CVE-2024-38107

Summary

CVE-2024-38107 is a newly disclosed vulnerability affecting the Windows Power Dependency Coordinator service. This elevation of privilege issue allows an attacker to gain system-level access by manipulating specially crafted dependency reports. Successful exploitation could result in the installation of unauthorized software, data theft, or system compromise. Microsoft has released a patch to address this vulnerability, and it is strongly recommended that users install it as soon as possible to mitigate the risk. Failure to do so may leave systems open to potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.