CVE-2024-38259
HighCVSS 8.8Exploitation Probability (EPSS)
High risk77th percentile - higher than 77% of all known CVEs
Summary
Remote Code Execution vulnerability in Microsoft Management Console. An attacker could exploit this vulnerability to execute arbitrary code on the target system.
Risk Assessment
The risk is that an attacker could gain full control of the system, potentially leading to data theft, malware installation, or other damage.
Recommendation
Apply the security updates provided by the vendor for Microsoft Management Console immediately.
Other vulnerabilities in Microsoft Management Console
See all- CVE-2025-26633HighActively exploited
Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.
- CVE-2024-43572HighActively exploited
Remote code execution vulnerability in Microsoft Management Console (MMC). An unauthenticated attacker could potentially execute arbitrary code in the context of the user running the MMC console.
Original NVD description (English source)
Microsoft Management Console Remote Code Execution Vulnerability