CVE-2024-38215
CVSS 3.1 Score 7.8 of 10 (high)
Details
Summary
CVE-2024-38215 is a newly disclosed vulnerability affecting the Windows Cloud Files Mini Filter Driver. This issue grants attackers local privilege escalation capabilities, allowing them to elevate their user privileges to administrative level. Successful exploitation may lead to unauthorized access and modification of critical system settings or data. The Microsoft Cloud Files Mini Filter Driver, responsible for indexing and filtering data in the Microsoft OneDrive service, is the affected component. Users are strongly advised to install the Microsoft-released patch as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.