CVE-2024-6769

A DLL Hijacking caused by drive remapping combined with a poisoning of the activation cache in Microsoft Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, and Windows Server 2022 allows a malicious authenticated attacker to elevate from a medium integrity process to a high integrity process without the intervention of a UAC prompt.

Score

CVSS 4.0 8.4 High

Status

Deferred - df4dee71-de3a-4139-9588-11b62fe6c0ff

Published

2024-09-26

Last modified

2025-08-29

Weaknesses

CWE-426, CWE-427

Affected products

• Windows 10 (Microsoft)
• Windows 11 (Microsoft)
• Windows Server 2016 (Microsoft)
• Windows Server 2019 (Microsoft)
• Windows Server 2022 (Microsoft)

References

• https://www.fortra.com/security/advisories/research/fr-2024-002
• https://github.com/fortra/CVE-2024-6769