CVE-2024-38080

HighCVSS 7.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Windows Hyper-V Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190

Affected software

No affected versions have been published.

Timeline

Published
Jul 9, 2024
Last modified
Jun 17, 2026
Added to CISA KEV
Jul 9, 2024
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-380817.3.NET, .NET Framework, and Visual Studio Elevation of Privilege VulnerabilityCVE-2024-380824.7Microsoft Edge (Chromium-based) Spoofing VulnerabilityCVE-2024-380834.3Microsoft Edge (Chromium-based) Spoofing VulnerabilityCVE-2024-380847.8Microsoft OfficePlus Elevation of Privilege VulnerabilityCVE-2024-380857.8Windows Graphics Component Elevation of Privilege VulnerabilityCVE-2024-380866.4Azure Kinect SDK Remote Code Execution VulnerabilityCVE-2024-380878.8SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-380888.8SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-380899.9Microsoft Defender for IoT Elevation of Privilege VulnerabilityCVE-2024-38098.8The Porto Theme - Functionality plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.0.9 via tCVE-2024-380917.5Microsoft WS-Discovery Denial of Service VulnerabilityCVE-2024-380928.8Azure CycleCloud Elevation of Privilege Vulnerability
CVE-2024-38080: High severity, CVSS 7.8 | Vulnix