CVE-2024-35250: Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

Overview

Severity
High (CVSS 7.8)
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Category
Elevation of Privilege
Exploit Status
Not Exploited
Exploitation Likelihood
More Likely
Patch Tuesday
2024-Jun
Released
2024-06-11
Last Updated
2024-06-11
EPSS Score
56.83% (percentile: 98.1%)
CISA KEV
Listed — due 2025-01-06

FAQ

What privileges could be gained by an attacker who successfully exploited this vulnerability? An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.

Known Exploits (5)

  • Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability — added 2025-06-21T11:43:24Z
  • Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability — added 2025-01-13T18:24:48Z
  • Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability — added 2024-11-23T12:12:00Z
  • Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability — added 2024-10-25T10:06:09Z
  • Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability — added 2024-10-13T19:30:20Z

Detection & Weaponization (3 sources)

Maturity: Detection

  • Metasploit modules: Windows Access Mode Mismatch LPE in ks.sys
  • Sigma rules: Potential CVE-2024-35250 Exploitation Activity
  • GitHub PoC: 5 repositories

Affected Products (36)

Windows

  • Windows 10 Version 1809 for 32-bit Systems
  • Windows 10 Version 1809 for x64-based Systems
  • Windows 10 Version 1809 for ARM64-based Systems
  • Windows Server 2019
  • Windows Server 2019 (Server Core installation)
  • Windows Server 2022
  • Windows Server 2022 (Server Core installation)
  • Windows 11 version 21H2 for x64-based Systems
  • Windows 11 version 21H2 for ARM64-based Systems
  • Windows 10 Version 21H2 for 32-bit Systems
  • Windows 10 Version 21H2 for ARM64-based Systems
  • Windows 10 Version 21H2 for x64-based Systems
  • Windows 11 Version 22H2 for ARM64-based Systems
  • Windows 11 Version 22H2 for x64-based Systems
  • Windows 10 Version 22H2 for x64-based Systems
  • Windows 10 Version 22H2 for ARM64-based Systems
  • Windows 10 Version 22H2 for 32-bit Systems
  • Windows 11 Version 23H2 for ARM64-based Systems
  • Windows 11 Version 23H2 for x64-based Systems
  • Windows Server 2022, 23H2 Edition (Server Core installation)
  • Windows 10 for 32-bit Systems
  • Windows 10 for x64-based Systems
  • Windows 10 Version 1607 for 32-bit Systems
  • Windows 10 Version 1607 for x64-based Systems
  • Windows Server 2016
  • Windows Server 2016 (Server Core installation)

ESU

  • Windows Server 2008 for 32-bit Systems Service Pack 2
  • Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
  • Windows Server 2008 for x64-based Systems Service Pack 2
  • Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
  • Windows Server 2008 R2 for x64-based Systems Service Pack 1
  • Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
  • Windows Server 2012
  • Windows Server 2012 (Server Core installation)
  • Windows Server 2012 R2
  • Windows Server 2012 R2 (Server Core installation)

Security Updates (15)

Acknowledgments

<a href=https://twitter.com/thezdi>Angelboy (@scwuaptx) from DEVCORE Research Team </a> working with <a href=https://www.zerodayinitiative.com/> Trend Micro Zero Day Initiative</a>, <a href="https://twitter.com/scwuaptx">Angelboy (@scwuaptx)</a> with <a href="https://devco.re/">DEVCORE</a>

Revision History

  • 2024-06-11: Information published.
  • 2024-06-11: Updated acknowledgment. This is an informational change only.