Recommended action window: Monitor and triage in normal cycle
NVD description
Microsoft Streaming Service Elevation of Privilege Vulnerability
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
at the most recent pwn2own I got frustrated at AI being shit at finding function gadgets, being inconsistent with its results. I wasted so many tokens in the process. so I designed this feature & tested it to write an exploit for cve-2024-30089 which required finding both a special object and a vftable kCFG target (and also defeating a very tight race condition).
9 of 9 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | microsoft | windows_10_1809 | - | - | - |
| OS | microsoft | windows_10_21h2 | - | - | - |
| OS | microsoft | windows_10_22h2 | - | - | - |
| OS | microsoft | windows_11_21h2 | - | - | - |
| OS | microsoft | windows_11_22h2 | - | - | - |
| OS | microsoft | windows_11_23h2 | - | - | - |
| OS | microsoft | windows_server_2019 | - | - | - |
| OS | microsoft | windows_server_2022 | - | - | - |
| OS | microsoft | windows_server_2022_23h2 | - | - | - |