CVE-2024-30088 — Windows Kernel Elevation of Privilege Vulnerability

Executive Summary

None

Overview

7

CVSS HIGH

Important

MS Severity

Not Exploited

MS Exploit Status

More Likely

MS Exploit Likelihood

Category Elevation of Privilege

Weakness CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition

Released Jun 11 2024

Last Updated Jun 11 2024

Publicly Disclosed No

CISA KEV Listed (added 2024-10-15)

Known Exploits None Known

EPSS Score 0.68202 — 0.99268 percentile

NVD CVSS 7 HIGH — matches MSRC

CVSS Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

ATTACK VECTOR

Local

ATTACK COMPLEXITY

High

PRIVILEGES REQUIRED

Low

USER INTERACTION

None

SCOPE

Unchanged

CONFIDENTIALITY

High

INTEGRITY

High

AVAILABILITY

High

EXPLOIT CODE MATURITY

Proof-of-Concept

REMEDIATION LEVEL

Official Fix

REPORT CONFIDENCE

Confirmed

Temporal Score: 6.3

EPSS Score

0.68202

probability of exploitation in the next 30 days

0.99268 percentile - updated 2026-08-14

View on FIRST.org

Affected Products

24 affected products

Product	KB Article	Severity	Impact	Restart Required
Windows 10 for 32-bit Systems	`5039225 (Security Update)`	Important	Elevation of Privilege	Yes
Windows 10 for x64-based Systems	`5039225 (Security Update)`	Important	Elevation of Privilege	Yes
Windows 10 Version 1607 for 32-bit Systems	`5039214 (Security Update)`	Important	Elevation of Privilege	Yes
Windows 10 Version 1607 for x64-based Systems	`5039214 (Security Update)`	Important	Elevation of Privilege	Yes
Windows 10 Version 1809 for 32-bit Systems	`5039217 (Security Update)`	Important	Elevation of Privilege	Yes
Windows 10 Version 1809 for ARM64-based Systems	`5039217 (Security Update)`	Important	Elevation of Privilege	Yes
Windows 10 Version 1809 for x64-based Systems	`5039217 (Security Update)`	Important	Elevation of Privilege	Yes
Windows 10 Version 21H2 for 32-bit Systems	`5039211 (Security Update)`	Important	Elevation of Privilege	Yes
Windows 10 Version 21H2 for ARM64-based Systems	`5039211 (Security Update)`	Important	Elevation of Privilege	Yes
Windows 10 Version 21H2 for x64-based Systems	`5039211 (Security Update)`	Important	Elevation of Privilege	Yes
Windows 10 Version 22H2 for 32-bit Systems	`5039211 (Security Update)`	Important	Elevation of Privilege	Yes
Windows 10 Version 22H2 for ARM64-based Systems	`5039211 (Security Update)`	Important	Elevation of Privilege	Yes
Windows 10 Version 22H2 for x64-based Systems	`5039211 (Security Update)`	Important	Elevation of Privilege	Yes
Windows 11 version 21H2 for ARM64-based Systems	`5039213 (Security Update)`	Important	Elevation of Privilege	Yes
Windows 11 version 21H2 for x64-based Systems	`5039213 (Security Update)`	Important	Elevation of Privilege	Yes
Windows 11 Version 22H2 for ARM64-based Systems	`5039212 (Security Update)`	Important	Elevation of Privilege	Yes
Windows 11 Version 22H2 for x64-based Systems	`5039212 (Security Update)`	Important	Elevation of Privilege	Yes
Windows 11 Version 23H2 for ARM64-based Systems	`5039212 (Security Update)`	Important	Elevation of Privilege	Yes
Windows 11 Version 23H2 for x64-based Systems	`5039212 (Security Update)`	Important	Elevation of Privilege	Yes
Windows Server 2016	`5039214 (Security Update)`	Important	Elevation of Privilege	Yes
Windows Server 2016 (Server Core installation)	`5039214 (Security Update)`	Important	Elevation of Privilege	Yes
Windows Server 2019	`5039217 (Security Update)`	Important	Elevation of Privilege	Yes
Windows Server 2019 (Server Core installation)	`5039217 (Security Update)`	Important	Elevation of Privilege	Yes
Windows Server 2022 5039227 (Security Update) 5039330 (Security Hotpatch Update) Important Elevation of Privilege 5037782 5037848 Base: 7.0 Temporal: 6.3 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10.0.20348.2527 10.0.20348.2522 Yes 5039227 Windows Server 2022 (Server Core installation) 5039227 (Security Update) 5039330 (Security Hotpatch Update) Important Elevation of Privilege 5037782 5037848 Base: 7.0 Temporal: 6.3 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10.0.20348.2527 10.0.20348.2522 Yes 5039227 Windows Server 2022, 23H2 Edition (Server Core installation)	`5039236 (Security Update)`	Important	Elevation of Privilege	Yes

Patches

7 patches

Article	Type	Restart
`5039225`	Security Update	Yes
`5039214`	Security Update	Yes
`5039217`	Security Update	Yes
`5039211`	Security Update	Yes
`5039213`	Security Update	Yes
`5039212`	Security Update	Yes
`5039236`	Security Update	Yes

Exploits & PoC

9 public PoCs

Unverified third-party code

Public proof-of-concept repositories aggregated from PoC-in-GitHub. They are not reviewed and may be incomplete, non-functional, or malicious — inspect the code before running anything.

Repository	Stars	Published	Description
exploits-forsale/collateral-damage	528	2024-07-15	Kernel exploit for Xbox SystemOS using CVE-2024-30088
tykawaii98/CVE-2024-30088	289	2024-06-24
Zombie-Kaiser/CVE-2024-30088-Windows-poc	45	2024-07-05	该漏洞存在于 NtQueryInformationToken 函数中，特别是在处理AuthzBasepCopyoutInternalSecurityAttributes 函数时，该漏洞源于内核在操作对象时对锁定机制的不当管理，这一失误可能导致恶意实体意外提升权限。
NextGenPentesters/CVE-2024-30088-	8	2024-06-27	🆘New Windows Kernel Priviledge Escalation Vulnerability
Admin9961/CVE-2024-30088	2	2024-07-27	Questa repository contiene una replica (tentativo di replica) scritto in Python per CVE-2024-30088.
Justintroup85/exploits-forsale-collateral-damage	1	2024-08-25	Kernel exploit for Xbox SystemOS using CVE-2024-30088
ramzihafiz/cve-2024-30088-binary	1	2025-10-06	compiled poc binary
th3g3ntl3m4n84/CVE-2024-30088__Windows-TOCTOU-exploit	0	2026-04-16	This is a modified version of the original CVE-2024-30088 exploit, adapted to work in non-interactive environments (WinRM).
FangFang-Yi/CVE-2024-30088	0	2026-06-11

Detection Rules

No public Sigma or Nuclei detection rule has been mapped to this CVE yet. Coverage is concentrated on exploited / high-profile vulnerabilities; check SigmaHQ for updates.

Acknowledgments

Emma Kirkpatrick ( @carrot_c4k3 ) working with Trend Micro Zero Day Initiative

References

MSRC Advisory MITRE NVD