CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2024-09-10
Windows Installer Elevation of Privilege Vulnerability (CVE-2024-38014) Security Advisory
[Affected Scope] Microsoft Windows operating systems, including Windows 10, Windows 11, and Windows Server editions
[Impact] A locally authenticated attacker can exploit flaws in the Windows Installer service to elevate privileges to NT AUTHORITY\SYSTEM and execute arbitrary code
[Mitigation] Apply the Microsoft September 2024 security updates immediately and restrict Windows Installer privileges for non-administrative users