CVE-2024-38080: Microsoft Windows Hyper-V Privilege Escalation Vulnerability
Microsoft Windows Hyper-V contains a privilege escalation vulnerability that allows a local attacker with user permissions to gain SYSTEM privileges.
Other sources
Windows Hyper-V Elevation of Privilege Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22621.3880Patch KB5040442 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22631.3880Patch KB5040442 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22000.3079Patch KB5040431 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.2582Patch KB5040437 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.25398.1009Patch KB5040438
Event History
Frequently Asked Questions
What is the severity of CVE-2024-38080?
CVE-2024-38080 is classified as a privilege escalation vulnerability that allows local attackers to gain SYSTEM privileges.
How do I fix CVE-2024-38080?
To fix CVE-2024-38080, you should apply the latest security patches provided by Microsoft for your affected Windows version.
Which versions of Windows are affected by CVE-2024-38080?
CVE-2024-38080 affects multiple versions of Microsoft Windows 11 and Windows Server 2022, particularly 21H2, 22H2, and 23H2.
How does CVE-2024-38080 impact system security?
CVE-2024-38080 can significantly compromise system security by allowing unauthorized local users to escalate their privileges to SYSTEM level.
What are the potential consequences of exploit CVE-2024-38080?
Exploiting CVE-2024-38080 may allow attackers to execute arbitrary code with elevated privileges, potentially leading to complete system control.