CVE-2024-21338: high-severity vulnerability in Microsoft Windows 10 Version 1809
Windows Kernel Elevation of Privilege Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
A flaw in the Windows Kernel allows an attacker with local access to run malicious code with system-level privileges, bypassing normal security restrictions. This is dangerous because it gives complete control over the computer.
This CWE-822 vulnerability in the Windows Kernel permits local privilege escalation through improper handling of kernel objects or memory. An authenticated local attacker can exploit this to execute arbitrary code in kernel mode, achieving full system compromise without user interaction beyond initial local access.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.