[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fyt_6A00H0buoa4KGE0zlRT23KWC9w5t6bCmvqARWJE4":3,"g5a-risk:CVE-2024-21338":179},{"success":4,"data":5,"meta":176},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":31,"epssPercentile":25,"epssTimeSeries":32,"severity":33,"affectedProducts":34,"affectedProductsCount":64,"references":65,"referencesCount":95,"weaknesses":96,"weaknessesCount":105,"isActivelyExploited":4,"cisaInfo":106,"otxData":25,"relatedBlogPosts":108,"seoMetadata":109,"configurations":134,"relatedVendorCves":167,"notableEvents":168},"CVE-2024-21338","What is CVE-2024-21338?","Windows Kernel Elevation of Privilege Vulnerability","2024-02-13T18:15:49.083","2026-08-10T16:18:40.377",7.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":14,"CVSSMetricV30":28,"CVSSMetricV2":29,"CVSSMetricV40":30},[15],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":26,"ImpactScore":27},"secure@microsoft.com","Secondary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":21,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":11,"BaseSeverity":24,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH",null,1.8,5.9,[],[],[],0.5981,[31,31,31,31,31,31,31],"High",[35,40,43,46,49,52,55,58,61],{"vendor":36,"product":37,"version":38,"criteria":39,"vulnerable":4},"microsoft","windows_10_1809","*","cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",{"vendor":36,"product":41,"version":38,"criteria":42,"vulnerable":4},"windows_10_21h2","cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",{"vendor":36,"product":44,"version":38,"criteria":45,"vulnerable":4},"windows_10_22h2","cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",{"vendor":36,"product":47,"version":38,"criteria":48,"vulnerable":4},"windows_11_21h2","cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",{"vendor":36,"product":50,"version":38,"criteria":51,"vulnerable":4},"windows_11_22h2","cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",{"vendor":36,"product":53,"version":38,"criteria":54,"vulnerable":4},"windows_11_23h2","cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",{"vendor":36,"product":56,"version":38,"criteria":57,"vulnerable":4},"windows_server_2019","cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",{"vendor":36,"product":59,"version":38,"criteria":60,"vulnerable":4},"windows_server_2022","cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",{"vendor":36,"product":62,"version":38,"criteria":63,"vulnerable":4},"windows_server_2022_23h2","cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",9,[66,72,79,81,86,90],{"url":67,"source":68,"tags":69},"https:\u002F\u002Fmsrc.microsoft.com\u002Fupdate-guide\u002Fvulnerability\u002FCVE-2024-21338","Microsoft",[70,71],"Patch","Vendor Advisory",{"url":73,"source":74,"tags":75},"https:\u002F\u002Fdecoded.avast.io\u002Fjanvojtesek\u002Flazarus-and-the-fudmodule-rootkit-beyond-byovd-with-an-admin-to-kernel-zero-day\u002F","Avast",[76,77,78],"Exploit","Technical Description","Third Party Advisory",{"url":67,"source":68,"tags":80},[70,71],{"url":82,"source":83,"tags":84},"https:\u002F\u002Fpacketstorm.news\u002Ffiles\u002Fid\u002F190586\u002F","Packetstorm",[76,85],"VDB Entry",{"url":87,"source":88,"tags":89},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F52275","Exploit-db",[76,85],{"url":91,"source":92,"tags":93},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2024-21338","CISA",[94],"US Government Resource",6,[97],{"id":98,"name":99,"description":100,"extendedDescription":101,"status":102,"abstraction":103,"structure":104},"CWE-822","Untrusted Pointer Dereference","The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.","An attacker can supply a pointer for memory locations that the product is not expecting. If the pointer is dereferenced for a write operation, the attack might allow modification of critical state variables, cause a crash, or execute code. If the dereferencing operation is for a read, then the attack might allow reading of sensitive data, cause a crash, or set a variable to an unexpected value (since the value will be read from an unexpected memory location).\nThere are several variants of this weakness, including but not necessarily limited to:","Incomplete","Base","Simple",1,{"shortDescription":107,"requiredAction":107,"vulnerabilityName":107,"dateAdded":25},"",[],{"title":110,"metaDescription":111,"keywords":112,"canonicalUrl":113,"structuredData":114},"What is CVE-2024-21338? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2024-21338, a high severity cyber security vulnerability from 2024. High exploit probability (59.8%). Windows Kernel Elevation ...","CVE-2024-21338, CVE-2024-21338 vulnerability, CVE-2024-21338 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, microsoft security, windows_10_1809 vulnerability, windows_10_21h2 vulnerability, windows_10_22h2 vulnerability, windows_11_21h2 vulnerability, windows_11_22h2 vulnerability, high risk vulnerability, actively exploited","\u002Fwhat-is\u002Fcve-2024-21338",{"@context":115,"@type":116,"headline":110,"description":111,"datePublished":9,"dateModified":10,"author":117,"publisher":121,"about":125,"mainEntityOfPage":129,"articleSection":132,"keywords":133},"https:\u002F\u002Fschema.org","TechArticle",{"@type":118,"name":119,"url":120},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":118,"name":119,"url":120,"logo":122},{"@type":123,"url":124},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":126,"name":6,"description":127,"additionalType":128},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":130,"@id":131},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2024-21338","Cybersecurity","CVE-2024-21338, CVE-2024-21338 vulnerability, CVE-2024-21338 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[135],{"Operator":25,"Negate":25,"Nodes":136},[137],{"Operator":138,"Negate":139,"CPEMatch":140},"OR",false,[141,144,147,150,153,156,159,161,164],{"Vulnerable":4,"Criteria":39,"MatchCriteriaID":142,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":143,"VersionEndIncluding":25},"A1689DFD-D52D-4121-BFD7-DBF2BE4E7DE8","10.0.17763.5458",{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":145,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":146,"VersionEndIncluding":25},"C78776CC-3A9C-41A3-8BEB-D71D92F6579D","10.0.19044.4046",{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":148,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":149,"VersionEndIncluding":25},"806CA6D2-42B2-4244-A5ED-D23E6DD56772","10.0.19045.4046",{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":151,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":152,"VersionEndIncluding":25},"3F7F8173-9E59-48E4-98C9-4BEB6AE79451","10.0.22000.2777",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":154,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":155,"VersionEndIncluding":25},"84EDBE52-EFE0-4D6D-AA76-698B6F9687D1","10.0.22621.3155",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":157,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":158,"VersionEndIncluding":25},"900D1DA2-6DA7-4681-966A-B9973B1329EA","10.0.22631.3155",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":160,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":143,"VersionEndIncluding":25},"A9098F92-79E7-4762-A37C-99B4CFA8CDD1",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":162,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":163,"VersionEndIncluding":25},"5C8F0436-3AFE-48BD-AE92-8F8392DD0A1D","10.0.20348.2322",{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":165,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":166},"62322DCD-FDD1-4E54-A51A-08D68890E7DE","10.0.25398.709",[],[169],{"id":170,"eventType":171,"eventTime":172,"details":173,"label":174,"color":175},"0628e56d-3225-4b6d-8f7a-32089b2d9e57","LOW_EPSS_DELTA","2026-06-16T04:04:49.103018+00:00","Daily EPSS score decreased by 0.275 on 2024-02-15","EPSS Score Decreased","green",{"lastModified":10,"cacheTime":177,"version":178},1792437308160,"2.0",{"score":180,"band":33,"action":181,"scoredAt":182},77,"Emergency patch","2026-10-16T07:00:47.334529+00:00"]