CVE-2024-21355: 
vulnerability analysis and mitigation

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability, identified as CVE-2024-21355, was disclosed on February 13, 2024. This vulnerability affects multiple versions of Microsoft Windows operating systems, including Windows 10, Windows 11, and various Windows Server editions (MSRC).

The vulnerability has been assigned a CVSS v3.1 base score of 7.0 (HIGH) with the following vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H. The vulnerability is associated with CWE-591 (Sensitive Data Storage in Improperly Locked Memory) as identified by Microsoft Corporation (NVD).

This elevation of privilege vulnerability in Microsoft Message Queuing (MSMQ) could allow an attacker to gain higher privileges on affected systems. The vulnerability affects confidentiality, integrity, and availability of the system, as indicated by the CVSS scoring metrics (Rapid7).

Microsoft has released security updates to address this vulnerability across multiple affected versions. Updates are available through KB5034774 (Windows 10 1507), KB5034767 (Windows 10 1607), KB5034768 (Windows 10 1809), KB5034763 (Windows 10 21H2/22H2), KB5034765 (Windows 11), and various other KB articles for affected server versions (Rapid7).