CVE-2024-30089
HighCVSS 7.8Exploitation Probability (EPSS)
Very high risk94th percentile - higher than 94% of all known CVEs
Summary
A vulnerability in Microsoft Streaming Service allows elevation of privilege. The flaw can be exploited by a local attacker to gain higher privileges on the system.
Risk Assessment
The risk involves potential privilege escalation by an attacker with limited access, which could lead to system compromise or access to sensitive data.
Recommendation
It is recommended to immediately apply the security update published by Microsoft for the affected version of the Streaming Service.
Other vulnerabilities in Microsoft Streaming Service
See all- CVE-2023-29360HighActively exploited
Microsoft Streaming Service Elevation of Privilege Vulnerability.
- CVE-2026-69970High
A heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69966High
An integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69964High
Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. Exploitation requires local access to the system.
- CVE-2026-69963High
Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. The flaw requires local access to the system.
- CVE-2024-30090High
A vulnerability in Microsoft Streaming Service allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
Original NVD description (English source)
Microsoft Streaming Service Elevation of Privilege Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS