CVE ID
CVE-2024-30051
Vulnerability Name
Microsoft DWM Core Library Privilege Escalation Vulnerability
- Project: Microsoft
- Product: DWM Core Library
Date
- Date Added: 2024-05-14
- Due Date: 2024-06-04
Description
Microsoft DWM Core Library contains a privilege escalation vulnerability that allows an attacker to gain SYSTEM privileges.
Known To Be Used in Ransomware Campaigns?
Known
Action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Additional Notes
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30051; https://nvd.nist.gov/vuln/detail/CVE-2024-30051
Related Security News
- Microsoft Fixes 114 Windows Flaws in January 2026 Patch, One Actively Exploited
- Microsoft Fixes 78 Flaws, 5 Zero-Days Exploited; CVSS 10 Bug Impacts Azure DevOps Server
- Microsoft fixes Windows zero-day exploited in QakBot malware attacks
- Microsoft May 2024 Patch Tuesday fixes 3 zero-days, 61 flaws