Skip to content
OpenAdvisories
High MSRC-CVE-2024-21302 1 CVE

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

Published Aug 13, 2024 · Updated Jul 10, 2025 · Revision 6

Vendor: Microsoft

Summary

Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited, publicly disclosed before the fix — Exploitation Less Likely. Customer action: Required.

Details

What privileges could be gained by an attacker who successfully exploited this vulnerability?
An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.

Security updates
10.0.17763.7558 — https://support.microsoft.com/help/5062557
10.0.20348.3453 — https://support.microsoft.com/help/5055526
10.0.19044.5737 — https://support.microsoft.com/help/5055518
10.0.19044.4780 — https://support.microsoft.com/help/5041580
10.0.22621.5189 — https://support.microsoft.com/help/5055528
10.0.25398.1551 — https://support.microsoft.com/help/5055527
10.0.26100.3775 — https://support.microsoft.com/help/5055523
10.0.10240.21073 — https://support.microsoft.com/help/5062561
10.0.14393.8246 — https://support.microsoft.com/help/5062560

Vulnerabilities 1

Revision history

  1. #6

    Microsoft has released July 8, 2025 security updates for Windows 10 1507, Windows 10, version 1607, Windows 10, version 1809, and Windows Server 2016 and Windows Server 2018 that provide mitigations to protect these versions of Windows from this vulnerability. This ensures that mitigations are available to protect all supported versions of Windows 10 and Windows 11 from this vulnerability. See the available mitigations and deployment guidelines described in [KB5042562: Guidance for blocking rollback of virtualization-based security related updates](https://support.microsoft.com/help/5042562).

  2. #5

    Updated the build numbers. This is an informational update only.

  3. #4

    To comprehensively address CVE-2024-21302, Microsoft has released April 2025 security updates for all supported editions of Windows. Microsoft recommends that customers install the updates to be fully protected from the vulnerability. Customers whose systems are configured to receive automatic updates do not need to take any further action.

  4. #3

    Microsoft has released the August 2024 security updates that include an opt-in mitigation available as an interim solution to help protect customers concerned about this vulnerability until the final mitigation is available in a security update. For more information, please see [KB5042562: Guidance for blocking rollback of virtualization-based security related updates](https://support.microsoft.com/help/5042562).

  5. #2

    Added the Details, Recommended Actions, and Detections sections in the CVE Executive Summary because these were omitted when the CVE was initially published.

  6. #1

    Information published.

References