Main Vulnerability Database Vulnerabilities #VU93907

Integer overflow in Microsoft Windows and Windows Server - CVE-2024-38080

Published: July 9, 2024 / Updated: September 6, 2024

Vulnerability identifier: #VU93907

CSH Severity: High

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-38080

CWE-ID: CWE-190

Exploitation vector: Local access

Exploit availability: The vulnerability is being exploited in the wild

Vulnerability details

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to integer overflow in Windows Hyper-V component. A local user can trigger an integer overflow and execute arbitrary code with SYSTEM privileges.

Note, the vulnerability is being actively exploited in the wild.

Affected software

Microsoft Windows
Windows Server

How to mitigate CVE-2024-38080

Install updates from vendor's website.

Microsoft Windows - addressed in versions 10 1607 10.0.14393.7159, 11 21H2 10.0.22000.3079, 11 22H2 10.0.22621.3880, 11 23H2 10.0.22631.3880
Windows Server - addressed in versions 2016 10.0.14393.7159, 2022 10.0.20348.2582

Links to Public Exploits and PoC-codes

Exploit #10489 - CVE-2024-38080 (September 6, 2024)

External References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2024-38080

Related Security Bulletins

Privilege escalation in Microsoft Windows Hyper-V