CVE-2024-21338

Windows Kernel Elevation of Privilege Vulnerability

CVSS

No CVSS.

References

Link	Resource
https://decoded.avast.io/janvojtesek/lazarus-and-the-fudmodule-rootkit-beyond-byovd-with-an-admin-to-kernel-zero-day/	Exploit Technical Description Third Party Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21338	Patch Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21338	Patch Vendor Advisory
https://packetstorm.news/files/id/190586/	Exploit VDB Entry
https://www.exploit-db.com/exploits/52275	Exploit VDB Entry

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:microsoft:windows_11_23h2::::::::
	cpe:2.3:o:microsoft:windows_10_22h2::::::::
	cpe:2.3:o:microsoft:windows_11_22h2::::::::
	cpe:2.3:o:microsoft:windows_10_21h2::::::::
	cpe:2.3:o:microsoft:windows_11_21h2::::::::
	cpe:2.3:o:microsoft:windows_server_2022::::::::
	cpe:2.3:o:microsoft:windows_server_2019::::::::
	cpe:2.3:o:microsoft:windows_10_1809::::::::
	cpe:2.3:o:microsoft:windows_server_2022_23h2::::::::

History

28 Apr 2025, 20:47

Type	Values Removed	Values Added
References	~~() https://www.exploit-db.com/exploits/52275 -~~	() https://www.exploit-db.com/exploits/52275 - Exploit, VDB Entry
References	~~() https://packetstorm.news/files/id/190586/ -~~	() https://packetstorm.news/files/id/190586/ - Exploit, VDB Entry

24 Apr 2025, 19:15

Type	Values Removed	Values Added
References		() https://www.exploit-db.com/exploits/52275 - () https://packetstorm.news/files/id/190586/ -

29 Nov 2024, 15:27

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~7.8~~	v2 : unknown v3 : unknown
References		() https://decoded.avast.io/janvojtesek/lazarus-and-the-fudmodule-rootkit-beyond-byovd-with-an-admin-to-kernel-zero-day/ - Exploit, Technical Description, Third Party Advisory

09 Oct 2024, 02:15

Type	Values Removed	Values Added
References	{'url': 'https://decoded.avast.io/janvojtesek/lazarus-and-the-fudmodule-rootkit-beyond-byovd-with-an-admin-to-kernel-zero-day/', 'name': 'https://decoded.avast.io/janvojtesek/lazarus-and-the-fudmodule-rootkit-beyond-byovd-with-an-admin-to-kernel-zero-day/', 'tags': ['Exploit', 'Technical Description', 'Third Party Advisory'], 'refsource': ''}

23 May 2024, 17:57

Type	Values Removed	Values Added
References	~~() https://decoded.avast.io/janvojtesek/lazarus-and-the-fudmodule-rootkit-beyond-byovd-with-an-admin-to-kernel-zero-day/ -~~	() https://decoded.avast.io/janvojtesek/lazarus-and-the-fudmodule-rootkit-beyond-byovd-with-an-admin-to-kernel-zero-day/ - Exploit, Technical Description, Third Party Advisory

01 Mar 2024, 04:15

Type	Values Removed	Values Added
References		() https://decoded.avast.io/janvojtesek/lazarus-and-the-fudmodule-rootkit-beyond-byovd-with-an-admin-to-kernel-zero-day/ -

20 Feb 2024, 21:31

Type	Values Removed	Values Added
CPE		cpe:2.3:o:microsoft:windows_10_21h2:::::::: cpe:2.3:o:microsoft:windows_server_2022_23h2:::::::: cpe:2.3:o:microsoft:windows_10_1809:::::::: cpe:2.3:o:microsoft:windows_10_22h2:::::::: cpe:2.3:o:microsoft:windows_11_23h2:::::::: cpe:2.3:o:microsoft:windows_11_21h2:::::::: cpe:2.3:o:microsoft:windows_server_2019:::::::: cpe:2.3:o:microsoft:windows_server_2022:::::::: cpe:2.3:o:microsoft:windows_11_22h2::::::::
References	~~() https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21338 -~~	() https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21338 - Patch, Vendor Advisory
CWE		NVD-CWE-noinfo
First Time		Microsoft windows 10 21h2 Microsoft windows Server 2022 23h2 Microsoft windows 11 21h2 Microsoft windows 11 22h2 Microsoft windows 10 1809 Microsoft windows Server 2019 Microsoft windows 10 22h2 Microsoft Microsoft windows 11 23h2 Microsoft windows Server 2022

13 Feb 2024, 18:23

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-02-13 18:15

Updated : 2025-04-28 20:47

NVD link : CVE-2024-21338

Mitre link : CVE-2024-21338

JSON object : View

Products Affected

microsoft

CWE

NVD-CWE-noinfo