369-525c-4925-95a8-171db249d631

has vulnerable target scope2 retained · stored CVE-2024-38217 → microsoft · windows_10_1607

863bca1b-d0e6-4464-a095-aadfa50260f5984085fa-a60b-4a4b-a1ef-6193deda336b

has vulnerable target scope1 retained · stored CVE-2024-38217 → microsoft · windows_11_21h2

c7538c30-5fb3-4cdb-9ac3-d2c19599ab5b

has vulnerable target scope2 retained · stored CVE-2024-38217 → microsoft · windows_11_24h2

c979ee04-bafc-4818-b7bb-64e0e81c7731db4d21bd-0dc7-4ccc-a823-b0febb85235e

has vulnerable target scope2 retained · stored CVE-2024-38217 → microsoft · windows_10_1507

8dfa1753-4f7d-48b7-991b-513f82d1d1dbd0130812-a0af-4b17-8c4f-4aa15f90e491

has vulnerable target scope2 retained · stored CVE-2024-38217 → microsoft · windows_10_1809

18d29ab4-59e4-41c2-8bdb-0e19e7eceec0445ad91c-943f-4d67-a034-896808d9e8ab

has vulnerable target scope1 retained · stored CVE-2024-38217 → microsoft · windows_10_22h2

c66680f2-5cb4-4446-adca-1c16bdb5d9be

has vulnerable target scope1 retained · stored CVE-2024-38217 → microsoft · windows_server_2022_23h2

8cdf5227-8d64-49f7-b811-bc6ca95c90dd

has vulnerable target scope1 retained · stored CVE-2024-38217 → microsoft · windows_server_2022

d035a84f-3d34-4e04-9e5c-d7b019117ed3

has vulnerable target scope1 retained · stored CVE-2024-38217 → microsoft · windows_10_21h2

24ba920a-c1fa-4408-99ed-81b1c861b815

has vulnerable target scope1 retained · stored CVE-2024-38217 → microsoft · windows_11_22h2

6b26e3c6-16ae-4b99-8365-68a715d17bc2

Focused snapshot evidence neighborhood.

CVEProductSignalSelected / traceVisual proximity carries zero evidence weight.

Data as of

Evidence current through Oct 22, 2026, 6:07 PM UTC · 41 entities · 40 relationships · bounded complete