Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2024-30099: Windows Elevation of Privilege Vulnerability in Windows Kernel

CVE-2024-30099 · published 2 years ago

Summary

A vulnerability in Windows Kernel allows an attacker with elevated privileges to gain even more access to the system. This could lead to unauthorized changes or data theft. To protect your system, update Windows with the latest security patches.

What to do

Update microsoft windows server 2016 to version 10.0.14393.7070 or later.
Update microsoft windows 10 version 1507 to version 10.0.10240.20680 or later.
Update microsoft windows 10 version 1607 to version 10.0.14393.7070 or later.
Update microsoft windows 10 version 1809 to version 10.0.17763.5936 or later.
Update microsoft windows 10 version 21h2 to version 10.0.19044.4529 or later.
Update microsoft windows 10 version 22h2 to version 10.0.19045.4529 or later.
Update microsoft windows 11 version 21h2 to version 10.0.22000.3019 or later.
Update microsoft windows 11 version 22h2 to version 10.0.22621.3737 or later.
Update microsoft windows 11 version 23h2 to version 10.0.22631.3737 or later.
Update microsoft windows server 2016 (server core installation) to version 10.0.14393.7070 or later.
Update microsoft windows server 2019 to version 10.0.17763.5936 or later.
Update microsoft windows server 2019 (server core installation) to version 10.0.17763.5936 or later.
Update microsoft windows server 2022 to version 10.0.20348.2527 or later.
Update microsoft windows server 2022, 23h2 edition (server core installation) to version 10.0.25398.950 or later.
Update microsoft windows_10_1507 to version 10.0.10240.20680 or later.
Update microsoft windows_10_1607 to version 10.0.14393.7070 or later.
Update microsoft windows_10_1809 to version 10.0.17763.5936 or later.
Update microsoft windows_10_21h2 to version 10.0.19044.4529 or later.
Update microsoft windows_10_22h2 to version 10.0.19045.4529 or later.
Update microsoft windows_11_21h2 to version 10.0.22000.3019 or later.
Update microsoft windows_11_22h2 to version 10.0.22621.3737 or later.
Update microsoft windows_11_23h2 to version 10.0.22631.3737 or later.
Update microsoft windows_server_2016 to version 10.0.14393.7070 or later.
Update microsoft windows_server_2019 to version 10.0.17763.5936 or later.
Update microsoft windows_server_2022 to version 10.0.20348.2522 or later.
Update microsoft windows_server_2022_23h2 to version 10.0.25398.950 or later.

Affected software

Vendor	Product	Affected versions
microsoft	windows server 2016	< 10.0.14393.7070
microsoft	windows 10 version 1507	< 10.0.10240.20680
microsoft	windows 10 version 1607	< 10.0.14393.7070
microsoft	windows 10 version 1809	< 10.0.17763.5936
microsoft	windows 10 version 21h2	< 10.0.19044.4529
microsoft	windows 10 version 22h2	< 10.0.19045.4529
microsoft	windows 11 version 21h2	< 10.0.22000.3019
microsoft	windows 11 version 22h2	< 10.0.22621.3737
microsoft	windows 11 version 23h2	< 10.0.22631.3737
microsoft	windows server 2016 (server core installation)	< 10.0.14393.7070
microsoft	windows server 2019	< 10.0.17763.5936
microsoft	windows server 2019 (server core installation)	< 10.0.17763.5936
microsoft	windows server 2022	< 10.0.20348.2527
microsoft	windows server 2022, 23h2 edition (server core installation)	< 10.0.25398.950
microsoft	windows_10_1507	< 10.0.10240.20680 `cpe:2.3:o:microsoft:windows_10_1507::::::::`
microsoft	windows_10_1607	< 10.0.14393.7070 `cpe:2.3:o:microsoft:windows_10_1607::::::::`
microsoft	windows_10_1809	< 10.0.17763.5936 `cpe:2.3:o:microsoft:windows_10_1809::::::::`
microsoft	windows_10_21h2	< 10.0.19044.4529 `cpe:2.3:o:microsoft:windows_10_21h2::::::::`
microsoft	windows_10_22h2	< 10.0.19045.4529 `cpe:2.3:o:microsoft:windows_10_22h2::::::::`
microsoft	windows_11_21h2	< 10.0.22000.3019 `cpe:2.3:o:microsoft:windows_11_21h2::::::::`
microsoft	windows_11_22h2	< 10.0.22621.3737 `cpe:2.3:o:microsoft:windows_11_22h2::::::::`
microsoft	windows_11_23h2	< 10.0.22631.3737 `cpe:2.3:o:microsoft:windows_11_23h2::::::::`
microsoft	windows_server_2016	< 10.0.14393.7070 `cpe:2.3:o:microsoft:windows_server_2016::::::::`
microsoft	windows_server_2019	< 10.0.17763.5936 `cpe:2.3:o:microsoft:windows_server_2019::::::::`
microsoft	windows_server_2022	< 10.0.20348.2522 `cpe:2.3:o:microsoft:windows_server_2022::::::::`
microsoft	windows_server_2022_23h2	< 10.0.25398.950 `cpe:2.3:o:microsoft:windows_server_2022_23h2::::::::`

Original advisory text

Windows Kernel Elevation of Privilege Vulnerability

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30099 Patch Vendor Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker partial control

Severity

7.0 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-367Time-of-check Time-of-use (TOCTOU) Race Condition

Timeline

Published11 Jun 2024

Updated4 Nov 2026

First seen20 Jul 2026

Sources

CVE-2024-30099 · NVD

CVE-2024-30099 · MITRE

Track software like this

Free during beta