Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2024-35250: Windows allows local attacker to gain admin rights

CVE-2024-35250 · published 2 years ago · actively exploited

Summary

The core part of Windows that controls hardware contains a coding mistake that can be triggered by someone with normal user access to run code with full system privileges. This could let a user or malicious program take control of the computer. Apply the latest Windows updates from Microsoft as soon as possible.

What to do

Update microsoft windows_10_1507 to version 10.0.10240.20680 or later.
Update microsoft windows_10_1607 to version 10.0.14393.7070 or later.
Update microsoft windows_10_1809 to version 10.0.17763.5936 or later.
Update microsoft windows_10_21h2 to version 10.0.19044.4529 or later.
Update microsoft windows_10_22h2 to version 10.0.19045.4529 or later.
Update microsoft windows_11_21h2 to version 10.0.22000.3019 or later.
Update microsoft windows_11_22h2 to version 10.0.22621.3737 or later.
Update microsoft windows_11_23h2 to version 10.0.22631.3737 or later.
Update microsoft windows_server_2016 to version 10.0.14393.7070 or later.
Update microsoft windows_server_2019 to version 10.0.17763.5936 or later.
Update microsoft windows_server_2022 to version 10.0.20348.2522 or later.
Update microsoft windows_server_2022_23h2 to version 10.0.25398.950 or later.
Update microsoft windows 10 version 1507 to version 10.0.10240.20680 or later.
Update microsoft windows 10 version 1607 to version 10.0.14393.7070 or later.
Update microsoft windows 10 version 1809 to version 10.0.17763.5936 or later.
Update microsoft windows 10 version 21h2 to version 10.0.19044.4529 or later.
Update microsoft windows 10 version 22h2 to version 10.0.19045.4529 or later.
Update microsoft windows 11 version 21h2 to version 10.0.22000.3019 or later.
Update microsoft windows 11 version 22h2 to version 10.0.22621.3737 or later.
Update microsoft windows 11 version 23h2 to version 10.0.22631.3737 or later.
Update microsoft windows server 2008 r2 service pack 1 to version 6.1.7601.27170 or later.
Update microsoft windows server 2008 r2 service pack 1 (server core installation) to version 6.1.7601.27170 or later.
Update microsoft windows server 2008 service pack 2 to version 6.0.6003.22720 or later.
Update microsoft windows server 2008 service pack 2 (server core installation) to version 6.0.6003.22720 or later.
Update microsoft windows server 2012 to version 6.2.9200.24919 or later.
Update microsoft windows server 2012 (server core installation) to version 6.2.9200.24919 or later.
Update microsoft windows server 2012 r2 to version 6.3.9600.22023 or later.
Update microsoft windows server 2012 r2 (server core installation) to version 6.3.9600.22023 or later.
Update microsoft windows server 2016 to version 10.0.14393.7070 or later.
Update microsoft windows server 2016 (server core installation) to version 10.0.14393.7070 or later.
Update microsoft windows server 2019 to version 10.0.17763.5936 or later.
Update microsoft windows server 2019 (server core installation) to version 10.0.17763.5936 or later.
Update microsoft windows server 2022 to version 10.0.20348.2527 or later.
Update microsoft windows server 2022, 23h2 edition (server core installation) to version 10.0.25398.950 or later.

