Cyber Resilience

CVE-2024-26218

High

Published: 09 April 2024

Published
09 April 2024
Modified
08 January 2025
KEV Added
Patch
CVSS Score v3.1 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.2715 96.5th percentile
Risk Priority 32 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2024-26218 is a high-severity Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367) vulnerability in Microsoft Windows 10 1809. Its CVSS base score is 7.8 (High).

Operationally, ranked in the top 3.5% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

Deeper analysis

Windows Kernel Elevation of Privilege Vulnerability CVE-2024-26218 affects the Windows kernel and carries a CVSS 7.8 score reflecting local attack vector, low attack complexity, and low privileges required. The associated CWEs include CWE-367, indicating a time-of-check to time-of-use race condition class of flaw.

An authenticated local attacker can exploit the issue without user interaction to elevate privileges and obtain full control over confidentiality, integrity, and availability on the affected system. The published EPSS score has reached a peak of 0.3263 with a current value of 0.2715, indicating measurable post-disclosure interest in exploitation.

Microsoft has published guidance for the vulnerability in its security update catalog at the referenced advisory URL, which practitioners should consult for available patches and configuration steps.

EU & UK References

Vulnerability details

Windows Kernel Elevation of Privilege Vulnerability

CWE(s)

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

microsoft
windows 10 1809
≤ 10.0.17763.5696
microsoft
windows 10 21h2
≤ 10.0.19044.4291
microsoft
windows 10 22h2
≤ 10.0.19045.4291
microsoft
windows 11 21h2
≤ 10.0.22000.2899
microsoft
windows 11 22h2
≤ 10.0.22621.3447
microsoft
windows 11 23h2
≤ 10.0.22631.3447
microsoft
windows server 2019
≤ 10.0.17763.5696
microsoft
windows server 2022
≤ 10.0.20348.2402
microsoft
windows server 2022 23h2
≤ 10.0.25398.830

Mitigating Controls

Likely Mitigating Controls AI

Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.

addresses: CWE-367

Timestamps meeting UTC or offset standards help identify TOCTOU issues through precise chronological reconstruction of check/use operations.

References