CVE-2024-34730

Summary

CVE-2024-34730 is a recently disclosed vulnerability affecting multiple locations. This issue arises from a logic error in the code, which permits the bypass of user consent for enabling new Bluetooth Human Interface Devices (HIDs). Notably, this vulnerability enables local privilege escalation without requiring any additional execution privileges, making it a significant concern. Furthermore, user interaction is not necessary for exploitation, increasing its potential impact. This flaw could potentially be exploited by an attacker to gain elevated access to a system, posing a potential security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.