First day on Intigriti: our agent harness found and proved a remote code execution bug, paid €3,000.

CVE-2024-43625

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

Microsoft Windows VMSwitch Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published: Nov 12, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-436267.8Windows Telephony Service Elevation of Privilege Vulnerability CVE-2024-436278.8Windows Telephony Service Remote Code Execution Vulnerability CVE-2024-436288.8Windows Telephony Service Remote Code Execution Vulnerability CVE-2024-436297.8Windows DWM Core Library Elevation of Privilege Vulnerability CVE-2024-43636.4The Visual Portfolio, Photo Gallery & Post Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title_tag’ parame CVE-2024-436307.8Windows Kernel Elevation of Privilege Vulnerability CVE-2024-436317.8Windows Secure Kernel Mode Elevation of Privilege Vulnerability CVE-2024-436336.5Windows Hyper-V Denial of Service Vulnerability CVE-2024-436346.8Windows USB Video Class System Driver Elevation of Privilege Vulnerability CVE-2024-436358.8Windows Telephony Service Remote Code Execution Vulnerability CVE-2024-436367.8Win32k Elevation of Privilege Vulnerability CVE-2024-436376.8Windows USB Video Class System Driver Elevation of Privilege Vulnerability

CVE-2024-43625: High severity, CVSS 8.1 | Vulnix