CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2024-02-13
Windows Kernel Elevation of Privilege Vulnerability (CVE-2024-21338) - Active Lazarus APT Exploitation & FUDModule Rootkit Analysis
[Affected Scope] Multiple versions of Windows operating systems, including Windows 10, Windows 11, and Windows Server 2016/2019/2022.
[Impact] Local attackers can escalate privileges to SYSTEM level, bypass security agents, and execute arbitrary code in kernel space.
[Mitigation] Apply the official Microsoft cumulative security updates immediately and audit systems for indicators of compromise (IoCs).