Reply to thread

Message

<blockquote data-quote="Freki123" data-source="post: 1077741" data-attributes="member: 11229">Microsoft patched a high-severity Windows Kernel privilege escalation vulnerability in February, six months after being informed that the flaw was being exploited as a zero-day.Tracked as <a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21338" target="_blank">CVE-2024-21338</a>, the security flaw was found by Avast Senior Malware Researcher Jan Vojtěšek in the appid.sys Windows AppLocker driver and reported to Microsoft last August as an actively exploited zero-day.The vulnerability impacts systems running multiple versions of Windows 10 and Windows 11 (including the latest releases), as well as Windows Server 2019 and 2022.Microsoft explains that successful exploitation enables local attackers to gain SYSTEM privileges in low-complexity attacks that don&#039;t require user interaction.[URL unfurl=&quot;true&quot;]https://cyberplace.social/@GossiTheDog/112027038989119814[/URL]</blockquote>

[QUOTE="Freki123, post: 1077741, member: 11229"] Microsoft patched a high-severity Windows Kernel privilege escalation vulnerability in February,[B] six months after being informed that the flaw was being exploited as a zero-day[/B]. Tracked as [URL='https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21338']CVE-2024-21338[/URL], the security flaw was found by Avast Senior Malware Researcher Jan Vojtěšek in the appid.sys Windows AppLocker driver and reported to Microsoft last August as an actively exploited zero-day. The vulnerability impacts systems running multiple versions of Windows 10 and Windows 11 (including the latest releases), as well as Windows Server 2019 and 2022. Microsoft explains that successful exploitation enables local attackers to gain SYSTEM privileges in low-complexity attacks that don't require user interaction. [URL unfurl="true"]https://cyberplace.social/@GossiTheDog/112027038989119814[/URL] [/QUOTE]

Verification