CVE-2024-30088

CVE-2024-30088 is a Windows Kernel Elevation of Privilege vulnerability affecting Microsoft products, specifically a Time-of-Check to Time-of-Use (TOCTOU) race condition. It carries a high CVSS score of 7.0, indicating that a local, low-privileged attacker can achieve high impact on confidentiality, integrity, and availability with high attack complexity. This vulnerability is actively exploited in the wild, including by known ransomware campaigns and Iranian state-sponsored actors, as evidenced by its inclusion in the KEV catalog and extensive media coverage. While no public exploit code is available on Metasploit, Nuclei, or ExploitDB, it has garnered significant community discussion.