CVE-2024-21345
Published: 13 February 2024
Summary
CVE-2024-21345 is a high-severity Heap-based Buffer Overflow (CWE-122) vulnerability in Microsoft Windows Server 2022 23H2. Its CVSS base score is 8.8 (High).
Operationally, ranked in the top 3.1% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
CVE-2024-21345 is an elevation-of-privilege vulnerability in the Windows kernel. It is tracked under CWE-122 and carries a CVSS 3.1 base score of 8.8 reflecting local attack vector, low complexity, low privileges required, no user interaction, and changed scope that can result in full confidentiality, integrity, and availability impact on the affected system.
A local attacker who already possesses a low-privileged account on a vulnerable Windows host can exploit the flaw to obtain higher privileges, allowing arbitrary code execution with kernel-level rights and full control over the target machine.
Microsoft Security Response Center advisories for CVE-2024-21345 contain the authoritative mitigation steps and list the security updates that address the issue.
The associated EPSS score has reached a peak of 0.3248, indicating meaningful post-disclosure exploitation interest.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-19057
Vulnerability details
Windows Kernel Elevation of Privilege Vulnerability
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.