CVE-2024-38193

Microsoft Windows Ancillary Function Driver for WinSock allows local attackers to escalate privileges to SYSTEM.

This local privilege escalation vulnerability enables attackers to gain SYSTEM-level access on Windows systems, posing a severe risk to DIB organizations relying on Microsoft Windows for security controls. While not a remote exploit, the ability to escalate privileges locally undermines the integrity of the operating system and can lead to further compromise if combined with other vulnerabilities. DIB orgs must ensure all Windows systems are patched immediately to prevent unauthorized access to sensitive data.

Shame score — A local privilege escalation vulnerability that requires physical or local access, making it less embarrassing than remote exploits but still critical for compliance.