Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Exploit for Incorrect Permission Assignment for Critical Resource in Microsoft

🗓️ 16 Dec 2023 23:27:34Reported by tandasatType 
githubexploit
 githubexploit🔗 github.com👁 308 Views

Non-secure Hypervisor-Protected Code Integrity (HVCI) vulnerability in Microsoft root partition allowing arbitrary kernel-mode code execution

Related
ReporterTitlePublishedViews
Family
Information Security Automation		November 2023 – January 2024: New Vulristics Features, 3 Months of Microsoft Patch Tuesdays and Linux Patch Wednesdays, Year 2023 in Review
1 Feb 202417:07
–avleonov
BDU FSTEC		The vulnerability of the Code Integrity protection function of the Hypervisor-protected Code Integrity mechanism in the Windows operating system allows attackers to circumvent existing security restrictions.
17 Jan 202400:00
–bdu_fstec
Circl		CVE-2024-21305
9 Jan 202420:16
–circl
CNNVD		Microsoft Hypervisor-Protected Code Integrity Security Vulnerability
9 Jan 202400:00
–cnnvd
CVE		CVE-2024-21305
9 Jan 202417:56
–cve
Cvelist		CVE-2024-21305 Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability
9 Jan 202417:56
–cvelist
EUVD		EUVD-2024-19018
3 Oct 202520:07
–euvd
Microsoft KB		January 9, 2024—KB5034121 (OS Build 22000.2713)
9 Jan 202408:00
–mskb
Microsoft KB		January 9, 2024—KB5034122 (OS Builds 19044.3930 and 19045.3930) - EXPIRED
9 Jan 202408:00
–mskb
Microsoft KB		January 9, 2024—KB5034123 (OS Builds 22621.3007 and 22631.3007)
9 Jan 202408:00
–mskb
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
31 Aug 2025 08:32Current
6.8Medium risk
Vulners AI Score6.8
CVSS 3.14.4
EPSS0.01494
SSVC
microsofthypervisor-protected code integrityvulnerabilitykernel-mode code executionhvcibug bountydisclosure
308