关于Windows DWM核心库特权提升漏洞（CVE-2024-30051）的预警提示

发布时间：2024-05-17浏览次数：70

一、漏洞详情 Windows操作系统是由微软开发的用户友好的图形界面操作系统，广泛用于个人电脑和企业环境，提供多任务处理、文件管理和应用程序支持。 攻击者可以通过该漏洞劫持相关共享内存，控制内存数据，实现任意函数调用等功能，最终实现Windows本地提权。该漏洞利用代码中适配了大多数Windows 10和Windows 11环境，且漏洞利用条件方式简单，危害性高。 建议受影响用户做好资产自查以及预防工作，以免遭受黑客攻击。 二、影响范围 Windows 10 for 32-bit Systems Windows 10 for x64-based Systems Windows 10 Version 1607 for 32-bit Systems Windows 10 Version 1607 for x64-based Systems Windows 10 Version 1809 for 32-bit Systems Windows 10 Version 1809 for ARM64-based Systems Windows 10 Version 1809 for x64-based Systems Windows 10 Version 21H2 for 32-bit Systems Windows 10 Version 21H2 for ARM64-based Systems Windows 10 Version 21H2 for x64-based Systems Windows 10 Version 22H2 for 32-bit Systems Windows 10 Version 22H2 for ARM64-based Systems Windows 10 Version 22H2 for x64-based Systems Windows 11 version 21H2 for ARM64-based Systems Windows 11 version 21H2 for x64-based Systems Windows 11 Version 22H2 for ARM64-based Systems Windows 11 Version 22H2 for x64-based Systems Windows 11 Version 23H2 for ARM64-based Systems Windows 11 Version 23H2 for x64-based Systems Windows Server 2016 Windows Server 2016 (Server Core installation) Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows Server 2022 (Server Core installation) 三、修复建议    目前微软针对支持的产品已发布升级补丁修复了上述漏洞，请用户参考官方通告及时下载更新补丁。