CVE-2024-26218
Published: 09 April 2024
Summary
CVE-2024-26218 is a high-severity Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367) vulnerability in Microsoft Windows 10 1809. Its CVSS base score is 7.8 (High).
Operationally, ranked in the top 3.5% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
Windows Kernel Elevation of Privilege Vulnerability CVE-2024-26218 affects the Windows kernel and carries a CVSS 7.8 score reflecting local attack vector, low attack complexity, and low privileges required. The associated CWEs include CWE-367, indicating a time-of-check to time-of-use race condition class of flaw.
An authenticated local attacker can exploit the issue without user interaction to elevate privileges and obtain full control over confidentiality, integrity, and availability on the affected system. The published EPSS score has reached a peak of 0.3263 with a current value of 0.2715, indicating measurable post-disclosure interest in exploitation.
Microsoft has published guidance for the vulnerability in its security update catalog at the referenced advisory URL, which practitioners should consult for available patches and configuration steps.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-23494
Vulnerability details
Windows Kernel Elevation of Privilege Vulnerability
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Timestamps meeting UTC or offset standards help identify TOCTOU issues through precise chronological reconstruction of check/use operations.