First day on Intigriti: our agent harness found and proved a remote code execution bug, paid €3,000.

CVE-2024-30091

HighCVSS 7.8/10Last modified Jul 20, 2026

Description

Win32k Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published: Jun 11, 2024
Last modified: Jul 20, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-300927.5Windows Hyper-V Remote Code Execution Vulnerability CVE-2024-300937.3Windows Storage Elevation of Privilege Vulnerability CVE-2024-300947.8Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CVE-2024-300957.8Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CVE-2024-300965.5Windows Cryptographic Services Information Disclosure Vulnerability CVE-2024-300978.8Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability CVE-2024-300987.5Windows Cryptographic Services Security Feature Bypass Vulnerability CVE-2024-300997.0Windows Kernel Elevation of Privilege Vulnerability CVE-2024-30108.8A vulnerability was found in Tenda FH1205 2.0.0.7(775) and classified as critical. Affected by this issue is the function formSetCfm of the CVE-2024-301007.8Microsoft SharePoint Server Remote Code Execution Vulnerability CVE-2024-301017.5Microsoft Office Remote Code Execution Vulnerability CVE-2024-301027.3Microsoft Office Remote Code Execution Vulnerability

CVE-2024-30091: High severity, CVSS 7.8 | Vulnix