CVE-2024-43502
Published: 08 October 2024
Summary
CVE-2024-43502 is a high-severity Use of Uninitialized Resource (CWE-908) vulnerability in Microsoft Windows 10 1809. Its CVSS base score is 7.1 (High).
Operationally, ranked in the top 7.3% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
CVE-2024-43502 is an elevation of privilege vulnerability in the Windows kernel, published on October 8, 2024. It carries a CVSS 3.1 base score of 7.1 with the vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H and is associated with CWE-908. The flaw affects the Windows kernel component and enables a local attacker to obtain unauthorized access to sensitive information or disrupt system availability.
A local attacker with low privileges can exploit the issue without user interaction to achieve elevation of privilege, resulting in high confidentiality and availability impacts while leaving integrity unaffected. The EPSS score remains flat at 0.0869 with no material rise after disclosure.
Microsoft's advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43502 supplies official mitigation guidance and patch information for affected Windows systems.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-40758
Vulnerability details
Windows Kernel Elevation of Privilege Vulnerability
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.