CVE

CVE-2024-38014

Microsoft Windows Installer Improper Privilege Management Vulnerability

Microsoft · Windows

Date added (CISA)

2024-09-10

Remediation due

2024-10-01

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

Microsoft Windows Installer contains an improper privilege management vulnerability that could allow an attacker to gain SYSTEM privileges.