Actively exploited in the wild
Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2024-08-13. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CVE-2024-38107
HighCVSS 7.8KEVSummary
A vulnerability in the Windows Power Dependency Coordinator allows for elevation of privilege on Windows systems. The NVD description does not provide technical details or required user interaction.
Risk Assessment
Successful exploitation could allow an attacker to gain higher privileges on the system, potentially leading to host compromise.
Recommendation
Immediately apply the security updates provided by Microsoft for this component.
Other vulnerabilities in Windows Power Dependency Coordinator
See all- CVE-2026-69459High
Heap-based buffer overflow in Windows Power Dependency Coordinator allows an authorized attacker to elevate privileges locally.
- CVE-2026-69321Medium
Missing authentication for a critical function in the Windows Power Dependency Coordinator allows an authorized attacker to perform tampering locally.
Original NVD description (English source)
Windows Power Dependency Coordinator Elevation of Privilege Vulnerability