PT-2024-3342 · Microsoft · Windows Dwm Core Library+1

Adam Brunner + 7 · Published 2024-05-14 · Updated 2026-01-22 · CVE-2024-30051

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows DWM Core Library (affected versions not specified)

Description The issue is related to an elevation of privilege vulnerability in the Windows DWM Core Library. This vulnerability allows attackers to affect the system. It has been linked to cyberattacks involving QakBot, a notorious banking trojan. The vulnerability is being actively exploited by QakBot and other malware. Researchers have identified a new zero-day vulnerability in Windows, designated as this issue, and it is being used by multiple attackers.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

LPE

RCE

Memory Corruption

Heap Based Buffer Overflow

Weakness Enumeration

CWE-787

CWE-122

Related Identifiers

BDU:2024-03613

CVE-2024-30051

Affected Products

Windows

Windows Dwm Core Library

References · 91

• 🔥 https://github.com/fortra/CVE-2024-30051 · Exploit
• https://osv.dev/vulnerability/CVE-2024-30051 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-30051 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30051 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/707917 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-30051 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2024-30051 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-03613 · Security Note
• https://twitter.com/kieran__again/status/1837507499353624821 · Twitter Post
• https://twitter.com/rhodes0x42/status/1832076050521563431 · Twitter Post
• https://twitter.com/Dinosn/status/1833336200985206975 · Twitter Post
• https://twitter.com/shubhammetange/status/1832047962819637574 · Twitter Post
• https://twitter.com/the_yellow_fall/status/1832962395867676889 · Twitter Post
• https://twitter.com/transilienceai/status/1842191561515274735 · Twitter Post
• https://t.me/pentestingnews/46940 · Telegram Post