About Elevation of Privilege – Windows Kernel Streaming WOW Thunk Service Driver (CVE-2024-38144) vulnerability

🗓️ 13 Jan 2025 10:04:19Reported by Alexander LeonovType

avleonov

avleonov🔗 avleonov.com👁 22 Views

Windows Kernel Streaming vulnerability allows local attackers to gain SYSTEM privileges undetected.

Reporter	Title	Published	Views	Family All 53
Information Security Automation	New episode “In The Trend of VM” (#11): vulnerabilities that became trending in December and the final report on trending vulnerabilities for 2024	18 Feb 202517:28	–	avleonov
BDU FSTEC	The vulnerability of the driver for the Windows operating system’s kernel-based streaming service WOW Thunk allows a hacker to escalate their privileges.	23 Aug 202400:00	–	bdu_fstec
Circl	CVE-2024-38144	13 Aug 202418:05	–	circl
CNNVD	Microsoft Windows 输入验证错误漏洞	13 Aug 202400:00	–	cnnvd
CVE	CVE-2024-38144	13 Aug 202417:30	–	cve
Cvelist	CVE-2024-38144 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability	13 Aug 202417:30	–	cvelist
Microsoft KB	August 13, 2024—KB5041160 (OS Build 20348.2655)	13 Aug 202407:00	–	mskb
Microsoft KB	August 13, 2024—KB5041571 (OS Build 26100.1457)	13 Aug 202407:00	–	mskb
Microsoft KB	August 13, 2024—KB5041573 (OS Build 25398.1085)	13 Aug 202407:00	–	mskb
Microsoft KB	August 13, 2024—KB5041578 (OS Build 17763.6189) - EXPIRED	13 Aug 202407:00	–	mskb

13 Jan 2025 10:04Current

7.2High risk

Vulners AI Score7.2

CVSS 3.18.8

EPSS0.32347

SSVC

cve 2024 38144 elevation of privilege windows kernel local attacker exploit code typhoonpwn 2024