CVE-2024-30090
HIGH EXPLOITED RANSOMWAREMicrosoft Streaming Service - Privilege Escalation
Title source: llmExploitation Summary
CVE-2024-30090 has been observed exploited in the wild (reported by VulnCheck KEV), including in ransomware campaigns. EIP tracks 1 public exploit from researchers including Dor00tkit.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2024-30090, targeting a race condition in the Windows Kernel Streaming (KS) driver. The exploit manipulates KSEVENT structures to achieve local privilege escalation (LPE) by corrupting kernel memory and enabling arbitrary code execution in kernel mode.
Description
Microsoft Streaming Service Elevation of Privilege Vulnerability
Exploits (1)
This repository contains a functional exploit for CVE-2024-30090, targeting a race condition in the Windows Kernel Streaming (KS) driver. The exploit manipulates KSEVENT structures to achieve local privilege escalation (LPE) by corrupting kernel memory and enabling arbitrary code execution in kernel mode.
References (1)
Scores
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H