CVE-2024-38107

Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability
1.6%
EPSS
77%
Percentile
Yes
Known exploited
0
APAC news · 90d
Summary

Microsoft Windows Power Dependency Coordinator contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to obtain SYSTEM privileges.

Vendor
Microsoft
Product
Windows
Added to KEV
Aug 13, 2024
Remediation due
Sep 3, 2024 (US federal deadline)
Ransomware use
Not known
Weakness
CWE-416
EPSS
1.6% as of Nov 12
In the news
  • No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
  • none recorded