CVE-2024-38239: high-severity vulnerability in Microsoft Windows 10 Version 1507
Windows Kerberos Elevation of Privilege Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A flaw in Windows Kerberos authentication allows an attacker with local access to escalate their privileges to a higher level of system access. This is dangerous because it lets an unprivileged user gain administrative control over the computer.
An elevation of privilege vulnerability exists in the Windows Kerberos implementation (CWE-1390) where improper validation or handling of Kerberos tokens permits a locally authenticated attacker to bypass privilege restrictions. The attack requires prior local system access and successful exploitation results in unauthorized privilege escalation to SYSTEM or domain administrator context.
In the same product, most dangerous first.