CVE-2024-21338
Windows Kernel Elevation of Privilege Vulnerability
KEV RANSOMWAREHIGH 7.8EPSS 59.8%
Windows Kernel Elevation of Privilege Vulnerability
- Affected
- Microsoft · Windows 10 Version 1809 · Windows 10 Version 21H2 · Windows 10 Version 22H2 · Windows 11 version 21H2 · Windows 11 version 22H2 · Windows 11 version 22H3
- CVSS v3.1 MICROSOFT
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS
- 59.81% chance of exploitation in the next 30 days, 99th percentile
- CISA KEV
- added 2024-03-04, used in ransomware campaigns
- Published
- 2024-02-13
- Updated
- 2026-08-10
Proof-of-concept exploits (10)
- https://decoded.avast.io/janvojtesek/lazarus-and-the-fudmodule-rootkit-beyond-byovd-with-…
- Crowdfense/CVE-2024-2133881★ · 2024-07-29
- UMU618/CVE-2024-213382★ · 2024-04-17
- Zombie-Kaiser/CVE-2024-21338-x64-build-7★ · 2024-05-22
- hakaioffsec/CVE-2024-21338333★ · 2024-04-16
- tykawaii98/CVE-2024-21338_PoC40★ · 2024-06-23
- wusijie/CVE-2024-21338-12★ · 2024-05-05
- MistyFir/CVE-2024-21338-Exploit7★ · 2026-04-06
- vikhegde/Kernel-Exploitation-dbgman0★ · 2026-03-18
- kikozz/CVE-2024-21338/blob/f2e2b75ca6a30bef6e8c79e9d901a1ffada5b6a8/README.md0★ · 2026-09-30
ExploitDB entries (2)
Security advisories
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21338
- https://decoded.avast.io/janvojtesek/lazarus-and-the-fudmodule-rootkit-beyond-byovd-with-…