Privilege Escalation Vulnerability in Realtek High Definition Audio Driver
CVE-2024-33225

7.8HIGH

Key Information:

Vendor

Realtek Semiconductor Corp

Vendor
CVE Published:
22 May 2024

What is CVE-2024-33225?

The Realtek High Definition Audio Function Driver is affected by a vulnerability within the RTKVHD64.sys component. This flaw allows malicious actors to escalate privileges and execute arbitrary code on affected systems. By sending specially crafted IOCTL requests to the driver, attackers can exploit this issue to gain unauthorized access and control over system resources. It is crucial for users and administrators to remain vigilant and apply necessary patches to mitigate the risk associated with this vulnerability.

References

https://github.com/DriverHunter/Win-Driver-EXP/tree/main/...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.
CVE-2024-33225 : Privilege Escalation Vulnerability in Realtek High Definition Audio Driver