CVE-2024-38106MicrosoftOperating systemsAugust 13, 2024

Microsoft Windows Kernel Privilege Escalation Vulnerability

High 7Actively exploited

Description

Microsoft Windows Kernel contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges. Successful exploitation of this vulnerability requires an attacker to win a race condition.

What to do

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Running Microsoft devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on Microsoft alerts

Details

Vendor
Microsoft
Product
Windows
CVE
CVE-2024-38106
Affected versions
Windows 10 Version 1809 10.0: from 10.0.17763.0 to 10.0.17763.6189 (excluded) — fixed in 10.0.17763.6189
Windows Server 2019 10.0: from 10.0.17763.0 to 10.0.17763.6189 (excluded) — fixed in 10.0.17763.6189
Windows Server 2019 (Server Core installation) 10.0: from 10.0.17763.0 to 10.0.17763.6189 (excluded) — fixed in 10.0.17763.6189
Windows Server 2022 10.0: from 10.0.20348.0 to 10.0.20348.2655 (excluded) — fixed in 10.0.20348.2655
Windows 11 version 21H2 10.0: from 10.0.0 to 10.0.22000.3147 (excluded) — fixed in 10.0.22000.3147
Windows 10 Version 21H2 10.0: from 10.0.19043.0 to 10.0.19044.4780 (excluded) — fixed in 10.0.19044.4780
Windows 11 version 22H2 10.0: from 10.0.22621.0 to 10.0.22621.4037 (excluded) — fixed in 10.0.22621.4037
Windows 10 Version 22H2 10.0: from 10.0.19045.0 to 10.0.19045.4780 (excluded) — fixed in 10.0.19045.4780
Windows 11 version 22H3 10.0: from 10.0.22631.0 to 10.0.22631.4037 (excluded) — fixed in 10.0.22631.4037
Windows 11 Version 23H2 10.0: from 10.0.22631.0 to 10.0.22631.4037 (excluded) — fixed in 10.0.22631.4037
Windows Server 2022, 23H2 Edition (Server Core installation) 10.0: from 10.0.25398.0 to 10.0.25398.1085 (excluded) — fixed in 10.0.25398.1085
Windows 10 Version 1507 10.0: from 10.0.10240.0 to 10.0.10240.20751 (excluded) — fixed in 10.0.10240.20751
Windows 10 Version 1607 10.0: from 10.0.14393.0 to 10.0.14393.7259 (excluded) — fixed in 10.0.14393.7259
Windows Server 2016 10.0: from 10.0.14393.0 to 10.0.14393.7259 (excluded) — fixed in 10.0.14393.7259
Windows Server 2016 (Server Core installation) 10.0: from 10.0.14393.0 to 10.0.14393.7259 (excluded) — fixed in 10.0.14393.7259
Windows 11 Version 24H2 10.0: from 10.0.26100.0 to 10.0.26100.1457 (excluded) — fixed in 10.0.26100.1457 (from the advisory and NVD; check the exact builds in the official advisory)
CVSS score
7
Actively exploited
Yes, listed in the CISA Known Exploited Vulnerabilities catalog
CISA due date
September 3, 2024 (deadline for US federal agencies: a good benchmark for you too)
Source
CISA KEV – original advisory
Published
August 13, 2024

The description and the recommended action are quoted from the public advisory; severity, exploitation status and affected versions are compiled automatically from public sources and may contain errors. The vendor's original advisory prevails: check it before taking action. This information is provided without warranty and does not replace a professional assessment.

More Microsoft advisories