SWSandworm Watch
target entity

Windows

2 source-linked records in the current knowledge graph.

high

CVE-2024-30088: Microsoft Windows Kernel TOCTOU Race Condition Vulnerability

Microsoft Windows Kernel contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability that could allow for privilege escalation. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CVE-2024-30088EPSS 68.2%MicrosoftWindows
CISA KEV ↗ · unattributed attribution
high

CVE-2024-38080: Microsoft Windows Hyper-V Privilege Escalation Vulnerability

Microsoft Windows Hyper-V contains a privilege escalation vulnerability that allows a local attacker with user permissions to gain SYSTEM privileges. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CVE-2024-38080EPSS 7.1%MicrosoftWindows
CISA KEV ↗ · unattributed attribution