CVE-2024-30088

Windows Kernel Elevation of Privilege Vulnerability

CVSS v3.1

7.0 HIGHCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

68.20% chance of exploitation in the next 30 days, 99th percentile

CISA KEV

added 2024-10-15, used in ransomware campaigns

Published

2024-06-11

Updated

2026-08-10

Proof-of-concept exploits (9)

• Admin9961/CVE-2024-300882★ · 2024-07-27
• NextGenPentesters/CVE-2024-30088-8★ · 2024-06-27
• Zombie-Kaiser/CVE-2024-30088-Windows-poc45★ · 2024-07-05
• exploits-forsale/collateral-damage528★ · 2025-07-13
• tykawaii98/CVE-2024-30088289★ · 2024-07-31
• FangFang-Yi/CVE-2024-30088
• cyghtinc/cve-2024-30088-binary-LPE-PRIVIELEGE-ESCALATION-CYGHT-TOCTOU
• th3g3ntl3m4n84/CVE-2024-30088__Windows-TOCTOU-exploit
• vikhegde/Kernel-Exploitation-dbgman

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/cve_2024_30088_aut…

References

• CVE Record
• NVD entry

Related

• CVE-2025-24354
• CVE-2024-37726
• CVE-2024-21338
• CVE-2024-4367
• CVE-2023-38146
• CVE-2024-21345