Actively exploited in the wild
Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2024-12-16. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CVE-2024-35250
HighCVSS 7.8KEVExploitation Probability (EPSS)
Very high risk98th percentile - higher than 98% of all known CVEs
Summary
A vulnerability in the Windows kernel-mode driver allows elevation of privilege. This flaw can be exploited by a local attacker to gain system-level privileges.
Risk Assessment
The risk involves an attacker with limited privileges gaining full control over the system, potentially leading to malware installation, data theft, or further network compromise.
Recommendation
Apply the security update released by Microsoft in the monthly cumulative patch immediately. Also restrict local access to systems to trusted users only.
Original NVD description (English source)
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability