CVE-2024-38106: high-severity vulnerability in Microsoft Windows 10 Version 1507
Windows Kernel Elevation of Privilege Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
A flaw in the Windows Kernel allows an attacker with local access to run programs with higher privileges than they should have. This is dangerous because it can give an attacker full control over your computer.
An elevation of privilege vulnerability in the Windows Kernel (CWE-591: Sensitive Data Exposure through Query Strings) allows a local authenticated attacker to escalate privileges to SYSTEM level through kernel-mode operations. Exploitation requires local access and the ability to execute code, resulting in complete system compromise.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.