https://pwn.watch/i/microsoft-windows-cve-2024-21338 Microsoft Windows Kernel contains an exposed IOCTL with insufficient access control vulnerability within the IOCTL (input and output control) dispatcher in appid.sys that allows a local attacker to achieve privilege escalation. Added to the CISA KEV catalog on 2024-03-04. CISA lists known use in ransomware campaigns. en Mon, 04 Mar 2024 00:00:00 GMT https://pwn.watch/i/microsoft-windows-cve-2024-21338 https://pwn.watch/i/microsoft-windows-cve-2024-21338#2024-03-04-44528b6e Mon, 04 Mar 2024 00:00:00 GMT high <p><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Source</a></p> https://pwn.watch/i/microsoft-windows-cve-2024-21338 https://pwn.watch/i/microsoft-windows-cve-2024-21338#2024-02-13-374c659c Tue, 13 Feb 2024 00:00:00 GMT high <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-21338">Source</a></p>