CVE-2024-38107

Microsoft Windows Power Dependency Coordinator vulnerability enables local privilege escalation to SYSTEM.

This unspecified vulnerability allows a local attacker to escalate privileges to SYSTEM, posing a significant risk to DIB organizations relying on Windows endpoints for sensitive data. While not a zero-day or remote code execution vulnerability, the ability to gain SYSTEM privileges locally makes it a critical compliance concern for NIST 800-171 and CMMC implementations. Organizations must ensure all Windows systems are patched immediately to prevent unauthorized access to sensitive systems.

Shame score — This is a standard privilege escalation vulnerability that requires local access, making it less embarrassing than remote exploits but still a critical security failure.