CVE-2024-6769 Medium to High Integrity Privilege Escalation in Microsoft Windows
An authenticated attacker can elevate privileges from medium to high integrity without a UAC prompt via DLL hijacking and activation cache poisoning.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-6769?
CVE-2024-6769 is a high-severity vulnerability in Microsoft Windows 10, published on 26 Sep 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A DLL Hijacking caused by drive remapping combined with a poisoning of the activation cache in Microsoft Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, and Windows Server 2022 allows a malicious authenticated attacker to elevate from a medium integrity process to a high integrity process without the intervention of a UAC prompt.
Which versions are affected by CVE-2024-6769?
How do I fix CVE-2024-6769?
No fix has been published for CVE-2024-6769 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-6769 being exploited?
There is no known exploitation of CVE-2024-6769 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Sources
Also known as GHSA-qmr2-j5m9-cq3m.