8.4
High
CVE-2024-6769 A DLL Hijacking caused by drive remapping combined with a poisoning of the activation cache in Microsoft Windows 10,…
Description
A DLL Hijacking caused by drive remapping combined with a poisoning of the activation cache in Microsoft Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, and Windows Server 2022 allows a malicious authenticated attacker to elevate from a medium integrity process to a high integrity process without the intervention of a UAC prompt.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Windows 10 | 10.0.0 | No fix stated |
| Windows 11 | 10.0.0 | No fix stated |
| Windows Server 2016 | 10.0.0 | No fix stated |
| Windows Server 2019 | 10.0.0 | No fix stated |
| Windows Server 2022 | 10.0.0 | No fix stated |
| windows_10 | 10.0.0 | No fix stated |
| windows_11 | 10.0.0 | No fix stated |
| windows_server_2016 | 10.0.0 | No fix stated |
| windows_server_2019 | 10.0.0 | No fix stated |
Show the other branch Hide the other branch
| Product | Affected versions | Fixed in |
|---|---|---|
| windows_server_2022 | 10.0.0 | No fix stated |
References
- www.fortra.com www.fortra.com
Timeline
- Published
- Last modified
Other CVEs of Windows 10
The 214 CVEs of Windows 10 →
CVE-2024-6768
A Denial of Service in CLFS.sys in Microsoft Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, and…
6.8
Medium
CVE-2019-0571
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations,…
Not rated
CVE-2019-0549
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka…
Not rated
CVE-2019-0570
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka…
Not rated