Description
Windows Kernel Elevation of Privilege Vulnerability
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Windows 10 Version 1507 | 10.0.10240.0 – < 10.0.10240.20680 | 10.0.10240.20680 |
| Microsoft | Windows 10 Version 1607 | 10.0.14393.0 – < 10.0.14393.7070 | 10.0.14393.7070 |
| Microsoft | Windows 10 Version 1809 | 10.0.17763.0 – < 10.0.17763.5936, 10.0.0 – < 10.0.17763.5936 | 10.0.17763.5936 |
| Microsoft | Windows 10 Version 21H2 | 10.0.19044.0 – < 10.0.19044.4529 | 10.0.19044.4529 |
| Microsoft | Windows 10 Version 22H2 | 10.0.19045.0 – < 10.0.19045.4529 | 10.0.19045.4529 |
| Microsoft | Windows 11 version 21H2 | 10.0.22000.0 – < 10.0.22000.3019 | 10.0.22000.3019 |
| Microsoft | Windows 11 version 22H2 | 10.0.22621.0 – < 10.0.22621.3737 | 10.0.22621.3737 |
| Microsoft | Windows 11 version 23H2 | 10.0.22631.0 – < 10.0.22631.3737 | 10.0.22631.3737 |
| Microsoft | Windows Server 2016 | 10.0.14393.0 – < 10.0.14393.7070 | 10.0.14393.7070 |
| Microsoft | Windows Server 2016 (Server Core installation) | 10.0.14393.0 – < 10.0.14393.7070 | 10.0.14393.7070 |
| Microsoft | Windows Server 2019 | 10.0.17763.0 – < 10.0.17763.5936 | 10.0.17763.5936 |
| Microsoft | Windows Server 2019 (Server Core installation) | 10.0.17763.0 – < 10.0.17763.5936 | 10.0.17763.5936 |
| Microsoft | Windows Server 2022 | 10.0.20348.0 – < 10.0.20348.2527 | 10.0.20348.2527 |
| Microsoft | Windows Server 2022, 23H2 Edition (Server Core installation) | 10.0.25398.0 – < 10.0.25398.950 | 10.0.25398.950 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 10 repositories
-
exploits-forsale/collateral-damage ★ 532 · Jul 15, 2024
Kernel exploit for Xbox SystemOS using CVE-2024-30088
-
tykawaii98/CVE-2024-30088 ★ 289 · Jun 24, 2024
-
Zombie-Kaiser/CVE-2024-30088-Windows-poc ★ 45 · Jul 5, 2024
该漏洞存在于 NtQueryInformationToken 函数中，特别是在处理AuthzBasepCopyoutInternalSecurityAttributes 函数时，该漏洞源于内核在操作对象时对锁定机制的不当管理，这一失误可能导致恶意实体意外提升权限。
-
NextGenPentesters/CVE-2024-30088- ★ 8 · Jun 27, 2024
🆘New Windows Kernel Priviledge Escalation Vulnerability
-
Admin9961/CVE-2024-30088 ★ 2 · Jul 27, 2024
Questa repository contiene una replica (tentativo di replica) scritto in Python per CVE-2024-30088.
-
repo4Chu/CVE-2024-30088__Windows-TOCTOU-exploit ★ 1 · Apr 16, 2026
This is a modified version of the original CVE-2024-30088 exploit, adapted to work in non-interactive environments (WinRM).
-
Justintroup85/exploits-forsale-collateral-damage ★ 1 · Aug 25, 2024
Kernel exploit for Xbox SystemOS using CVE-2024-30088
-
FangFang-Yi/CVE-2024-30088 ★ 0 · Jun 11, 2026
-
th3g3ntl3m4n84/CVE-2024-30088__Windows-TOCTOU-exploit ★ 0 · Apr 16, 2026
This is a modified version of the original CVE-2024-30088 exploit, adapted to work in non-interactive environments (WinRM).
-
cyghtinc/cve-2024-30088-binary-LPE-PRIVIELEGE-ESCALATION-CYGHT-TOCTOU ★ 0 · Dec 7, 2025
compiled poc binary local privilege escalation by oilrig
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 3
- WID-SEC-2024-1347 Microsoft Windows: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 26, 2024
- NCSC-2024-0248 Kwetsbaarheden verholpen in Microsoft Windows NCSC-NL (Netherlands) · Jun 11, 2024
- MSRC-CVE-2024-30088 Windows Kernel Elevation of Privilege Vulnerability Microsoft Security Response Center · Jun 11, 2024
References
- Windows Kernel Elevation of Privilege Vulnerability vendor-advisory patch