CVE-2024-30085
Published: 11 June 2024
Summary
CVE-2024-30085 is a high-severity Heap-based Buffer Overflow (CWE-122) vulnerability in Microsoft Windows 10 1809. Its CVSS base score is 7.8 (High).
Operationally, ranked in the top 1.6% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability, identified as CVE-2024-30085, affects the Windows Cloud Files Mini Filter Driver component. It carries a CVSS 3.1 base score of 7.8 and is associated with CWE-122, indicating a heap-based buffer overflow condition that can be triggered locally.
An attacker with existing local access and low privileges can exploit the flaw without user interaction to elevate rights on the system, resulting in full control over confidentiality, integrity, and availability of the affected host.
Microsoft has published an advisory at the MSRC update guide that addresses the issue and supplies remediation guidance for supported Windows versions. The EPSS score has remained elevated near its recorded peak of 0.6353 with a current value of 0.6303, indicating sustained exploitation interest since disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-28022
Vulnerability details
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.