CVE-2024-21338

Windows Kernel Elevation of Privilege Vulnerability

CVSS v3.1

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

59.81% chance of exploitation in the next 30 days, 99th percentile

CISA KEV

added 2024-03-04, used in ransomware campaigns

Published

2024-02-13

Updated

2026-08-10

Proof-of-concept exploits (9)

• https://decoded.avast.io/janvojtesek/lazarus-and-the-fudmodule-rootkit-beyond-byovd-with-…
• Crowdfense/CVE-2024-2133882★ · 2024-07-29
• UMU618/CVE-2024-213382★ · 2024-04-17
• Zombie-Kaiser/CVE-2024-21338-x64-build-7★ · 2024-05-22
• hakaioffsec/CVE-2024-21338335★ · 2024-04-16
• tykawaii98/CVE-2024-21338_PoC40★ · 2024-06-23
• wusijie/CVE-2024-21338-12★ · 2024-05-05
• MistyFir/CVE-2024-21338-Exploit
• vikhegde/Kernel-Exploitation-dbgman

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/52275
• https://www.exploit-db.com/exploits/51946

References

• CVE Record
• NVD entry

Related

• CVE-2024-30088
• CVE-2024-4367
• CVE-2025-1097
• CVE-2025-1098
• CVE-2025-1974
• CVE-2025-24514