CVE-2024-26229

Windows CSC Service Elevation of Privilege Vulnerability

Windows CSC Service Elevation of Privilege Vulnerability

Affected

Microsoft · Windows 10 Version 1809 · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows Server 2022 · Windows 11 version 21H2 · Windows 10 Version 21H2

CVSS v3.1 MICROSOFT

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

9.38% chance of exploitation in the next 30 days, 95th percentile

Published

2024-04-09

Updated

2025-05-03

Proof-of-concept exploits (10)

• Cracked5pider/eop24-2622941★ · 2024-08-15
• RalfHacker/CVE-2024-26229-exploit145★ · 2024-06-11
• apkc/CVE-2024-26229-BOF29★ · 2024-06-13
• dkstar11q/CVE-2024-26229-lpe0★ · 2024-06-10
• michredteam/PoC-2622915★ · 2024-06-12
• mqxmm/CVE-2024-262290★ · 2024-10-13
• shinspace92/cve-2024-262290★ · 2026-07-20
• team-MineDEV/CVE-2024-2622911★ · 2024-06-16
• 0xGunrunner/CVE-2024-26229-BOF0★ · 2026-04-15
• vettrivel007/CVE-2024-262290★ · 2026-03-27

Security advisories

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26229

References

• CVE Record
• NVD entry

Related

• CVE-2022-31814
• CVE-2022-39952
• CVE-2022-40684
• CVE-2022-44877
• CVE-2024-27130
• CVE-2024-29269