CVE-2024-30088KEV · OVERDUECWE-367

Microsoft Windows Kernel TOCTOU Race Condition Vulnerability

High · published June 11, 2024

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 7.0. It is confirmed in active exploitation. It sits in the 99.3th percentile for exploit probability.

718
days past CISA
deadline
CVSS v3.1
7.0
EPSS
68%
Percentile
99.3
In the wild
Confirmed
What it is

⚡ A sneaky Windows Kernel flaw could let attackers elevate their privileges with ease! One misstep, and they could become the admin of your system. 🚨 Think of it like a fast-track pass at an amusement park – only a few need to know the secret code to skip ahead in line and access the 'backstage' of your system. This vulnerability lets malicious actors do just that! If exploited, an attacker could gain full control over system resources, potentially manipulating data, installing malicious software, or even locking you out entirely. This could lead to devastating data breaches and loss of privacy, making it critical to address this vulnerability immediately!

Put simply

Think of it like a fast-track pass at an amusement park – only a few need to know the secret code to skip ahead in line and access the 'backstage' of your system. This vulnerability lets malicious actors do just that! This elevation of privilege vulnerability in the Windows Kernel allows an attacker to execute arbitrary code at a higher privilege level, thereby gaining unauthorized access to system functions and resources.

What to do

If exploited, an attacker could gain full control over system resources, potentially manipulating data, installing malicious software, or even locking you out entirely. This could lead to devastating data breaches and loss of privacy, making it critical to address this vulnerability immediately! To protect yourself, apply the latest security updates from Microsoft as soon as possible. Monitor your systems for unusual activity and consider implementing additional security measures, like user account control enhancements. Don't leave your system vulnerable! You've got this! Follow these steps to secure your system and reclaim your hero status! 🛡️

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.68202 · 99.3th percentile
Weakness
CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition
Published
2024-06-11T21:15Z
KEV added
2024-10-15 · due 2024-11-05
Affected products (13)
ProductVersionsFixed in
microsoft/windows_10_1507< 10.0.10240.2068010.0.10240.20680
microsoft/windows_10_1607< 10.0.14393.707010.0.14393.7070
microsoft/windows_10_1607< 10.0.14393.707010.0.14393.7070
microsoft/windows_10_1809< 10.0.17763.593610.0.17763.5936
microsoft/windows_10_21h2< 10.0.19044.452910.0.19044.4529
microsoft/windows_10_22h2< 10.0.19045.452910.0.19045.4529
microsoft/windows_11_21h2< 10.0.22000.301910.0.22000.3019
microsoft/windows_11_22h2< 10.0.22621.373710.0.22621.3737
microsoft/windows_11_23h2< 10.0.22631.373710.0.22631.3737
microsoft/windows_server_2016< 10.0.14393.707010.0.14393.7070
microsoft/windows_server_2019< 10.0.17763.593610.0.17763.5936
microsoft/windows_server_2022< 10.0.20348.252210.0.20348.2522
microsoft/windows_server_2022_23h2< 10.0.25398.95010.0.25398.950
References (3)
EPSS history
Timeline
  • 15 OCT 00:00Z
    Added to CISA KEV — remediate by Nov 5
    kev
  • 11 JUN 16:59Z
    Windows Kernel Elevation of Privilege Vulnerability
    cvelistv5