CVE-2024-35250

CVE-2024-35250 is a high-severity Windows Kernel-Mode Driver Elevation of Privilege vulnerability affecting Microsoft products. This flaw allows a local attacker with basic user privileges to achieve SYSTEM-level access with low attack complexity, leading to complete compromise of confidentiality, integrity, and availability. The vulnerability is actively exploited in the wild, as confirmed by its inclusion in CISA's KEV catalog and the availability of a Metasploit module. Community discussion and media coverage indicate significant attention to this critical security issue.