CVE WatchJul 20, 2026

CVE-2024-35250

Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability

CVSS

7.8

High

EPSS

25.2%

p98

KEV

YES

Dec 16, 2024

Exploit Today

0-100

Published: Jun 11, 2024 · Last modified: Jul 20, 2026 · CWE-822

EPSS · 30d

25.0%EPSS · 30 days25.2%

2026-09-172026-10-15

KEV catalog record

Product

Microsoft / Windows

Vulnerability

Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability

Added to KEV

Dec 16, 2024

Remediate by

Jan 6, 2025

Known ransomware use

Summary description

Microsoft Windows Kernel-Mode Driver contains an untrusted pointer dereference vulnerability that allows a local attacker to escalate privileges.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35250 ; https://nvd.nist.gov/vuln/detail/CVE-2024-35250

Technical description

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

Official references

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-1084356.5 MED

—

———Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.11h CVE-2026-969518.8 HIG

74.0%

KEV—72Microsoft Windows Command Injection Vulnerability10h CVE-2026-969337.8 HIG

23.1%

——7Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.4h CVE-2026-969317.8 HIG

23.1%

——7Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.4h CVE-2026-969249.8 CRI

58.7%

——18Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network.2d CVE-2026-969105.5 MED

32.2%

——10Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.3d