CVE-2025-24076PoC(microsoft / windows_11_22h2)

LOWCVSS 7.3 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft
Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.

microsoft CVEs Back to dashboard

2.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24076

Weakness type (CWE)

CWE-284

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

windows_11_22h2
windows_11_23h2
windows_11_24h2
windows_server_2022_23h2

Threat summary

Public PoC is present in monitored signal
1 mentions across 1 observed day

What's happening

PoC mentioned or linked in 1 signal
1 total mentions across 1 day

Affected systems

Vendors

microsoft

Products

windows_11_22h2windows_11_23h2windows_11_24h2windows_server_2022_23h2windows_server_2025

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

PoC

1100.0%

Referenced assets1 URL

By indicator

https://undercodetesting.com/hijack-this-dll-own-the-system-300ms-to-system-with-cve-2025-24076/

Full discourse1 post

UNDERCODE TESTING@UndercodeUpdate136d
PoC
🚨 Hijack This DLL, Own the System: 300ms to SYSTEM with #CVE-2025-24076 https://undercodetesting.com/hijack-this-dll-own-the-system-300ms-to-system-with-cve-2025-24076/ Educational Purposes!
Post summary
An educational PoC showcases DLL hijacking to achieve SYSTEM privileges in 300 ms for CVE‑2025‑24076, but no exploit tool, patch, or active exploitation information is provided.
0000144
607 followersView on X

CPE platform detail5 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

5 of 5 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	microsoft	windows_11_22h2	-	-	-
OS	microsoft	windows_11_23h2	-	-	-
OS	microsoft	windows_11_24h2	-	-	-
OS	microsoft	windows_server_2022_23h2	-	-	x64
OS	microsoft	windows_server_2025	-	-	-

Explore more

Back to dashboard microsoft CVEs windows_11_22h2 vulnerabilities