CVE-2024-26229
Published: 09 April 2024
Summary
CVE-2024-26229 is a high-severity Heap-based Buffer Overflow (CWE-122) vulnerability in Microsoft Windows 10 1507. Its CVSS base score is 7.8 (High).
Operationally, ranked in the top 0.6% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
CVE-2024-26229 is an elevation-of-privilege vulnerability in the Windows Client-Side Caching (CSC) Service. It carries a CVSS 3.1 base score of 7.8 and is associated with CWE-122. The flaw permits a local attacker to obtain full control over the affected system when successfully exploited.
An attacker who already possesses a low-privileged local account can trigger the vulnerability without user interaction. Successful exploitation grants the attacker the ability to read, write, or delete arbitrary data and to execute code with the highest privileges on the host.
Microsoft’s Security Response Center advisory for CVE-2024-26229 directs administrators to apply the security updates released on the April 2024 Patch Tuesday. The update addresses the underlying memory-corruption condition in the CSC service and is the primary recommended mitigation.
The vulnerability’s EPSS score currently stands at 0.8559 with a recorded peak of 0.8639, indicating sustained exploitation interest following disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-23505
Vulnerability details
Windows CSC Service Elevation of Privilege Vulnerability
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.