CVE-2024-6769: Microsoft Windows 10

Medium severity, CVSS 6.7. EPSS: 1.1% chance of exploitation in the next 30 days.

A DLL Hijacking caused by drive remapping combined with a poisoning of the activation cache in Microsoft Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, and Windows Server 2022 allows a malicious authenticated attacker to elevate from a medium integrity process to a high integrity process without the intervention of a UAC prompt.

Affected products

• Microsoft Windows 10: version 10.0.0 only
• Microsoft Windows 11: version 10.0.0 only
• Microsoft Windows Server 2016: version 10.0.0 only
• Microsoft Windows Server 2019: version 10.0.0 only
• Microsoft Windows Server 2022: version 10.0.0 only

Published 2024-09-26. Last modified 2026-06-17.