CVE-2024-21338

Vulnerability updated 10 months ago (2024-02-16T09:56:49.962Z)

Download STIX

Preview STIX

Not enough context has been learned about CVE-2024-21338 for a description yet. However we're tracking it as a Vulnerability profile. Vulnerability: A flaw in software design or implementation

Description last updated:

What's your take? (Question 1 of 5)

Help tune the shared Cybergeist dataset, assist your peers, and earn karma. Expand the panel to get started.

Aliases We are not currently tracking any aliases

Miscellaneous Associations

Other elements of context that could aid in the identification of relevance

Microsoft

Avast

Vulnerability

Exploit

CISA

Analyst Notes & Discussion

Be the first to leave your mark here! Log in to share your views and vote.

Associated Malware

To see the evidence that has resulted in these malware associations, create a free account

Alias Description	Association Type	Votes
The Fudmodule Malware is associated with CVE-2024-21338. FudModule is a sophisticated malware that has been associated with various North Korean hacking campaigns since October 2021. It uses direct kernel object manipulation (DKOM) techniques to bypass kernel security checks and has seen significant improvements since its initial discovery three years ago	Unspecified	4

Source Document References

Information about the CVE-2024-21338 Vulnerability was read from the documents corpus below. This display is limited to 20 results, create a free account to see more

Source Link	CreatedAt	Title
Securelist	8 days ago	Advanced threat predictions for 2025
Checkpoint	2 months ago	Breaking Boundaries: Investigating Vulnerable Drivers and Mitigating Risks - Check Point Research
Securityaffairs	3 months ago	Microsoft Zero-Day CVE-2024-38193 was exploited by North Korea-linked Lazarus APT
Securityaffairs	4 months ago	Security Affairs newsletter Round 483 by Pierluigi Paganini – INTERNATIONAL EDITION
CERT-EU	9 months ago	Lazarus APT exploited zero-day in Windows driver to gain kernel privileges
CERT-EU	9 months ago	Microsoft is Under Attack by Russian Hackers \| #hacking \| #cybersecurity \| #infosec \| #comptia \| #pentest \| #hacker \| National Cyber Security Consulting
CERT-EU	9 months ago	March 2024 Patch Tuesday: Significant Vulnerabilities
CERT-EU	9 months ago	March 2024 Patch Tuesday: Microsoft fixes critical bugs in Windows Hyper-V
CERT-EU	9 months ago	March 2024 Patch Tuesday: Microsoft fixes critical bugs in Windows Hyper-V - Help Net Security
CERT-EU	9 months ago	Windows admin-to-kernel exploit went unpatched for 6 months
CERT-EU	9 months ago	Microsoft left a kernel-level, zero-day bug in Windows for six months before patching it
Securityaffairs	9 months ago	CISA ADDS MICROSOFT WINDOWS KERNEL BUG USED BY LAZARUS TO ITS KNOWN EXPLOITED VULNERABILITIES CATALOG
CERT-EU	9 months ago	CISA ADDS MICROSOFT WINDOWS KERNEL BUG USED BY LAZARUS APT TO ITS KNOWN EXPLOITED VULNERABILITIES CATALOG
CISA	9 months ago	CISA Adds One Known Exploited Vulnerability to Catalog \| CISA
CERT-EU	9 months ago	Weekly Vulnerability Recap 3/4/24: Ivanti, Ubiquiti, AppLocker
CERT-EU	9 months ago	CISA Adds One Known Exploited Vulnerability to Catalog
CERT-EU	9 months ago	Cyber Security Week in Review: March 1, 2024
CERT-EU	9 months ago	North Korean Lazarus hackers abused recent Windows zero-day to obtain kernel-level access
CERT-EU	9 months ago	Windows Kernel bug fixed last month exploited as zero-day since August
CERT-EU	9 months ago	Lazarus Group observed exploiting an admin-to-kernel Windows zero-day