CVE-2024-38187

—

CVSS 3.1

7.8 high

EPSS

1%p64

Published

Aug 13, 2024 (Aug 13, 2024)

Modified

Jun 17, 2026

Description

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

Vendors: microsoft
Products: windows 10 1607, windows 10 1809, windows 10 21h2, windows 10 22h2, windows 11 21h2, windows 11 22h2, windows 11 23h2, windows server 2016, windows server 2019, windows server 2022, windows server 2022 23h2
Weakness: CWE-822
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news4 stories

AI, election security headline discussions at Black Hat and DEF CON

Cisco TalosAug 15, 18:00 UTC · Aug 15, 2024Ransomware in the wildCVE-2024-38184 CVE-2024-38185 CVE-2024-38186+3 CVEs1

60

Talos discovers Microsoft kernel mode driver vulnerabilities that could lead to SYSTEM privileges; Seven other critical issues disclosed

Cisco TalosAug 13, 19:12 UTC · Aug 13, 2024Vulnerability in the wildCVE-2024-21302 CVE-2024-38184 CVE-2024-38185+10 CVEs1

60

Talos discovers 11 vulnerabilities between Microsoft, Adobe software disclosed on Patch Tuesday

Cisco TalosAug 14, 16:02 UTC · Aug 14, 2024Vulnerability CVE-2024-38062 CVE-2024-38187 CVE-2024-38184+5 CVEs

47

Finding vulnerabilities in ClipSp, the driver at the core of Windows’ Client License Platform

Cisco TalosNov 25, 13:00 UTC · Nov 25, 2024Vulnerability CVE-2024-38184 CVE-2024-38185 CVE-2024-38186+2 CVEs

35