Actively exploited in the wild

Microsoft Windows Installer Improper Privilege Management Vulnerability

Microsoft - Windows · Listed in the CISA KEV since 2024-09-10. This indicates confirmed attacks in production environments.

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CVE-2024-38014

HighCVSS 7.8KEV

Published: 10/09/2024(UTC)Updated: 10/08/2026(UTC)Translated: 10/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

6.26%

93th percentile - higher than 93% of all known CVEs

Elevation of privilege vulnerability in Windows Installer. An attacker could exploit it to gain elevated privileges.

Risk of unauthorized user gaining control over the system.

Apply the latest Windows security updates.

Original NVD description (English source)

Windows Installer Elevation of Privilege Vulnerability