Friday, 20 December, 2024

Windows Kernel Vulnerability Actively Exploited to Gain System Access

A critical Windows kernel vulnerability, CVE-2024-35250, is being actively exploited, allowing attackers to gain SYSTEM privileges. The flaw involves an untrusted pointer dereference in the Microsoft Kernel-Mode Driver. Microsoft addressed this issue in the December Patch Tuesday release. CISA has added this vulnerability to its Known Exploited Vulnerabilities Catalog, urging organizations to apply mitigations promptly.