CVE-2024-38106

7.0
HIGHCVSS v3.1 Base Score
6.34%
LOW RiskEPSS (93rd percentile)
KEV
CWE-591

Windows Kernel Elevation of Privilege Vulnerability

Published: 8/13/2024
Modified: 6/17/2026
Back to CVE Lookup

ACTIVELY EXPLOITED IN THE WILD

This vulnerability is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

Vulnerability Name:

Microsoft Windows Kernel Privilege Escalation Vulnerability

Vendor / Product:

Microsoft Windows

Required Action:

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Due Date: 9/3/2024(OVERDUE)
Added to KEV:

8/13/2024

Notes:

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38106; https://nvd.nist.gov/vuln/detail/CVE-2024-38106

View CISA KEV Catalog

Vulnerability Summary

CVSS v3 Score

7HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score (Exploitation Probability)

6.34%LOW Exploitation Risk
93rd percentile

This vulnerability has a 6.34% probability of being exploited in the next 30 days, ranking higher than 93% of all scored CVEs.

CWE Classification

CWE-591

Learn More

CVSS Calculator

View this score breakdown or calculate a custom score

Understanding CVSS Scoring

Learn how severity scores are calculated and what they mean

CVE Prioritization Guide

Best practices for deciding which vulnerabilities to address first

What is a CVE?

Essential guide to Common Vulnerabilities and Exposures

CVE vs CWE Explained

Understand how CVEs relate to underlying weakness types

Advertisement