CVE-2024-30051

Windows DWM Core Library Elevation of Privilege Vulnerability

CVSS 7.8 HIGHEPSS 5.7%● KEVCWE-122

Vexday Risk Score

71High priority

SSVC decision (CISA)

Act

Exploitation + impact → act immediately

CVSS 7.8EPSS 5.7%KEV simPoC públicaNuclei —Metasploit —Patch referenciado

Lifecycle

14 May 2024Active exploitation (CISA KEV)

14 May 2024Published on NVD

14 Aug 2024Public PoC

Recommendation: Patch as soon as possible — active exploitation confirmed.

In short

A security flaw in Windows Desktop Window Manager (DWM) Core Library allows a local attacker with low privileges to gain higher system permissions. An attacker can exploit this to run malicious code with elevated privileges on the affected system.

Technical detail

CWE-122 (heap-based buffer overflow) in Windows DWM Core Library enables local privilege escalation when a low-privileged user processes specially crafted input. The vulnerability requires local access and leads to arbitrary code execution with SYSTEM or elevated privileges.

Summary generated and translated by AI from the official description.

Windows DWM Core Library Elevation of Privilege Vulnerability

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C

Affected products

public PoCs found — 2

githubgithub.com/fortra/CVE-2024-30051★ 125 githubgithub.com/devianntsec/CVE-2024-30051★ 0

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30051 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-30051