CVE-2024-30096
MediumCVSS 5.5Exploitation Probability (EPSS)
Elevated risk57th percentile - higher than 57% of all known CVEs
Summary
A vulnerability in Windows Cryptographic Services allows information disclosure. An attacker could exploit this flaw to read sensitive data stored in system memory.
Risk Assessment
The risk involves potential leakage of cryptographic keys or other sensitive data, which could compromise system confidentiality and integrity.
Recommendation
It is recommended to immediately apply security updates published by Microsoft in the monthly security bulletin.
Other vulnerabilities in Windows Cryptographic Services
See all- CVE-2026-40377High
Heap-based buffer overflow in Windows Cryptographic Services allows an authorized attacker to elevate privileges locally.
- CVE-2026-50681Medium
Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally.
- CVE-2026-50352Medium
Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally.
- CVE-2026-50302Medium
Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to bypass a security feature over a network.
- CVE-2026-44806Medium
Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network.
- CVE-2026-44810High
Improper authentication in Windows Cryptographic Services allows an unauthorized attacker to elevate privileges locally.
- CVE-2023-36907Medium
A vulnerability in Windows Cryptographic Services may lead to information disclosure. An attacker could exploit this flaw to gain access to sensitive data.
- CVE-2023-36906Medium
A vulnerability in Windows Cryptographic Services allows for information disclosure. An attacker could exploit this flaw to gain access to sensitive data.
Original NVD description (English source)
Windows Cryptographic Services Information Disclosure Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS