CVE-2024-38241

CVE-2024-38241 is a Windows kernel streaming service driver elevation of privilege vulnerability (local, required privileges: low; attack complexity: low; user interaction: none). The NVD entry assigns CVSS v3.1: 7.8 (HIGH) with impacts to confidentiality, integrity, and availability (all HIGH) i...

CVE-2024-38241 Kernel Streaming Service Driver Elevation of Privilege Vulnerability

...

CVE-2024-38242 Kernel Streaming Service Driver Elevation of Privilege Vulnerability

...

CVE-2024-38242 Kernel Streaming Service Driver Elevation of Privilege Vulnerability

...

CVE-2024-38241 Kernel Streaming Service Driver Elevation of Privilege Vulnerability

...

CVE-2024-38242

CVE-2024-38242: Kernel Streaming Service Driver Elevation of Privilege. A local attacker with low privileges can exploit this to gain SYSTEM-level access without user interaction (per CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H; base 7.8). Microsoft has released updates to fix the issue (e.g., ...

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

...

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

...

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

...

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

...

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

...

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

...

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

...

PT-2024-6258 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a buffer overflow in the "heap" of the Kernel Streaming Service Driver in Windows operating systems. This can allow an attacker to elevate their privileges. An...

PT-2024-6261 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a buffer overflow in the heap of the Kernel Streaming Service Driver in Windows operating systems. This can allow an attacker to elevate their privileges. The...

PT-2024-6264 · Microsoft · Kernel Streaming Wow Thunk Service Driver +1

Name of the Vulnerable Software and Affected Versions: Kernel Streaming WOW Thunk Service Driver affected versions not specified Description: The issue is related to a buffer overflow in the "heap" of the Kernel Streaming WOW Thunk Service Driver, which can allow an attacker to elevate their...

PT-2024-6263 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the Kernel Streaming Service driver of Windows operating systems. This can allow an attacker to elevate their privileges. The...

PT-2024-6259 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the Kernel Streaming Service driver of Windows operating systems. This can be exploited to allow an attacker to elevate their...

The vulnerability of the driver for the Windows operating system’s kernel-based streaming service WOW Thunk allows a hacker to escalate their privileges.

The vulnerability of the WOW Thunk kernel streaming service driver for Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a remote attacker to gain elevated privileges...

The vulnerability of the Kernel Streaming WOW Thunk Service Driver (Drivers\ksthunk.sys) on Windows operating systems, which allows a hacker to escalate their privileges.

The vulnerability of the Kernel Streaming WOW Thunk Service Driver Drivers\ksthunk.sys on Windows operating systems is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...