Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.4

Windows service manager may allow attackers to run code

CVE-2024-27213 · published 2 years ago
Summary

A component of the Windows service manager can be tricked into using memory that has already been released, letting a malicious program execute code with higher system rights. This can happen without any user clicking or approving anything. Apply the latest security update from Microsoft as soon as possible to fix the issue.

What to do
  • Update google :unknown: to version Pixel-family specific:2024-03-05.
Affected software
Ecosystem VendorProductAffected versions
Android google :unknown: >= Pixel-family specific:0, < Pixel-family specific:2024-03-05
Fix: upgrade to Pixel-family specific:2024-03-05
– google android 13.0
cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*
Original advisory text
In BroadcastSystemMessage of servicemgr.cpp, there is a possible Remote Code Execution due to a use after free. This could lead to local escalation of privilege with no additional execution privile...
In BroadcastSystemMessage of servicemgr.cpp, there is a possible Remote Code Execution due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
8.4 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-416Use After Free
Timeline
Published1 Mar 2024
Updated22 Oct 2026
First seen8 Sep 2026
Sources
PUB-A-304201945 · OSV
CVE-2024-27213 · NVD
Track software like this
Free during beta