Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cisa_kevCISACISA-KEV-CVE-2024-38193
HistoryAug 13, 2024 - 12:00 a.m.

Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability

2024-08-1300:00:00
CISA
www.cisa.gov
33
microsoft
windows
ancillary function driver
winsock
privilege escalation
vulnerability
local attacker
system privileges

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7

Confidence

High

EPSS

0

Percentile

10.0%

JSON

Microsoft Windows Ancillary Function Driver for WinSock contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges.

Related

cve 1
nvd 1
attackerkb 1
talosblog 2
mscve 1
vulnrichment 1
cvelist 1
thn 3
ics 1
krebs 1
mskb 15
nessus 14
qualysblog 1
openvas 6
kaspersky 2
rapid7blog 1
cve
cve
CVE-2024-38193
2024-08-13 18:15:28
nvd
nvd
CVE-2024-38193
2024-08-13 18:15:28
attackerkb
attackerkb
CVE-2024-38193
2024-08-13 00:00:00
talosblog
talosblog
No, not every Social Security number in the U.S. was stolen
2024-08-22 18:00:34
Talos discovers Microsoft kernel mode driver vulnerabilities that could lead to SYSTEM privileges; Seven other critical issues disclosed
2024-08-13 19:12:45
mscve
mscve
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
2024-08-13 07:00:00
vulnrichment
vulnrichment
CVE-2024-38193 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
2024-08-13 17:29:52
cvelist
cvelist
CVE-2024-38193 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
2024-08-13 17:29:52
thn
thn
Microsoft Patches Zero-Day Flaw Exploited by North Korea's Lazarus Group
2024-08-19 07:05:00
North Korean Hackers Deploy FudModule Rootkit via Chrome Zero-Day Exploit
2024-08-31 15:35:00
Microsoft Issues Patches for 90 Flaws, Including 10 Critical Zero-Days
2024-08-14 05:48:00
ics
ics
CISA Adds Six Known Exploited Vulnerabilities to Catalog
2024-08-13 12:00:00
krebs
krebs
Six 0-Days Lead Microsoft’s August 2024 Patch Push
2024-08-13 21:43:05
mskb
mskb
August 13, 2024—KB5041850 (Monthly Rollup)
2024-08-13 07:00:00
August 13, 2024—KB5041847 (Security-only update)
2024-08-13 07:00:00
August 13, 2024—KB5041823 (Security-only update)
2024-08-13 07:00:00
nessus
nessus
KB5041850: Windows Server 2008 Security Update (August 2024)
2024-08-13 00:00:00
KB5041823: Windows Server 2008 R2 Security Update (August 2024)
2024-08-13 00:00:00
KB5041847: Windows Server 2008 Security Update (August 2024)
2024-08-13 00:00:00
qualysblog
qualysblog
Microsoft and Adobe Patch Tuesday, August 2024 Security Update Review
2024-08-13 20:31:30
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB5041782)
2024-08-14 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5041580)
2024-08-14 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5041592)
2024-08-14 00:00:00
kaspersky
kaspersky
KLA71485 Multiple vulnerabilities in Microsoft Products (ESU)
2024-08-13 00:00:00
KLA71484 Multiple vulnerabilities in Microsoft Windows
2024-08-13 00:00:00
rapid7blog
rapid7blog
Patch Tuesday - August 2024
2024-08-13 23:36:30

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7

Confidence

High

EPSS

0

Percentile

10.0%

JSON
Related for CISA-KEV-CVE-2024-38193
cve1nvd1attackerkb1talosblog2mscve1vulnrichment1cvelist1thn3ics1krebs1mskb15nessus14qualysblog1openvas6kaspersky2rapid7blog1