Affected software

Vendor	Product	Affected versions
microsoft	windows	All versions
microsoft	windows_10_1507	< 10.0.10240.20680 `cpe:2.3:o:microsoft:windows_10_1507::::::::`
microsoft	windows_10_1607	< 10.0.14393.7070 `cpe:2.3:o:microsoft:windows_10_1607::::::::`
microsoft	windows_10_1809	< 10.0.17763.5936 `cpe:2.3:o:microsoft:windows_10_1809::::::::`
microsoft	windows_10_21h2	< 10.0.19044.4529 `cpe:2.3:o:microsoft:windows_10_21h2::::::::`
microsoft	windows_10_22h2	< 10.0.19045.4529 `cpe:2.3:o:microsoft:windows_10_22h2::::::::`
microsoft	windows_11_21h2	< 10.0.22000.3019 `cpe:2.3:o:microsoft:windows_11_21h2::::::::`
microsoft	windows_11_22h2	< 10.0.22621.3737 `cpe:2.3:o:microsoft:windows_11_22h2::::::::`
microsoft	windows_11_23h2	< 10.0.22631.3737 `cpe:2.3:o:microsoft:windows_11_23h2::::::::`
microsoft	windows_server_2008	r2 `cpe:2.3:o:microsoft:windows_server_2008:-:sp2:::::x64:*`
microsoft	windows_server_2012	r2 `cpe:2.3:o:microsoft:windows_server_2012:-:::::::*`
microsoft	windows_server_2016	< 10.0.14393.7070 `cpe:2.3:o:microsoft:windows_server_2016::::::::`
microsoft	windows_server_2019	< 10.0.17763.5936 `cpe:2.3:o:microsoft:windows_server_2019::::::::`
microsoft	windows_server_2022	< 10.0.20348.2522 `cpe:2.3:o:microsoft:windows_server_2022::::::::`
microsoft	windows_server_2022_23h2	< 10.0.25398.950 `cpe:2.3:o:microsoft:windows_server_2022_23h2::::::::`
microsoft	windows 10 version 1507	< 10.0.10240.20680
microsoft	windows 10 version 1607	< 10.0.14393.7070
microsoft	windows 10 version 1809	< 10.0.17763.5936
microsoft	windows 10 version 21h2	< 10.0.19044.4529
microsoft	windows 10 version 22h2	< 10.0.19045.4529
microsoft	windows 11 version 21h2	< 10.0.22000.3019
microsoft	windows 11 version 22h2	< 10.0.22621.3737
microsoft	windows 11 version 23h2	< 10.0.22631.3737
microsoft	windows server 2008 r2 service pack 1	< 6.1.7601.27170
microsoft	windows server 2008 r2 service pack 1 (server core installation)	< 6.1.7601.27170
microsoft	windows server 2008 service pack 2	< 6.0.6003.22720
microsoft	windows server 2008 service pack 2 (server core installation)	< 6.0.6003.22720
microsoft	windows server 2012	< 6.2.9200.24919
microsoft	windows server 2012 (server core installation)	< 6.2.9200.24919
microsoft	windows server 2012 r2	< 6.3.9600.22023
microsoft	windows server 2012 r2 (server core installation)	< 6.3.9600.22023
microsoft	windows server 2016	< 10.0.14393.7070
microsoft	windows server 2016 (server core installation)	< 10.0.14393.7070
microsoft	windows server 2019	< 10.0.17763.5936
microsoft	windows server 2019 (server core installation)	< 10.0.17763.5936
microsoft	windows server 2022	< 10.0.20348.2527
microsoft	windows server 2022, 23h2 edition (server core installation)	< 10.0.25398.950

Original advisory text

Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability

Microsoft Windows Kernel-Mode Driver contains an untrusted pointer dereference vulnerability that allows a local attacker to escalate privileges.

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35250 Patch Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-... US Government Resource

Fix within

Internet-facing 3 days

and check for signs of compromise

Internal 14 days

Known to be exploited
Needs hands-on effort to exploit
Gives an attacker full control

Severity

7.8 High

Exploitation

Known exploited

Listed in the CISA KEV catalogue - exploitation confirmed in the wild.

25% chance of attack within 30 days

Type

CWE-822Untrusted Pointer Dereference

Timeline

Published11 Jun 2024

Updated30 Sep 2026

First seen6 Mar 2026

Sources

CVE-2024-35250 · CISA KEV

CVE-2024-35250 · NVD

CVE-2024-35250 · MITRE

Track software like this

Free during beta