CVE-2024-30088: high-severity vulnerability in Microsoft Windows 10 Version 1507
Windows Kernel Elevation of Privilege Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA, has a public proof of concept and 1 threat group(s) use it.
Groups known to exploit this vulnerability (MITRE ATT&CK attribution).
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
A flaw in the Windows Kernel allows an attacker with local access to gain higher privileges and take control of the system. This is dangerous because it lets unauthorized users escalate their permissions to administrator level.
A race condition (CWE-367) in the Windows Kernel enables local privilege escalation when an unprivileged user can exploit timing windows during kernel operations. The vulnerability requires local code execution capability and allows an attacker to execute arbitrary code with SYSTEM privileges.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.