CVE-2024-35250

HighCVSS 7.8/10Known exploited (CISA KEV)Last modified Jul 20, 2026

Description

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-822

Affected software

No affected versions have been published.

Timeline

Published
Jun 11, 2024
Last modified
Jul 20, 2026
Added to CISA KEV
Dec 16, 2024
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-352527.5Azure Storage Movement Client Library Denial of Service VulnerabilityCVE-2024-352534.4Microsoft Azure File Sync Elevation of Privilege VulnerabilityCVE-2024-352547.1Azure Monitor Agent Elevation of Privilege VulnerabilityCVE-2024-352555.5Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege VulnerabilityCVE-2024-352568.8SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-35265.4A vulnerability has been found in Campcodes Online Event Management System 1.0 and classified as problematic. Affected by this vulnerabilityCVE-2024-352609.8An authenticated attacker can exploit an untrusted search path vulnerability in Microsoft Dataverse to execute code over a network.CVE-2024-352617.8Azure Network Watcher VM Extension Elevation of Privilege VulnerabilityCVE-2024-352635.7Microsoft Dynamics 365 (On-Premises) Information Disclosure VulnerabilityCVE-2024-352648.1.NET and Visual Studio Remote Code Execution VulnerabilityCVE-2024-352657.0Windows Perception Service Elevation of Privilege VulnerabilityCVE-2024-352667.6Azure DevOps Server Spoofing Vulnerability
CVE-2024-35250: High severity, CVSS 7.8 | Vulnix