VDB
BDU%3A2024-04657
BDU%3A2024-04657
PUBLISHED
CVSS 7 HIGH
Уязвимость ядра операционных систем Windows, позволяющая нарушителю повысить свои привилегии
Risk Scores
CVSS 3.1
7
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Windows 11 Version 23H2 | 10.0.22631.0 |
| Microsoft | Windows Server 2022 | 10.0.20348.0 |
| Microsoft | Windows 11 version 21H2 | 10.0.22000.0 |
| Microsoft | Windows 10 Version 22H2 | 10.0.19045.0 |
| Microsoft | Windows Server 2016 | 10.0.14393.0 |
| Microsoft | Windows 11 version 22H2 | 10.0.22621.0 |
| Microsoft | Windows 11 version 22H3 | 10.0.22631.0 |
| Microsoft | Windows Server 2022, 23H2 Edition (Server Core installation) | 10.0.25398.0 |
| microsoft | windows_10_1809 | 10.0.0, 10.0.17763.0 |
| microsoft | windows_server_2022 | 10.0.20348.0 |
| microsoft | windows_server_2019 | 10.0.17763.0, 10.0.17763.0 |
| microsoft | windows_11_23H2 | 10.0.22631.0, 10.0.22631.0 |
| microsoft | windows_server_23h2 | 10.0.25398.0 |
| microsoft | windows_11_22H2 | 10.0.22621.0 |
| Microsoft | Windows Server 2019 (Server Core installation) | 10.0.17763.0 |
| microsoft | windows_11_21H2 | 10.0.22000.0 |
| Microsoft | Windows 10 Version 21H2 | 10.0.19044.0 |
| Microsoft | Windows 10 Version 1507 | 10.0.10240.0 |
| microsoft | windows_10_1607 | 10.0.14393.0 |
| Microsoft Corp | Windows 10, Windows 10 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 10 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows 10 21H2, Windows 11 22H2, Windows 10 22H2, Windows 11 21H2, Windows 11 23H2, Windows Server 2022, 23H2 Edition (Server Core installation) |
…and 8 more
Timeline
- Jun 11, 2024 CVE Published
- Jun 26, 2024 PoC Published
- Jun 26, 2024 PoC Published
- Jun 27, 2024 PoC Published
- Jun 28, 2024 PoC Published
- Jul 11, 2024 PoC Published
- Jul 11, 2024 PoC Published
- Jul 15, 2024 PoC Published
- Jul 16, 2024 PoC Published
- Jul 18, 2024 PoC Published
- Jul 20, 2024 PoC Published
- Jul 22, 2024 PoC Published
References
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-30088 url
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30088 url
- https://www.trendmicro.com/en_us/research/24/j/earth-simnavaz-cyberattacks-uae-gulf-regions.html url
- https://www.bleepingcomputer.com/news/security/oilrig-hackers-now-exploit-windows-flaw-to-elevate-privileges/ url