Windows Kernel Elevation of Privilege VulnerabilityVendor advisorypatch
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21345 CVE-2024-21345
HIGH
Windows Kernel Elevation of Privilege Vulnerability
Record summary
CVE-2024-21345 has a selected CVSS score of 8.8 (high); EIP currently links 2 repository PoCs.
Description
Windows Kernel Elevation of Privilege Vulnerability
Description source: GitHub Advisory
Exploitation context
Available material
- Repository PoCs
- 2
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Feb 13, 2024 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Windows Server 2022, 23H2 Edition (Server Core installation)Browse Microsoft / Windows Server 2022, 23H2 Edition (Server Core installation) | CVE List | 10.0.25398.0 to < 10.0.25398.709 | affected |
Proofs of concept
2Repository PoCs
GitHubexploits-forsale/CVE-2024-21345Repository PoCby exploits-forsaleStars: 78Not analyzed5 files
GitHubFoxyProxys/CVE-2024-21345Repository PoCby FoxyProxysStars: 0Not analyzed2 files
References
2nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2024-21345