CVE-2024-38106

Exploited in the Wild ✓ Confirmed 0-Day ★ Google Project Zero
Triaged: March 3, 2026 4 articles
VulnLookup ↗ NVD ↗ MITRE ↗ Advisory ↗ P0 Sheet ↗ CISA KEV ↗

EPSS Score

Source: FIRST.org · 2026-05-24
0.75%
probability
This CVE has a 0.75% probability of being exploited in the next 30 days.
0% Top 73.4th percentile of all CVEs 100%
CVSS score unavailable
Neither CIRCL nor NVD returned a CVSS score for this CVE. View on VulnerabilityLookup ↗

Description

Project Zero
Windows Kernel Elevation of Privilege Vulnerability

Attack Intelligence

Google Project Zero

Patched
Aug. 13, 2024
Reported by
Anonymous
Root Cause Analysis
???

Signal Intelligence

Confidenceⓘ
87%
EPSS 0.75%
Mentions 4
Last Seen Aug 30, 2024

CNA Information

Analyst Note

This Windows Kernel elevation of privilege vulnerability is confirmed as a zero-day with HIGH severity (CVSS 7.0), included in Microsoft's August 2024 Patch Tuesday addressing 9 zero-days, and documented by Google Project Zero. The vulnerability has demonstrated real-world exploitation potential and established credible reporting from security researchers.

Threat Actors 1

Lazarus Group
apt_group Information theft and espionage 🇰🇵 KP

Triage Info

Decided atMar 03, 2026