CVE-2024-30051

A privilege escalation flaw in Microsoft's DWM Core Library lets attackers gain SYSTEM privileges and has been actively exploited in the wild.

An unpatched privilege escalation vulnerability in the Microsoft DWM Core Library allows attackers to escalate to SYSTEM privileges, enabling full system compromise. This failure is critical because it has been actively exploited in the wild and is linked to ransomware campaigns, meaning DIB organizations must verify their Microsoft DWM versions and apply patches immediately to prevent lateral movement and data exfiltration.

Shame score — A known privilege escalation vulnerability was actively exploited in the wild and linked to ransomware, indicating severe negligence and avoidable risk.