CVE-2024-30051: high-severity vulnerability in Microsoft Windows 10 Version 1507
Windows DWM Core Library Elevation of Privilege Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
A security flaw in Windows Desktop Window Manager (DWM) Core Library allows a local attacker with low privileges to gain higher system permissions. An attacker can exploit this to run malicious code with elevated privileges on the affected system.
CWE-122 (heap-based buffer overflow) in Windows DWM Core Library enables local privilege escalation when a low-privileged user processes specially crafted input. The vulnerability requires local access and leads to arbitrary code execution with SYSTEM or elevated privileges.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.