MSRC-CVE-2024-26170 — Windows Composite Image File System (CimFS) Elevation of Privilege Vulnerability

Summary

Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

Details

What privileges could be gained by an attacker who successfully exploited the vulnerability?
An attacker who successfully exploited this vulnerability could gain specific limited SYSTEM privileges.

Security updates
10.0.20348.2340 — https://support.microsoft.com/help/5035857
10.0.20348.2333 — https://support.microsoft.com/help/5035959
10.0.22000.2836 — https://support.microsoft.com/help/5035854
10.0.19044.4170 — https://support.microsoft.com/help/5035845
10.0.22621.3296 — https://support.microsoft.com/help/5035853
10.0.25398.763 — https://support.microsoft.com/help/5035856

Vulnerabilities 1

High 7.8

CVE-2024-26170 Public exploit

Windows Composite Image File System (CimFS) Elevation of Privilege Vulnerability

Windows Composite Image File System (CimFS) Elevation of Privilege Vulnerability

Microsoft Windows Server 2022 Windows 10 Version 21H2 Windows 10 Version 22H2 Windows

Mar 12, 2024

Revision history

2024-03-12 #1
Information published.

References

CVE-2024-26170 Windows Composite Image File System (CimFS) Elevation of Privilege Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26170
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss