CVE Watch20 jul 2026

CVE-2024-35250

Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability

CVSS

7.8

Alto

EPSS

25.2%

p98

KEV

SÍ

16 dic 2024

Exploit Today

0-100

Publicado: 11 jun 2024 · Última mod.: 20 jul 2026 · CWE-822

EPSS · 30d

25.0%EPSS · 30 días25.2%

2026-09-182026-10-15

Ficha del catálogo KEV

Producto

Microsoft / Windows

Vulnerabilidad

Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability

Añadido a KEV

16 dic 2024

Remediar antes de

6 ene 2025

Uso conocido en ransomware

Descripción resumida

Microsoft Windows Kernel-Mode Driver contains an untrusted pointer dereference vulnerability that allows a local attacker to escalate privileges.

Acción requerida

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35250 ; https://nvd.nist.gov/vuln/detail/CVE-2024-35250

Descripción técnica

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-1084356.5 MED

—

———Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.5h CVE-2026-969518.8 ALT

74.0%

KEV—72Microsoft Windows Command Injection Vulnerability7h CVE-2026-969337.8 ALT

23.1%

——7Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.8h CVE-2026-969317.8 ALT

23.1%

——7Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.8h CVE-2026-969249.8 CRÍ

58.7%

——18Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network.5h CVE-2026-969105.5 MED

32.2%

——10Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.8h