Loading vulnerability…
Windows Hyper-V Integer Overflow Elevation of Privilege
CVE-2024-38080 is an integer overflow vulnerability in Microsoft Windows Hyper-V that enables elevation of privilege. Reported exploitation conditions are inconsistent: one account describes a local attacker with user permissions obtaining SYSTEM privileges, while another describes a remote authenticated attacker escalating to SYSTEM. The vulnerability was reported as actively exploited in the wild.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation can grant an attacker SYSTEM privileges on the affected Windows system, resulting in complete local privilege escalation.
If you can’t patch tonight, do this now.
Prioritize deployment of the applicable July 2024 Patch Tuesday updates on affected Windows systems, particularly where Hyper-V is deployed, because the vulnerability has been actively exploited.
Patch, then assume compromise.
Install Microsoft's July 9, 2024 security updates for all affected Windows client and server versions.
1 exploit validated by Mallory's analysis.
9 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.