CVE-2024-30017
Published: 14 May 2024
Summary
CVE-2024-30017 is a high-severity Heap-based Buffer Overflow (CWE-122) vulnerability in Microsoft Windows 10 1507. Its CVSS base score is 8.8 (High).
Operationally, ranked in the top 7.1% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
CVE-2024-30017 is a remote code execution vulnerability in Windows Hyper-V, a component that enables virtualization on supported Windows systems. The flaw carries a CVSS 3.1 base score of 8.8 and is associated with CWE-122, indicating a heap-based buffer overflow condition that can be reached across a network.
An attacker with low-privileged network access and no user interaction required can exploit the issue to execute arbitrary code on an affected Hyper-V host. Successful exploitation grants full control over confidentiality, integrity, and availability within the scope of the vulnerable component.
Microsoft’s security advisory at msrc.microsoft.com details the affected Windows builds and supplies patches that address the vulnerability; administrators are directed to apply the updates through the standard Windows Update or Microsoft Update Catalog channels.
The associated EPSS score has remained flat at 0.0934 since disclosure, indicating no material increase in observed exploitation interest.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-27957
Vulnerability details
Windows Hyper-V Remote Code Execution Vulnerability
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.