High · published June 11, 2024
CVSS calls it high at 7.0. It is confirmed in active exploitation. It sits in the 99.3th percentile for exploit probability.
⚡ A sneaky Windows Kernel flaw could let attackers elevate their privileges with ease! One misstep, and they could become the admin of your system. 🚨 Think of it like a fast-track pass at an amusement park – only a few need to know the secret code to skip ahead in line and access the 'backstage' of your system. This vulnerability lets malicious actors do just that! If exploited, an attacker could gain full control over system resources, potentially manipulating data, installing malicious software, or even locking you out entirely. This could lead to devastating data breaches and loss of privacy, making it critical to address this vulnerability immediately!
Think of it like a fast-track pass at an amusement park – only a few need to know the secret code to skip ahead in line and access the 'backstage' of your system. This vulnerability lets malicious actors do just that! This elevation of privilege vulnerability in the Windows Kernel allows an attacker to execute arbitrary code at a higher privilege level, thereby gaining unauthorized access to system functions and resources.
If exploited, an attacker could gain full control over system resources, potentially manipulating data, installing malicious software, or even locking you out entirely. This could lead to devastating data breaches and loss of privacy, making it critical to address this vulnerability immediately! To protect yourself, apply the latest security updates from Microsoft as soon as possible. Monitor your systems for unusual activity and consider implementing additional security measures, like user account control enhancements. Don't leave your system vulnerable! You've got this! Follow these steps to secure your system and reclaim your hero status! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| microsoft/windows_10_1507 | < 10.0.10240.20680 | 10.0.10240.20680 |
| microsoft/windows_10_1607 | < 10.0.14393.7070 | 10.0.14393.7070 |
| microsoft/windows_10_1607 | < 10.0.14393.7070 | 10.0.14393.7070 |
| microsoft/windows_10_1809 | < 10.0.17763.5936 | 10.0.17763.5936 |
| microsoft/windows_10_21h2 | < 10.0.19044.4529 | 10.0.19044.4529 |
| microsoft/windows_10_22h2 | < 10.0.19045.4529 | 10.0.19045.4529 |
| microsoft/windows_11_21h2 | < 10.0.22000.3019 | 10.0.22000.3019 |
| microsoft/windows_11_22h2 | < 10.0.22621.3737 | 10.0.22621.3737 |
| microsoft/windows_11_23h2 | < 10.0.22631.3737 | 10.0.22631.3737 |
| microsoft/windows_server_2016 | < 10.0.14393.7070 | 10.0.14393.7070 |
| microsoft/windows_server_2019 | < 10.0.17763.5936 | 10.0.17763.5936 |
| microsoft/windows_server_2022 | < 10.0.20348.2522 | 10.0.20348.2522 |
| microsoft/windows_server_2022_23h2 | < 10.0.25398.950 | 10.0.25398.950 |