Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
CVE-2024-49046

7.8HIGH

Key Information:

Summary

The vulnerability in the Windows Win32 Kernel Subsystem allows attackers to elevate their privileges within the operating system. This flaw can potentially enable unauthorized users to gain higher level access, which may facilitate further exploitation of system resources or sensitive information. System administrators should be aware of the potential risks associated with this vulnerability and consider implementing available patches and mitigations to safeguard their environments against potential threats associated with privilege escalation.

Affected Version(s)

Windows 10 Version 1507 32-bit Systems 10.0.10240.0 < 10.0.10240.20826

Windows 10 Version 1607 32-bit Systems 10.0.14393.0 < 10.0.14393.7515

Windows 10 Version 1809 32-bit Systems 10.0.17763.0 < 10.0.17763.6532

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

Collectors

NVD DatabaseMitre DatabaseMicrosoft Feed
.