CVE-2024-49093highCWE-681

CVE-2024-49093: high-severity vulnerability in Microsoft Windows 11 Version 24H2

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

Published · Updated

Follow this CVE+ Monitor Windows Server+ Monitor Windows

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.8epss 0.9%
In short

A flaw in Windows ReFS (Resilient File System) allows an attacker with local access to gain higher privileges on the system. This could let them take control of sensitive functions normally restricted to administrators.

Technical detail

CWE-681 vulnerability in Windows ReFS permits local privilege escalation through improper validation of file system operations. An attacker with local user privileges can exploit this to execute code with elevated system rights, compromising system integrity.

Summary generated and translated by AI from the official description.
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
Affected products
Microsoft · Windows 11 Version 24H2Microsoft · Windows Server 2025Microsoft · Windows Server 2025 (Server Core installation)
Related CVEs — Microsoft Windows 11 Version 24H2

In the same product, most dangerous first.

CVE-2025-59287CRITICALWindows Server Update Service (WSUS) Remote Code Execution VulnerabilityEPSS 100.0%KEVCVE-2025-33053HIGHInternet Shortcut Files Remote Code Execution VulnerabilityEPSS 87.0%KEVCVE-2024-43451MEDIUMNTLM Hash Disclosure Spoofing VulnerabilityEPSS 84.3%KEVCVE-2025-33073HIGHWindows SMB Client Elevation of Privilege VulnerabilityEPSS 82.7%KEVCVE-2026-33824CRITICALWindows Internet Key Exchange (IKE) Service Extensions Remote Code Execution VulnerabilityEPSS 77.1%KEVCVE-2026-32202MEDIUMWindows Shell Spoofing VulnerabilityEPSS 70.9%KEV