CVE-2024-30084
HighCVSS 7.0Exploitation Probability (EPSS)
Very high risk92th percentile - higher than 92% of all known CVEs
Summary
A vulnerability in the Windows kernel-mode driver allows elevation of privilege. An attacker who successfully exploits it can gain SYSTEM privileges.
Risk Assessment
The risk involves an unauthorized user gaining full control over the system, potentially leading to malware installation, data theft, or system disruption.
Recommendation
It is recommended to immediately apply security updates published by Microsoft as part of the monthly cumulative update package. Also, restrict user privileges and monitor for unusual system activity.
Other vulnerabilities in Windows Kernel-Mode Driver
See all- CVE-2024-35250HighActively exploited
A vulnerability in the Windows kernel-mode driver allows elevation of privilege. This flaw can be exploited by a local attacker to gain system-level privileges.
- CVE-2026-69421High
Integer underflow (wrap or wraparound) in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-58602High
In Windows Kernel Mode Driver, a use-after-free vulnerability allows an authorized attacker to elevate privileges locally.
- CVE-2024-38256Medium
A vulnerability in Windows Kernel-Mode Driver allows information disclosure. An attacker could exploit this flaw to access data that should be protected.
- CVE-2020-1143High
Elevation of privilege vulnerability in Windows kernel-mode driver. An attacker logged on to the system can run a specially crafted application to execute arbitrary code in kernel mode, potentially installing programs, modifying data, or creating accounts with full user rights.
Original NVD description (English source)
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability