CVE-2024-21338

Microsoft Windows Kernel contains an exposed IOCTL with insufficient access control vulnerability within the IOCTL (input and output control) dispatcher in appid.sys that allows a local attacker to achieve privilege escalation.

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21338Patch
• https://decoded.avast.io/janvojtesek/lazarus-and-the-fudmodule-rootkit-beyond-byovd-with-an-admin-to-kernel-zero-day/Exploit
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21338Patch
• https://packetstorm.news/files/id/190586/Exploit
• https://www.exploit-db.com/exploits/52275Exploit
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-21338US Government Resource