CVE-2024-49019
Published: 12 November 2024
Summary
CVE-2024-49019 is a high-severity Weak Authentication (CWE-1390) vulnerability in Microsoft Windows Server 2008. Its CVSS base score is 7.8 (High).
Operationally, ranked in the top 10.2% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
CVE-2024-49019 is an elevation of privilege vulnerability affecting Active Directory Certificate Services. It carries a CVSS 3.1 base score of 7.8 and is associated with CWE-1390. The flaw permits an attacker to obtain higher privileges on the affected system.
A local attacker with low privileges and no user interaction can exploit the issue to achieve high impact on confidentiality, integrity, and availability. The attack vector is local, with low attack complexity and unchanged scope.
The official advisory published by Microsoft is available at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49019. The EPSS probability rose from a low baseline after disclosure to a peak of 0.0969 on 2025-12-11 before receding to its current value of 0.0483.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-43896
Vulnerability details
Active Directory Certificate Services Elevation of Privilege Vulnerability
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Helps detect exploitation of weak authentication mechanisms by notifying of previous unauthorized logons.
The IA policy requires strong authentication methods, reducing use of weak authentication.
Enforces dynamic, context-aware authentication that mitigates weak static authentication by increasing requirements based on risk or conditions.
Enforces authentication for users, reducing the viability of weak authentication mechanisms.
Requires authentication mechanisms to meet applicable standards and guidelines, preventing weak authentication.