CVE-2024-38129HighCVSS 7.5

Windows Kerberos Elevation of Privilege Vulnerability

Published
October 8, 2024
Last Modified
—

🔗 CVE IDs covered (1)

📋 Description

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability? Successful exploitation of this vulnerability requires an attacker to gather information specific to the environment of the targeted component.

What privileges could be gained by an attacker who successfully exploited the vulnerability? An attacker who successfully exploited this vulnerability could gain domain administrator privileges.

🎯 Affected products1

  • Windows Server 2022, 23H2 Edition (Server Core installation)

✅ Remediation

KB5044288 (Security Update) — fixed build 10.0.25398.1189

🔗 References (3)