CVE-2024-20683

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Jan 9, 2024
Updated: May 29, 2024
CWE ID 416

Summary

CVE-2024-20683 is a newly disclosed Win32k Elevation of Privilege vulnerability. An attacker who successfully exploits this weakness can elevate their user-level privileges to gain administrative control on a Windows system. The specific cause of this issue remains undisclosed, but it affects all supported versions of Microsoft Windows. Successful exploitation of this vulnerability could lead to significant security risks, including unauthorized access to sensitive data or system modifications. Users are advised to apply patches or updates as soon as they become available from Microsoft to mitigate this threat.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share