CVE-2024-21338

Microsoft Windows Kernel contains an exposed IOCTL with insufficient access control vulnerability within the IOCTL (input and output control) dispatcher in appid.sys that allows a local attacker to achieve privilege escalation. Vendor/Product: Microsoft Windows. Added to CISA KEV 2024-03-04; required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.