Cyber Resilience

CVE-2024-26229

High

Published: 09 April 2024

Published
09 April 2024
Modified
08 January 2025
KEV Added
Patch
CVSS Score v3.1 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.8559 99.4th percentile
Risk Priority 67 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2024-26229 is a high-severity Heap-based Buffer Overflow (CWE-122) vulnerability in Microsoft Windows 10 1507. Its CVSS base score is 7.8 (High).

Operationally, ranked in the top 0.6% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

Deeper analysis

CVE-2024-26229 is an elevation-of-privilege vulnerability in the Windows Client-Side Caching (CSC) Service. It carries a CVSS 3.1 base score of 7.8 and is associated with CWE-122. The flaw permits a local attacker to obtain full control over the affected system when successfully exploited.

An attacker who already possesses a low-privileged local account can trigger the vulnerability without user interaction. Successful exploitation grants the attacker the ability to read, write, or delete arbitrary data and to execute code with the highest privileges on the host.

Microsoft’s Security Response Center advisory for CVE-2024-26229 directs administrators to apply the security updates released on the April 2024 Patch Tuesday. The update addresses the underlying memory-corruption condition in the CSC service and is the primary recommended mitigation.

The vulnerability’s EPSS score currently stands at 0.8559 with a recorded peak of 0.8639, indicating sustained exploitation interest following disclosure.

EU & UK References

Vulnerability details

Windows CSC Service Elevation of Privilege Vulnerability

CWE(s)

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

microsoft
windows 10 1507
≤ 10.0.10240.20596 · ≤ 10.0.10240.20596
microsoft
windows 10 1607
≤ 10.0.14393.6897 · ≤ 10.0.14393.6897
microsoft
windows 10 1809
≤ 10.0.17763.5696
microsoft
windows 10 21h2
≤ 10.0.19044.4291
microsoft
windows 10 22h2
≤ 10.0.19045.4291
microsoft
windows 11 21h2
≤ 10.0.22000.2899
microsoft
windows 11 22h2
≤ 10.0.22621.3447
microsoft
windows 11 23h2
≤ 10.0.22631.3447
microsoft
windows server 2008
all versions, r2
microsoft
windows server 2012
r2
+4 more product configuration(s) — see NVD for full list

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References