CVE-2024-24910

HighCVSS 7.3/10Last modified Jun 17, 2026

Description

A local attacker can erscalate privileges on affected Check Point ZoneAlarm ExtremeSecurity NextGen, Identity Agent for Windows, and Identity Agent for Windows Terminal Server. To exploit this vulnerability, an attacker must first obtain the ability to execute local privileged code on the target system.

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-732

Affected software

No affected versions have been published.

Timeline

Published: Apr 18, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-249117.5In rare scenarios, the cpca process on the Security Management Server / Domain Management Server may exit unexpectedly, creating a core dump CVE-2024-249126.7A local privilege escalation vulnerability has been identified in Harmony Endpoint Security Client for Windows versions E88.10 and below. To CVE-2024-249148.0Authenticated Gaia users can inject code or commands by global variables through special HTTP requests. A Security fix that mitigates this v CVE-2024-249157.2Credentials are not cleared from memory after being used. A user with Administrator permissions can execute memory dump for SmartConsole pro CVE-2024-249167.8Untrusted DLLs in the installer's directory may be loaded and executed, leading to potentially arbitrary code execution with the installer's CVE-2024-249198.6Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled wit CVE-2024-24925.4The PowerPack Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Twitter Tweet widget in all ver CVE-2024-249207.8A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000). The affected application contains an out of bounds write CVE-2024-249217.8A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000). The affected application is vulnerable to memory corrupt CVE-2024-249227.8A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000). The affected application contains an out of bounds write CVE-2024-249237.8A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000), Simcenter Femap (All versions < V2306.0001). The affecte CVE-2024-249247.8A vulnerability has been identified in Simcenter Femap (All versions < V2306.0000). The affected application contains an out of bounds write