CVE-2024-38256
MediumCVSS 5.5Exploitation Probability (EPSS)
Elevated risk50th percentile - higher than 50% of all known CVEs
Summary
A vulnerability in Windows Kernel-Mode Driver allows information disclosure. An attacker could exploit this flaw to access data that should be protected.
Risk Assessment
Risk of exposing sensitive kernel data, potentially leading to system integrity compromise or information leaks.
Recommendation
Install the latest security updates provided by Microsoft for Windows.
Other vulnerabilities in Windows Kernel-Mode Driver
See all- CVE-2024-35250HighActively exploited
A vulnerability in the Windows kernel-mode driver allows elevation of privilege. This flaw can be exploited by a local attacker to gain system-level privileges.
- CVE-2024-30084High
A vulnerability in the Windows kernel-mode driver allows elevation of privilege. An attacker who successfully exploits it can gain SYSTEM privileges.
- CVE-2026-58602High
In Windows Kernel Mode Driver, a use-after-free vulnerability allows an authorized attacker to elevate privileges locally.
- CVE-2020-1143High
Elevation of privilege vulnerability in Windows kernel-mode driver. An attacker logged on to the system can run a specially crafted application to execute arbitrary code in kernel mode, potentially installing programs, modifying data, or creating accounts with full user rights.
Original NVD description (English source)
Windows Kernel-Mode Driver Information Disclosure Vulnerability