CVE-2024-38100High· 7.8▾ MidnightPoC availableWindows File Explorer Elevation of Privilege Vulnerability
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 42.9 · likelihood 0.9 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
4.5%
Windows File Explorer Elevation of Privilege Vulnerability
windows_server_2016 < 10.0.14393.7159windows_server_2019 < 10.0.17763.6054windows_server_2022 < 10.0.20348.2582windows_server_2022_23h2 < 10.0.25398.1009Upgrade past the affected range:
windows_server_2016 10.0.14393.7159windows_server_2019 10.0.17763.6054windows_server_2022 10.0.20348.2582windows_server_2022_23h2 10.0.25398.1009Connected by shared product, vendor, weakness, or advisory.
CVE-2024-49068High· 8.2Microsoft SharePoint Elevation of Privilege Vulnerability
CVE-2016-7244Medium· 5.5Microsoft Office 2007 SP3 allows remote attackers to cause a denial of service (application hang) via a crafted Office document, aka "Microsoft Office Denial of Service Vulnerability."
CVE-2021-33779High· 8.1Windows AD FS Security Feature Bypass Vulnerability
CVE-2024-29060Medium· 6.7Visual Studio Elevation of Privilege Vulnerability
CVE-2024-43590High· 7.8Visual C++ Redistributable Installer Elevation of Privilege Vulnerability
CVE-2026-62765High· 7.5Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability