CVE-2024-43629
Untrusted Pointer Dereference (CWE-822)
Summary
Windows DWM Core Library Elevation of Privilege Vulnerability. This is a local vulnerability with a low attack complexity and low privileges required. It has high impacts on confidentiality, integrity, and availability. The vulnerability is associated with an Untrusted Pointer Dereference (CWE-822) and Pointer Manipulation (CAPEC-129).
Impact
This vulnerability could allow an attacker with low privileges to elevate their privileges on a local system. The high impact on confidentiality, integrity, and availability suggests that an attacker could potentially gain full control over the affected system, access sensitive information, modify system files, and disrupt normal operations. Given the local attack vector, an attacker would need initial access to the system to exploit this vulnerability.
Exploitation
There is no evidence that a public proof-of-concept exists. There is no evidence of proof of exploitation at the moment.
Patch
A patch is available. Microsoft released an official fix on November 12, 2024. Security teams should prioritize applying this patch to affected systems.
Mitigation
1. Apply the official patch released by Microsoft as soon as possible. 2. Limit user privileges on systems to reduce the potential impact of successful exploitation. 3. Monitor for suspicious activities that might indicate attempts to exploit this vulnerability. 4. Ensure that only trusted users have local access to sensitive systems.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Timeline
Detection for the vulnerability has been added to Qualys (92186)
Feedly found the first article mentioning CVE-2024-43629. See article
Feedly estimated the CVSS score as MEDIUM
NVD published the first details for CVE-2024-43629
EPSS Score was set to: 0.04% (Percentile: 10.1%)
EPSS Score was set to: 0.04% (Percentile: 10.2%)