High · published February 13, 2024
CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 99.1th percentile for exploit probability.
🚨 A sneaky elevation of privilege in the Windows Kernel means bad actors can leap from a lowly user to admin status with just a bit of clever trickery! ⚡️ Think of it like a guest at a hotel who finds a way to sneak into the staff-only areas. With the right knowledge, they can access the manager’s office and start changing policies. This vulnerability is a gateway that enables unauthorized users to gain control over sensitive system functions. If exploited, an attacker could gain full control over the system, leading to unauthorized data access, installation of malicious software, or even complete system takeover. This can be absolutely devastating for your security posture and could leave sensitive information vulnerable to theft or manipulation.
Think of it like a guest at a hotel who finds a way to sneak into the staff-only areas. With the right knowledge, they can access the manager’s office and start changing policies. This vulnerability is a gateway that enables unauthorized users to gain control over sensitive system functions. This vulnerability allows an attacker to execute code with elevated privileges due to improper validation in the Windows Kernel, essentially bypassing the standard security checks that keep user actions in check.
If exploited, an attacker could gain full control over the system, leading to unauthorized data access, installation of malicious software, or even complete system takeover. This can be absolutely devastating for your security posture and could leave sensitive information vulnerable to theft or manipulation. To protect yourself, immediately install the latest security updates released by Microsoft. Monitor your systems for unusual activity and consider tightening user permissions to limit the potential impact of this vulnerability. You've got this! By staying proactive and following these steps, you'll fortify your defenses and help keep your environment secure. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| microsoft/windows_10_1809 | < 10.0.17763.5458 | 10.0.17763.5458 |
| microsoft/windows_10_21h2 | < 10.0.19044.4046 | 10.0.19044.4046 |
| microsoft/windows_10_22h2 | < 10.0.19045.4046 | 10.0.19045.4046 |
| microsoft/windows_11_21h2 | < 10.0.22000.2777 | 10.0.22000.2777 |
| microsoft/windows_11_22h2 | < 10.0.22621.3155 | 10.0.22621.3155 |
| microsoft/windows_11_23h2 | < 10.0.22631.3155 | 10.0.22631.3155 |
| microsoft/windows_server_2019 | < 10.0.17763.5458 | 10.0.17763.5458 |
| microsoft/windows_server_2022 | < 10.0.20348.2322 | 10.0.20348.2322 |
| microsoft/windows_server_2022_23h2 | ≤ 10.0.25398.709 | — |