Windows Registry Elevation of Privilege Vulnerability
CVE-2024-43641

7.8HIGH

Key Information:

Vendor
Microsoft
Status
Windows Server 2025
Windows Server 2025 (server Core Installation)
Windows 10 Version 1809
Windows Server 2019
Vendor
CVE Published:
12 November 2024

Badges

📰 News Worthy

Summary

A vulnerability exists in the Windows Registry that allows an attacker to gain elevated privileges. This elevation of privilege could enable a malicious user to execute arbitrary commands with system-level permissions. Successful exploitation may lead to unauthorized access to restricted areas of the system, allowing for potential data compromise or further attacks on the network. Keeping software up to date and following best security practices are essential in protecting against such vulnerabilities.

Affected Version(s)

Windows 10 Version 1507 32-bit Systems 10.0.10240.0 < 10.0.10240.20826

Windows 10 Version 1607 32-bit Systems 10.0.14393.0 < 10.0.14393.7515

Windows 10 Version 1809 32-bit Systems 10.0.17763.0 < 10.0.17763.6532

News Articles

favicon imageCyber Security News

PoC Exploit Released for Windows Registry Privilege Elevation Vulnerability

A proof-of-concept (PoC) exploit for a critical Windows Registry Elevation of Privilege vulnerability, identified as CVE-2024-43641.

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • 📰

    First article discovered by Cyber Security News

  • Vulnerability published

.