CVE-2024-38080
Microsoft Windows Hyper-V Privilege Escalation Vulnerability
Published Jul 9, 2024 · updated Jun 17, 2026 · microsoft windows 11 21h2
Microsoft Windows Hyper-V contains a privilege escalation vulnerability that allows a local attacker with user permissions to gain SYSTEM privileges.
Timeline
Detection, updates, and resolution for this record.
Jul 9, 2024 · Catalog
Detected
Microsoft Windows Hyper-V contains a privilege escalation vulnerability that allows a local attacker with user permissions to gain SYSTEM privileges.
Jul 9, 2024 · CISA KEV
Known exploited
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Jul 30, 2024 · CISA KEV
Remediation due
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Jun 17, 2026 · Catalog
Updated
Microsoft Windows Hyper-V contains a privilege escalation vulnerability that allows a local attacker with user permissions to gain SYSTEM privileges.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CISA due date Jul 30, 2024
Affected
- cpe microsoft/windows 11 21h2version unspecified
- cpe microsoft/windows 11 22h2version unspecified
- cpe microsoft/windows 11 23h2version unspecified
- cpe microsoft/windows server 2022version unspecified
- cpe microsoft/windows server 2022 23h2version unspecified
- vendor Microsoft Windowsversion unspecified
Sources
- CISA KEVCVE-2024-38080
Microsoft Windows Hyper-V contains a privilege escalation vulnerability that allows a local attacker with user permissions to gain SYSTEM privileges.
cisa.gov - CVE.orgCVE-2024-38080
Official CVE identifier
cve.org - FIRST EPSSCVE-2024-38080
30-day exploitation probability 7.1%
first.org - NIST NVDCVE-2024-38080
Windows Hyper-V Elevation of Privilege Vulnerability
nvd.nist.gov