Feed/CVE-2024-30088
CVE-2024-30088HIGHCVSS 7.0CISA KEV: Actively Exploited

Microsoft Windows Kernel TOCTOU Race Condition Vulnerability

Published Oct 15, 2024·Updated Aug 4, 2026

NVD Description

Microsoft Windows Kernel contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability that could allow for privilege escalation.

Public Exploits & PoCs10 found

[POC] CVE-2024-30088 — collateral-damage

Kernel exploit for Xbox SystemOS using CVE-2024-30088

33

[POC] CVE-2024-30088 — maldev

Go offensive-security research library — 15+ injection methods, AMSI/ETW/ntdll-unhook evasion, sleep mask, PE ops (sRDI/BOF/CLR hosting), Meterpreter C2, persistence, UAC bypass, CVE-2024-30088 LPE. MITRE ATT&CK mapped.

3

[POC] CVE-2024-30088 — CVE-2024-30088__Windows-TOCTOU-exploit

This is a modified version of the original CVE-2024-30088 exploit, adapted to work in non-interactive environments (WinRM).

2

[POC] CVE-2024-30088 — exploits-forsale-collateral-damage

Kernel exploit for Xbox SystemOS using CVE-2024-30088

1

[POC] CVE-2024-30088 — CVE-2024-30088-Windows-poc

该漏洞存在于 NtQueryInformationToken 函数中,特别是在处理AuthzBasepCopyoutInternalSecurityAttributes 函数时,该漏洞源于内核在操作对象时对锁定机制的不当管理,这一失误可能导致恶意实体意外提升权限。

1

[POC] CVE-2024-30088 — CVE-2024-30088

Questa repository contiene una replica (tentativo di replica) scritto in Python per CVE-2024-30088.

[POC] CVE-2024-30088 — cve-2024-30088-binary

compiled poc binary

[POC] CVE-2024-30088 — CVE-2024-30088-

🆘New Windows Kernel Priviledge Escalation Vulnerability

[POC] CVE-2024-30088 — CVE-2024-30088

Windows Kernel Elevation of Privilege (PoC)

PoC: CVE-2024-30088__Windows-TOCTOU-exploit

This is a modified version of the original CVE-2024-30088 exploit, adapted to work in non-interactive environments (WinRM).

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Register your stack and get notified within minutes when a matching CVE drops.

Start monitoring free