Actively exploited in the wild
Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2024-12-16. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CVE-2024-35250
HighCVSS 7.8KEVExploitation Probability (EPSS)
Very high risk98th percentile - higher than 98% of all known CVEs
Summary
A vulnerability in the Windows kernel-mode driver allows elevation of privilege. This flaw can be exploited by a local attacker to gain system-level privileges.
Risk Assessment
The risk involves an attacker with limited privileges gaining full control over the system, potentially leading to malware installation, data theft, or further network compromise.
Recommendation
Apply the security update released by Microsoft in the monthly cumulative patch immediately. Also restrict local access to systems to trusted users only.
Other vulnerabilities in Windows Kernel-Mode Driver
See all- CVE-2024-30084High
A vulnerability in the Windows kernel-mode driver allows elevation of privilege. An attacker who successfully exploits it can gain SYSTEM privileges.
- CVE-2026-69421High
Integer underflow (wrap or wraparound) in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-58602High
In Windows Kernel Mode Driver, a use-after-free vulnerability allows an authorized attacker to elevate privileges locally.
- CVE-2024-38256Medium
A vulnerability in Windows Kernel-Mode Driver allows information disclosure. An attacker could exploit this flaw to access data that should be protected.
- CVE-2020-1143High
Elevation of privilege vulnerability in Windows kernel-mode driver. An attacker logged on to the system can run a specially crafted application to execute arbitrary code in kernel mode, potentially installing programs, modifying data, or creating accounts with full user rights.
Original NVD description (English source)
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability