CVE-2024-20693

Summary

CVE-2024-20693 is a newly disclosed Windows Kernel vulnerability that grants attackers elevated privileges. By exploiting this EoP (Elevation of Privilege) flaw, an attacker can gain administrative control over an affected system. The vulnerability exists in a specific Windows Kernel driver and can be triggered through a maliciously crafted application or document. Successful exploitation allows the attacker to escalate their user privileges to that of a system administrator, enabling them to install unauthorized software, modify system settings, and access sensitive data. Microsoft is currently working on a patch to address this vulnerability and users are advised to apply it as soon as it becomes available.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.