Elevation of Privilege Vulnerability Affects Windows Search Service

CVE-2024-30033

7HIGH

Key Information

Vendor: Microsoft
Status: Windows Server 2022; Windows 11 Version 21h2; Windows 10 Version 21h2; Windows 10 Version 22h2
Vendor: CVE Published:; 14 May 2024

Badges

📰 News Worthy

Summary

Windows Search Service Elevation of Privilege Vulnerability

Affected Version(s)

Windows Server 2022 < 10.0.20348.2461

Windows Server 2022 < 10.0.20348.2458

Windows 11 version 21H2 < 10.0.22000.2960

News Articles

SystemTek

CVE-2024-30033 CVE-2024-30034

SystemTek - Technology news and information

CVE number = CVE-2024-30033 CVSS Score = 7.0 This vulnerability allows local attackers to escalate privileges on affected installations of Read More CVE number = CVE-2024-30034 CVSS Score = 8.4 This...

9 months ago

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...

vendor-advisory

CVSS V3.1

Score:

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Local

Attack Complexity:

High

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published
May 14, 2024
First article discovered by SystemTek
Mar 29, 2024
Vulnerability Reserved
Mar 22, 2024

Collectors

NVD DatabaseMitre DatabaseMicrosoft Feed1 News Article(s)