CISA Known Exploited Vulnerability

CVE-2024-38107

Microsoft · Windows

Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability

Date added
BOD 22-01 due date
CWE CWE-416
Ransomware Unknown

CISA description

Microsoft Windows Power Dependency Coordinator contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to obtain SYSTEM privileges.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.