CVE-2024-30088

Published Jun 11, 2024

Last updated 7 days ago

Windows Kernel

Overview

AI description

Automated description summarized from trusted sources.

CVE-2024-30088 is an elevation of privilege vulnerability in the Windows Kernel. It is a Time-Of-Check Time-Of-Use (TOCTOU) race condition, meaning that the state of a resource can change between when it is checked and when it is used, which can lead to unexpected actions. An attacker can exploit this vulnerability to run code with elevated privileges on a vulnerable system. This vulnerability has been actively exploited in the wild, including by the OilRig APT group, which is known for cyber espionage. Successful exploitation could allow an attacker to gain complete control over the affected system. It is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, which requires timely patching.

Description: Windows Kernel Elevation of Privilege Vulnerability
Source: secure@microsoft.com
NVD status: Modified
Products: windows_10_1507, windows_10_1607, windows_10_1809, windows_10_21h2, windows_10_22h2, windows_11_21h2, windows_11_22h2, windows_11_23h2, windows_server_2016, windows_server_2019, windows_server_2022, windows_server_2022_23h2

Risk scores

CVSS 3.1

Type: Secondary
Base score: 7
Impact score: 5.9
Exploitability score: 1
Vector string: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity: HIGH

Known exploits

Data from CISA

Vulnerability name: Microsoft Windows Kernel TOCTOU Race Condition Vulnerability
Exploit added on: Oct 15, 2024
Exploit action due: Nov 5, 2024
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Weaknesses

secure@microsoft.com: CWE-367
nvd@nist.gov: CWE-367

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CF7733FD-F870-4578-A567-9900AD6C78E3",
            "versionEndExcluding": "10.0.10240.20680"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "0F5BFA22-D18B-47A8-B26F-882E0910FE6B",
            "versionEndExcluding": "10.0.14393.7070"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "vulnerable": true,
            "matchCriteriaId": "1EA9F602-3E4B-4A9B-8D15-D8CA75CA859B",
            "versionEndExcluding": "10.0.14393.7070"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9B52F95E-6080-46C6-B4B6-E2B3F3E78456",
            "versionEndExcluding": "10.0.17763.5936"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1CEAF689-E8DB-4D3C-BC2E-B386BC077BC5",
            "versionEndExcluding": "10.0.19044.4529"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "970F54FC-F4ED-49B9-BE94-96B7212FD149",
            "versionEndExcluding": "10.0.19045.4529"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "84ECD6C0-8C47-4D2F-82B5-4F8C0BBC5FEE",
            "versionEndExcluding": "10.0.22000.3019"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4E80DF17-1F27-474E-B147-9F5B6C494300",
            "versionEndExcluding": "10.0.22621.3737"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4258468C-56CC-45C0-B510-FC833E942876",
            "versionEndExcluding": "10.0.22631.3737"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FA61AAF0-D769-4287-AA5C-EFDAD067E9F1",
            "versionEndExcluding": "10.0.14393.7070"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "12F9D974-A968-4CBB-81D8-C73B76DD284A",
            "versionEndExcluding": "10.0.17763.5936"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "498A643B-0180-4AD3-BD7C-5E3CEB0FD112",
            "versionEndExcluding": "10.0.20348.2522"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0EA59E2D-57B2-4E8B-937A-3EB51A3AD285",
            "versionEndExcluding": "10.0.25398.950"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.