High severity · published Jul 25, 2025
CVE-2024-13976
Commvault 11.20.0 - 11.36.0 Windows Maintenance Installer DLL Injection
8.5
CVSS
0.2%
EPSS
No
On KEV
Description
A DLL injection vulnerability exists in Commvault for Windows 11.20.0, 11.28.0, 11.32.0, 11.34.0, and 11.36.0. During the installation of maintenance updates, an attacker with local access may exploit uncontrolled search path or DLL loading behavior to execute arbitrary code with elevated privileges. The vulnerability has been resolved in versions 11.20.202, 11.28.124, 11.32.65, 11.34.37, and 11.36.15.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 12% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CF
Commvault for Windows · Commvault
11.20.0 before 11.20.202; 11.28.0 before 11.28.124; 11.32.0 before 11.32.65; 11.34.0 before 11.34.37; 11.36.0 before 11.36.15 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-13976
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-13976
documentation.commvault.com
https://documentation.commvault.com/securityadvisories/CV_2024_09_2.html
www.vulncheck.com
https://www.vulncheck.com/advisories/commvault-for-windows-maintenance-installer-dll-injection