CVE-2024-30051

ENISA EUVD: EUVD-2024-27989 ↗

Exploited in the Wild ✓ Confirmed 0-Day ★ Google Project Zero

Triaged: March 3, 2026 6 articles Published: 2024-05-14

VulnLookup ↗ NVD ↗ EUVD ↗ MITRE ↗ Advisory ↗ P0 Sheet ↗ CISA KEV ↗

EPSS Score

Source: FIRST.org · 2026-05-23

50.84%

probability

This CVE has a 50.84% probability of being exploited in the next 30 days.

0% Top 97.9th percentile of all CVEs 100%

CVSS v3.1

Source: VulnerabilityLookup (CIRCL)

7.8

HIGH

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Temporal

Exploit Code Maturity

Functional

Remediation Level

Official Fix

Report Confidence

Confirmed

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C

Description

NVD

Windows DWM Core Library Elevation of Privilege Vulnerability

Affected Products

Microsoft

Windows 10 Version 1809

10.0.17763.0

Microsoft

Windows 10 Version 1809

10.0.0

Microsoft

Windows Server 2019

10.0.17763.0

Microsoft

Windows Server 2019 (Server Core installation)

10.0.17763.0

Microsoft

Windows Server 2022

10.0.20348.0

microsoft

windows 10 1507

microsoft

windows 10 1607

microsoft

windows 10 1809

microsoft

windows 10 21h2

microsoft

windows 10 22h2

Microsoft

Windows Server 2022

10.0.20348.0 <10.0.20348.2461

Microsoft

Windows 11 Version 23H2

10.0.22631.0 <10.0.22631.3593

Microsoft

Windows 10 Version 1809

10.0.0 <10.0.17763.5820

Microsoft

Windows 10 Version 22H2

10.0.19045.0 <10.0.19045.4412

Microsoft

Windows 11 version 22H3

10.0.22631.0 <10.0.22631.3593

Microsoft

Windows 11 version 21H2

10.0.0 <10.0.22000.2960

Microsoft

Windows 11 version 22H2

10.0.22621.0 <10.0.22621.3593

Microsoft

Windows Server 2016

10.0.14393.0 <10.0.14393.6981

Microsoft

Windows Server 2019 (Server Core installation)

10.0.17763.0 <10.0.17763.5820

Microsoft

Windows 10 Version 1607

10.0.14393.0 <10.0.14393.6981

Microsoft

Windows 10 Version 1507

10.0.10240.0 <10.0.10240.20651

Microsoft

Windows Server 2016 (Server Core installation)

10.0.14393.0 <10.0.14393.6981

Microsoft

Windows Server 2019

10.0.17763.0 <10.0.17763.5820

Microsoft

Windows 10 Version 1809

10.0.17763.0 <10.0.17763.5820

Microsoft

Windows 10 Version 21H2

10.0.19043.0 <10.0.19044.4412

Attack Intelligence

CWE-118 · Incorrect Access of Indexable Resource ('Range Error') CWE-119 · Buffer Overflow CWE-122 · Heap-based Buffer Overflow CWE-664 · Improper Control of a Resource Through its Lifetime CWE-787 · Out-of-bounds Write CWE-788 · Access of Memory Past End of Buffer

Google Project Zero

Patched

May 14, 2024

Reported by

Mert Degirmenci and Boris Larin with Kaspersky Quan Jin with DBAPPSecurity WeBin Lab Guoxian Zhong with DBAPPSecurity WeBin Lab Vlad Stolyarov and Benoit Sevens of Google Threat Analysis Group Bryce Abdo and Adam Brunner of Google Mandiant

Root Cause Analysis

???

Exploits & PoC

fortra/CVE-2024-30051

125 2024-09-05

devianntsec/CVE-2024-30051

Master's Thesis research on CVE-2024-30051 (Windows DWM Heap Overflow). Features a high-reliability exploit with automated heap spray optimization, re

0 2026-05-06

2 repos — triés par ⭐ Rechercher sur GitHub ↗

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30051

vendor-advisory

Signal Intelligence

Confidenceⓘ

82%

EPSS 50.84%

CVSS v3.1 7.8

Mentions 6

Last Seen Jan 14, 2026

CNA Information

CNA Assigner

microsoft

CNA Title

Windows DWM Core Library Elevation of Privilege Vulnerability

Analyst Note

CVE-2024-30051 is confirmed as a Windows DWM Core Library elevation of privilege vulnerability with HIGH severity (CVSS 7.8) that has been actively exploited in the wild, as evidenced by coverage in TheHackerNews and BleepingComputer regarding Microsoft's January 2026 patch deployment. The vulnerability's inclusion in Google Project Zero research and multiple authoritative security sources provides strong corroboration for the confirmed status, though it is not yet listed in CISA KEV which slightly moderates confidence.

Threat Actors 1

Lazarus Group

apt_group Information theft and espionage 🇰🇵 KP

Triage Info

Decided atMar 03, 2026

Published DateMay 14, 2024