Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2024-49095

Опубликовано: 10 дек. 2024
Источник: msrc
CVSS3: 7
EPSS Низкий

Описание

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

FAQ

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?

Successful exploitation of this vulnerability requires an attacker to win a race condition.

What privileges could be gained by an attacker who successfully exploited the vulnerability?

An attacker could use this vulnerability to elevate privileges from a Low Integrity Level in a contained ("sandboxed") execution environment to a Medium Integrity Level or a High Integrity Level.

Please refer to AppContainer isolation and Mandatory Integrity Control for more information.

Обновления

ПродуктСтатьяОбновление
Windows 10 Version 1809 for 32-bit Systems
Windows 10 Version 1809 for x64-based Systems
Windows Server 2019
Windows Server 2019 (Server Core installation)
Windows Server 2022
Windows Server 2022 (Server Core installation)
Windows 10 Version 21H2 for 32-bit Systems
Windows 10 Version 21H2 for ARM64-based Systems
Windows 10 Version 21H2 for x64-based Systems
Windows 11 Version 22H2 for ARM64-based Systems

Показывать по

Возможность эксплуатации

Publicly Disclosed

No

Exploited

No

Latest Software Release

Exploitation Less Likely

DOS

N/A

EPSS

Процентиль: 21%
0.00065
Низкий

7 High

CVSS3

Связанные уязвимости

CVSS3: 7
nvd
6 месяцев назад

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

CVSS3: 7
github
6 месяцев назад

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

CVSS3: 7
fstec
6 месяцев назад

Уязвимость службы PrintWorkflowUserSvc операционных систем Microsoft Windows, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 21%
0.00065
Низкий

7 High

CVSS3