CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2024-352507.8/HIGHEPSS 25.2%CISA KEV
2024-06-11

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability (CVE-2024-35250) Analysis and Mitigation Guide

[Affected Scope] Most supported Windows 10, 11, and Windows Server 2016, 2019, 2022 operating system kernel environments.

[Impact] A local attacker with low privileges can exploit an untrusted pointer dereference (CWE-822) to execute arbitrary code with SYSTEM privileges.

[Mitigation] Immediately apply the latest Windows Cumulative Updates (June 2024 or later) and monitor for Indicators of Compromise (IoCs).

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse