CVE-2024-30066
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk46th percentile - higher than 46% of all known CVEs
Summary
A vulnerability in the Winlogon component of Windows allows elevation of privilege. This flaw can be exploited by a local attacker to gain higher privileges on the system.
Risk Assessment
The risk involves potential system takeover by an unauthorized user, leading to compromise of data confidentiality and integrity.
Recommendation
Apply the security update released by Microsoft for Windows immediately. Also restrict local access to critical systems.
Other vulnerabilities in Winlogon
See all- CVE-2026-25187High
Improper link resolution before file access in Winlogon allows an authorized attacker to elevate privileges locally.
- CVE-2026-61939High
Use after free in Winlogon allows an authorized attacker to elevate privileges locally.
- CVE-2026-42989High
Improper link resolution before file access ('link following') in Winlogon allows an authorized attacker to elevate privileges locally.
- CVE-2024-30067Medium
A vulnerability in Winlogon allows elevation of privilege in Windows systems. An attacker could exploit this flaw to gain higher privileges on the device.
Original NVD description (English source)
Winlogon Elevation of Privilege Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS