First day on Intigriti: our agent harness found and proved a remote code execution bug, paid €3,000.

CVE-2024-21345

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Windows Kernel Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published: Feb 13, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-213467.8Win32k Elevation of Privilege Vulnerability CVE-2024-213477.5Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2024-213487.5Internet Connection Sharing (ICS) Denial of Service Vulnerability CVE-2024-213498.8Microsoft ActiveX Data Objects Remote Code Execution Vulnerability CVE-2024-21356.1A vulnerability was found in Bdtask Hospita AutoManager up to 20240223 and classified as problematic. This issue affects some unknown proces CVE-2024-213508.8Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2024-213517.6Windows SmartScreen Security Feature Bypass Vulnerability CVE-2024-213528.8Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2024-213538.8Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability CVE-2024-213547.8Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability CVE-2024-213557.0Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability CVE-2024-213566.5Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

CVE-2024-21345: High severity, CVSS 8.8 | Vulnix