[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fyt_6A00H0buoa4KGE0zlRT23KWC9w5t6bCmvqARWJE4":3,"g5a-risk:CVE-2024-21338":170},{"success":4,"data":5,"meta":167},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":28,"epssPercentile":25,"epssTimeSeries":29,"severity":30,"affectedProducts":31,"affectedProductsCount":61,"references":62,"referencesCount":87,"weaknesses":88,"weaknessesCount":97,"isActivelyExploited":4,"cisaInfo":98,"otxData":25,"relatedBlogPosts":100,"seoMetadata":101,"configurations":126,"relatedVendorCves":158,"notableEvents":159},"CVE-2024-21338","What is CVE-2024-21338?","Windows Kernel Elevation of Privilege Vulnerability","2024-02-13T18:15:49.083","2025-04-28T20:47:49.677",7.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":14,"CVSSMetricV30":25,"CVSSMetricV2":25,"CVSSMetricV40":25},[15],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":26,"ImpactScore":27},"secure@microsoft.com","Secondary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":21,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":11,"BaseSeverity":24,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":24,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH",null,1.8,5.9,0.51865,[28,28,28,28,28,28,28],"High",[32,37,40,43,46,49,52,55,58],{"vendor":33,"product":34,"version":35,"criteria":36,"vulnerable":4},"microsoft","windows_10_1809","*","cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",{"vendor":33,"product":38,"version":35,"criteria":39,"vulnerable":4},"windows_10_21h2","cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",{"vendor":33,"product":41,"version":35,"criteria":42,"vulnerable":4},"windows_10_22h2","cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",{"vendor":33,"product":44,"version":35,"criteria":45,"vulnerable":4},"windows_11_21h2","cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",{"vendor":33,"product":47,"version":35,"criteria":48,"vulnerable":4},"windows_11_22h2","cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",{"vendor":33,"product":50,"version":35,"criteria":51,"vulnerable":4},"windows_11_23h2","cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",{"vendor":33,"product":53,"version":35,"criteria":54,"vulnerable":4},"windows_server_2019","cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",{"vendor":33,"product":56,"version":35,"criteria":57,"vulnerable":4},"windows_server_2022","cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",{"vendor":33,"product":59,"version":35,"criteria":60,"vulnerable":4},"windows_server_2022_23h2","cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",9,[63,69,76,78,83],{"url":64,"source":65,"tags":66},"https:\u002F\u002Fmsrc.microsoft.com\u002Fupdate-guide\u002Fvulnerability\u002FCVE-2024-21338","Microsoft",[67,68],"Patch","Vendor Advisory",{"url":70,"source":71,"tags":72},"https:\u002F\u002Fdecoded.avast.io\u002Fjanvojtesek\u002Flazarus-and-the-fudmodule-rootkit-beyond-byovd-with-an-admin-to-kernel-zero-day\u002F","Avast",[73,74,75],"Exploit","Technical Description","Third Party Advisory",{"url":64,"source":65,"tags":77},[67,68],{"url":79,"source":80,"tags":81},"https:\u002F\u002Fpacketstorm.news\u002Ffiles\u002Fid\u002F190586\u002F","Packetstorm",[73,82],"VDB Entry",{"url":84,"source":85,"tags":86},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F52275","Exploit-db",[73,82],5,[89],{"id":90,"name":91,"description":92,"extendedDescription":93,"status":94,"abstraction":95,"structure":96},"CWE-822","Untrusted Pointer Dereference","The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.","An attacker can supply a pointer for memory locations that the product is not expecting. If the pointer is dereferenced for a write operation, the attack might allow modification of critical state variables, cause a crash, or execute code. If the dereferencing operation is for a read, then the attack might allow reading of sensitive data, cause a crash, or set a variable to an unexpected value (since the value will be read from an unexpected memory location).\nThere are several variants of this weakness, including but not necessarily limited to:","Incomplete","Base","Simple",1,{"shortDescription":99,"requiredAction":99,"vulnerabilityName":99,"dateAdded":25},"",[],{"title":102,"metaDescription":103,"keywords":104,"canonicalUrl":105,"structuredData":106},"What is CVE-2024-21338? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2024-21338, a high severity cyber security vulnerability from 2024. High exploit probability (51.9%). Windows Kernel Elevation ...","CVE-2024-21338, CVE-2024-21338 vulnerability, CVE-2024-21338 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, microsoft security, windows_10_1809 vulnerability, windows_10_21h2 vulnerability, windows_10_22h2 vulnerability, windows_11_21h2 vulnerability, windows_11_22h2 vulnerability, high risk vulnerability, actively exploited","\u002Fwhat-is\u002Fcve-2024-21338",{"@context":107,"@type":108,"headline":102,"description":103,"datePublished":9,"dateModified":10,"author":109,"publisher":113,"about":117,"mainEntityOfPage":121,"articleSection":124,"keywords":125},"https:\u002F\u002Fschema.org","TechArticle",{"@type":110,"name":111,"url":112},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":110,"name":111,"url":112,"logo":114},{"@type":115,"url":116},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":118,"name":6,"description":119,"additionalType":120},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":122,"@id":123},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2024-21338","Cybersecurity","CVE-2024-21338, CVE-2024-21338 vulnerability, CVE-2024-21338 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[127],{"Operator":25,"Negate":25,"Nodes":128},[129],{"Operator":130,"Negate":25,"CPEMatch":131},"OR",[132,135,138,141,144,147,150,152,155],{"Vulnerable":4,"Criteria":36,"MatchCriteriaID":133,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":134,"VersionEndIncluding":25},"A1689DFD-D52D-4121-BFD7-DBF2BE4E7DE8","10.0.17763.5458",{"Vulnerable":4,"Criteria":39,"MatchCriteriaID":136,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":137,"VersionEndIncluding":25},"C78776CC-3A9C-41A3-8BEB-D71D92F6579D","10.0.19044.4046",{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":139,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":140,"VersionEndIncluding":25},"806CA6D2-42B2-4244-A5ED-D23E6DD56772","10.0.19045.4046",{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":142,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":143,"VersionEndIncluding":25},"3F7F8173-9E59-48E4-98C9-4BEB6AE79451","10.0.22000.2777",{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":145,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":146,"VersionEndIncluding":25},"84EDBE52-EFE0-4D6D-AA76-698B6F9687D1","10.0.22621.3155",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":148,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":149,"VersionEndIncluding":25},"900D1DA2-6DA7-4681-966A-B9973B1329EA","10.0.22631.3155",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":151,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":134,"VersionEndIncluding":25},"A9098F92-79E7-4762-A37C-99B4CFA8CDD1",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":153,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":154,"VersionEndIncluding":25},"5C8F0436-3AFE-48BD-AE92-8F8392DD0A1D","10.0.20348.2322",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":156,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":157},"62322DCD-FDD1-4E54-A51A-08D68890E7DE","10.0.25398.709",[],[160],{"id":161,"eventType":162,"eventTime":163,"details":164,"label":165,"color":166},"0628e56d-3225-4b6d-8f7a-32089b2d9e57","LOW_EPSS_DELTA","2026-06-16T04:04:49.103018+00:00","Daily EPSS score decreased by 0.275 on 2024-02-15","EPSS Score Decreased","green",{"lastModified":10,"cacheTime":168,"version":169},1793218125444,"2.0",{"score":171,"band":30,"action":172,"scoredAt":173},76,"Emergency patch","2026-07-01T10:31:54.359842+00:00"]