Vulnerability details

CVE-2024-49084

Microsoft Windows 10Microsoft Windows 11Microsoft Windows Server

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1

7.0High

Official description

Windows Kernel Elevation of Privilege Vulnerability

CVSS scores

Score	Version	Source	Vector
7.0High	3.1	CVEProject cvelistV5 (CNA) (microsoft)	`CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C`

Affected products

Vendor	Product	Versions	Source
Microsoft	Windows 10 Version 1507	10.0.10240.0 ≤ v < 10.0.10240.20857	CVEProject cvelistV5 (CNA)
Microsoft	Windows 10 Version 1607	10.0.14393.0 ≤ v < 10.0.14393.7606	CVEProject cvelistV5 (CNA)
Microsoft	Windows 10 Version 1809	10.0.17763.0 ≤ v < 10.0.17763.6659	CVEProject cvelistV5 (CNA)
Microsoft	Windows 10 Version 21H2	10.0.19043.0 ≤ v < 10.0.19044.5247	CVEProject cvelistV5 (CNA)
Microsoft	Windows 10 Version 22H2	10.0.19045.0 ≤ v < 10.0.19045.5247	CVEProject cvelistV5 (CNA)
Microsoft	Windows 11 Version 24H2	10.0.26100.0 ≤ v < 10.0.26100.2605	CVEProject cvelistV5 (CNA)
Microsoft	Windows 11 version 22H2	10.0.22621.0 ≤ v < 10.0.22621.4602	CVEProject cvelistV5 (CNA)
Microsoft	Windows 11 version 22H3	10.0.22631.0 ≤ v < 10.0.22631.4602	CVEProject cvelistV5 (CNA)
Microsoft	Windows 11 version 23H2	10.0.22631.0 ≤ v < 10.0.22631.4602	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2008 R2 Service Pack 1	6.1.7601.0 ≤ v < 6.1.7601.27467	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2008 R2 Service Pack 1 (Server Core installation)	6.1.7601.0 ≤ v < 6.1.7601.27467	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2008 Service Pack 2	6.0.6003.0 ≤ v < 6.0.6003.23016	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2008 Service Pack 2	6.0.6003.0 ≤ v < 6.0.6003.23016	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2008 Service Pack 2 (Server Core installation)	6.0.6003.0 ≤ v < 6.0.6003.23016	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2012	6.2.9200.0 ≤ v < 6.2.9200.25222	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2012 (Server Core installation)	6.2.9200.0 ≤ v < 6.2.9200.25222	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2012 R2	6.3.9600.0 ≤ v < 6.3.9600.22318	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2012 R2 (Server Core installation)	6.3.9600.0 ≤ v < 6.3.9600.22318	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2016	10.0.14393.0 ≤ v < 10.0.14393.7606	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2016 (Server Core installation)	10.0.14393.0 ≤ v < 10.0.14393.7606	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2019	10.0.17763.0 ≤ v < 10.0.17763.6659	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2019 (Server Core installation)	10.0.17763.0 ≤ v < 10.0.17763.6659	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2022	10.0.20348.0 ≤ v < 10.0.20348.2966	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2022, 23H2 Edition (Server Core installation)	10.0.25398.0 ≤ v < 10.0.25398.1308	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2025	10.0.26100.0 ≤ v < 10.0.26100.2605	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2025 (Server Core installation)	10.0.26100.0 ≤ v < 10.0.26100.2605	CVEProject cvelistV5 (CNA)

References and advisories

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49084 vendor-advisorypatch

Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published: 2024-12-10
Last updated: 2026-06-09
State: Published
Assigner (CNA): microsoft

Exploit prediction (EPSS)

0.43%

Probability of exploitation in 30 days

37.8%

Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable: No
Exploitation: None
Technical impact: Total

Weaknesses (CWE)

CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')