CVE-2024-38193

Exploited in the Wild ✓ Confirmed 0-Day ★ Google Project Zero

Triaged: March 3, 2026 8 articles

VulnLookup ↗ NVD ↗ MITRE ↗ Advisory ↗ P0 Sheet ↗ CISA KEV ↗

EPSS Score

Source: FIRST.org · 2026-05-24

73.23%

probability

This CVE has a 73.23% probability of being exploited in the next 30 days.

0% Top 98.8th percentile of all CVEs 100%

CVSS score unavailable

Neither CIRCL nor NVD returned a CVSS score for this CVE. View on VulnerabilityLookup ↗

Description

Project Zero

Windows Ancillary Function Driver for WinSock Elevation of Privilege (use after free)

Attack Intelligence

CWE-118 · Incorrect Access of Indexable Resource ('Range Error') CWE-119 · Buffer Overflow CWE-416 · Use After Free CWE-664 · Improper Control of a Resource Through its Lifetime CWE-666 · Operation on Resource in Wrong Phase of Lifetime CWE-672 · Operation on a Resource after Expiration or Release CWE-825 · Expired Pointer Dereference

Google Project Zero

Patched

Aug. 13, 2024

Reported by

Luigino Camastra and Milánek with Gen Digital

Root Cause Analysis

???

Microsoft Issues Patches for 90 Flaws, Including 10 Critical Zero-Days

TheHackerNews

Microsoft Fixes 78 Flaws, 5 Zero-Days Exploited; CVSS 10 Bug Impacts Azure DevOps Server

TheHackerNews

Microsoft and Adobe Patch Tuesday, August 2024 Security Update Review

Qualys Aug 13, 2024

Microsoft’s Patch Tuesday Fixes 63 Flaws, Including Two Under Active Exploitation

TheHackerNews

Microsoft August 2024 Patch Tuesday fixes 9 zero-days, 6 exploited

BleepingComputer Aug 13, 2024

North Korean hackers exploit Chrome zero-day to deploy rootkit

BleepingComputer Aug 30, 2024

Windows driver zero-day exploited by Lazarus hackers to install rootkit

BleepingComputer Aug 19, 2024

Microsoft Patches Zero-Day Flaw Exploited by North Korea’s Lazarus Group

TheHackerNews

Signal Intelligence

Confidenceⓘ

92%

EPSS 73.23%

Mentions 8

Last Seen Aug 30, 2024

CNA Information

Analyst Note

CVE-2024-38193 is confirmed as a high-severity Windows elevation of privilege vulnerability patched in Microsoft's August 2024 Patch Tuesday update. The vulnerability has been documented in Google Project Zero and associated articles indicate active exploitation by advanced threat actors (Lazarus group) to deploy rootkits, providing strong evidence of real-world impact.