CVE-2024-38240
HighCVSS 8.1Exploitation Probability (EPSS)
Elevated risk72th percentile - higher than 72% of all known CVEs
Summary
Elevation of privilege vulnerability in Windows Remote Access Connection Manager. Allows an attacker to gain higher privileges on the system.
Risk Assessment
Risk of privilege escalation and full compromise of the Windows system.
Recommendation
Apply Windows security updates from Microsoft.
Other vulnerabilities in Windows Remote Access Connection Manager
See all- CVE-2026-62783High
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
- CVE-2026-62758High
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
- CVE-2026-50666High
Windows Remote Access Connection Manager has a use-after-free vulnerability that allows an authorized attacker to elevate privileges over a network.
- CVE-2024-30069Medium
A vulnerability in Windows Remote Access Connection Manager could lead to information disclosure. An attacker may exploit this flaw to access sensitive data stored on the system.
- CVE-2021-34457Medium
Information disclosure vulnerability in the Windows Remote Access Connection Manager. It may allow an attacker to access information that should be protected.
- CVE-2021-34456High
A vulnerability in the Windows Remote Access Connection Manager allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
- CVE-2021-34454Medium
Information disclosure vulnerability in the Windows Remote Access Connection Manager. It may allow an attacker to access information that should be protected.
- CVE-2021-34445High
Elevation of privilege vulnerability in the Windows Remote Access Connection Manager. It allows a local attacker to gain elevated privileges.
- CVE-2021-33773High
Elevation of privilege vulnerability in the Windows Remote Access Connection Manager. It allows a local attacker to gain elevated privileges.
- CVE-2021-33763Medium
Information disclosure vulnerability in the Windows Remote Access Connection Manager. It may allow an attacker to access information that should be protected.
Original NVD description (English source)
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability