CVE Catalog
CVE-2024-30087
HighCVSS 7.8Exploitation Probability (EPSS)
Very high risk9.51%
95th percentile - higher than 95% of all known CVEs
Summary
A vulnerability in the Win32k driver allows elevation of privilege in Windows. This flaw can be exploited by a local attacker to gain higher privileges.
Risk Assessment
The risk involves potential system compromise by an unprivileged user, which could lead to malware installation or data theft.
Recommendation
It is recommended to immediately apply the security update released by Microsoft for Windows. Also, restrict local system access to trusted users only.
Original NVD description (English source)
Win32k Elevation of Privilege Vulnerability