CVE-2024-38250
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk50th percentile - higher than 50% of all known CVEs
Summary
A vulnerability in the Windows Graphics Component allows for elevation of privilege. An attacker can exploit this flaw to gain higher privileges in the system.
Risk Assessment
Exploitation of this vulnerability could lead to unauthorized access to system resources, posing a significant security threat to the organization.
Recommendation
It is recommended to update Windows to the latest version to patch this vulnerability and to monitor systems for unauthorized activities.
Other vulnerabilities in Windows Graphics Component
See all- CVE-2017-0014High
The Windows Graphics Component in Microsoft Office 2010 SP2 and various versions of Windows allows remote attackers to execute arbitrary code via a crafted website. This is a remote code execution vulnerability that is different from that described in CVE-2017-0108.
- CVE-2024-38249High
Vulnerability in Windows Graphics Component allows elevation of privilege. An attacker could exploit it to gain higher privileges.
- CVE-2024-38247High
An elevation of privilege vulnerability in the Windows Graphics Component allows an attacker to gain higher privileges.
- CVE-2023-21822High
An elevation of privilege vulnerability exists in the Windows Graphics Component. The description lacks technical details, but the vulnerability could allow an attacker to gain elevated privileges on the system.
- CVE-2023-21804High
Elevation of privilege vulnerability in Windows Graphics Component. Could be exploited to gain elevated privileges.
- CVE-2022-41052High
Remote Code Execution vulnerability in Windows Graphics Component. Allows an attacker to execute code in the context of the current user.
- CVE-2021-34533High
Remote code execution vulnerability in Windows Graphics Component during font parsing. An attacker could exploit it to execute code.
- CVE-2021-34530High
Remote code execution vulnerability in the Windows Graphics Component. An attacker could exploit this flaw to execute arbitrary code in the context of the logged-on user.
- CVE-2021-26868High
Elevation of privilege vulnerability in the Windows Graphics Component. Allows an attacker to gain elevated privileges on the system.
- CVE-2021-26861High
Remote code execution vulnerability in the Windows Graphics Component. An attacker could exploit it to run arbitrary code on the affected system.
Original NVD description (English source)
Windows Graphics Component Elevation of Privilege Vulnerability