CVE-2024-30086
HighCVSS 7.8Exploitation Probability (EPSS)
Elevated risk62th percentile - higher than 62% of all known CVEs
Summary
A vulnerability in the Windows Win32 kernel subsystem allows elevation of privilege. This flaw can be exploited by a local attacker to gain higher privileges on the system.
Risk Assessment
The risk involves a non-privileged user potentially gaining control over the system, which could lead to malware installation, data theft, or further attack escalation.
Recommendation
It is recommended to immediately apply security updates released by Microsoft for Windows. Also, restrict local access to critical systems.
Other vulnerabilities in Windows Win32 Kernel Subsystem
See all- CVE-2026-96853Medium
Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
- CVE-2026-96848Medium
Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
- CVE-2026-96249High
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- CVE-2026-85858High
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- CVE-2026-85804High
A use after free in the Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- CVE-2026-85802High
A use after free in the Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- CVE-2026-83909Medium
Exposure of sensitive system information to an unauthorized control sphere in the Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
- CVE-2026-83901High
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- CVE-2026-83897Medium
A vulnerability in the Windows Win32 Kernel Subsystem allows exposure of sensitive system information to an unauthorized control sphere. An authorized attacker can disclose information locally.
- CVE-2026-83895Medium
A heap-based buffer overflow in the Windows Win32 Kernel Subsystem allows an unauthorized attacker to elevate privileges via a physical attack.
Original NVD description (English source)
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS