CVE-2024-30068High· 8.8▾ TwilightWindows Kernel Elevation of Privilege Vulnerability
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 48.4 · likelihood 0.2 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 2.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.8%
Windows Kernel Elevation of Privilege Vulnerability
windows_10_1507 < 10.0.10240.20680windows_10_1607 < 10.0.14393.7070windows_10_1809 < 10.0.17763.5936windows_10_21h2 < 10.0.19044.4529windows_10_22h2 < 10.0.19045.4529windows_11_21h2 < 10.0.22000.3019windows_11_22h2 < 10.0.22621.3737windows_11_23h2 < 10.0.22631.3737windows_server_2016 < 10.0.14393.7070windows_server_2019 < 10.0.17763.5936windows_server_2022 < 10.0.20348.2522windows_server_2022_23h2 < 10.0.25398.950Upgrade past the affected range:
windows_10_1507 10.0.10240.20680windows_10_1607 10.0.14393.7070windows_10_1809 10.0.17763.5936windows_10_21h2 10.0.19044.4529windows_10_22h2 10.0.19045.4529windows_11_21h2 10.0.22000.3019windows_11_22h2 10.0.22621.3737windows_11_23h2 10.0.22631.3737windows_server_2016 10.0.14393.7070windows_server_2019 10.0.17763.5936windows_server_2022 10.0.20348.2522windows_server_2022_23h2 10.0.25398.950Connected by shared product, vendor, weakness, or advisory.
CVE-2024-30069Medium· 4.7Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2026-108434Medium· 6.5Microsoft Office Word Information Disclosure Vulnerability
CVE-2026-108436Medium· 6.5Microsoft Office Word Information Disclosure Vulnerability
CVE-2026-108455Medium· 6.5Microsoft Office PowerPoint Information Disclosure Vulnerability
CVE-2026-108453Medium· 6.5Microsoft Office PowerPoint Information Disclosure Vulnerability
CVE-2016-7276High· 7.1Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office for Mac 2011, and Office 2016 for Mac allow remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via a …