CVE-2024-43630

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Nov 12, 2024
Updated: Nov 13, 2024
CWE ID 121

Summary

CVE-2024-43630 is a newly disclosed Windows Kernel vulnerability that allows an attacker to elevate privileges. By exploiting this EoP (Elevation of Privilege) weakness, an attacker can gain higher access to a system, potentially leading to data theft or unauthorized system modifications. This vulnerability exists within the Windows Kernel and could be exploited through malicious code or maliciously crafted applications. Impacted systems should be updated as soon as patches become available to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Microsoft Windows
  • Microsoft Windows 11

Affected Vendors

  • Microsoft

Advisories, Assessments, and Mitigations