Back to the CVE list
CVE-2024-30088 CISA KEV · Actively exploitedLinked to ransomware

Windows Kernel Elevation of Privilege Vulnerability

CVSS score

7.0

EPSS probability

%68.2

Risk score

9.5

Published

2 y ago

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

Kernel exploit for Xbox SystemOS using CVE-2024-30088 (★41)

Public PoCSource updated: 15.07.2024 21:27:25

This is a modified version of the original CVE-2024-30088 exploit, adapted to work in non-interactive environments (WinRM). (★2)

Public PoCSource updated: 17.04.2026 07:29:03

该漏洞存在于 NtQueryInformationToken 函数中,特别是在处理AuthzBasepCopyoutInternalSecurityAttributes 函数时,该漏洞源于内核在操作对象时对锁定机制的不当管理,这一失误可能导致恶意实体意外提升权限。 (★1)

Public PoCSource updated: 06.07.2024 01:06:36

Kernel exploit for Xbox SystemOS using CVE-2024-30088 (★1)

Public PoCSource updated: 26.08.2024 02:03:51

🆘New Windows Kernel Priviledge Escalation Vulnerability (★0)

Public PoCSource updated: 27.06.2024 16:19:15

Questa repository contiene una replica (tentativo di replica) scritto in Python per CVE-2024-30088. (★0)

Public PoCSource updated: 27.07.2024 20:05:34

Windows privilege escalation: Time-of-check Time-of-use (TOCTOU) Race Condition (★0)

Public PoCSource updated: 19.10.2024 19:36:40

compiled poc binary (★0)

Public PoCSource updated: 06.10.2025 15:35:57

compiled poc binary local privilege escalation by oilrig (★0)

Public PoCSource updated: 07.12.2025 23:09:39

This is a modified version of the original CVE-2024-30088 exploit, adapted to work in non-interactive environments (WinRM). (★0)

Public PoCSource updated: 17.04.2026 07:28:31

FangFang-Yi/CVE-2024-30088

Public PoC

tykawaii98/CVE-2024-30088

Public PoC

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2024-30088"