CVE-2024-30079: 
vulnerability analysis and mitigation

CVE-2024-30079 is a Windows Remote Access Connection Manager Elevation of Privilege Vulnerability that was discovered and disclosed in July 2024. The vulnerability affects multiple versions of Microsoft Windows operating systems, including Windows 10, Windows 11, and Windows Server editions (NVD).

The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. Microsoft has classified this as a Buffer Over-read vulnerability (CWE-126). The vulnerability requires local access and low privileges to exploit, but requires no user interaction (NVD, MSRC).

If successfully exploited, this vulnerability could allow an attacker to gain elevated privileges on affected systems, potentially leading to complete system compromise with high impacts on confidentiality, integrity, and availability (MSRC).

The vulnerability requires local access and low privileges to exploit. No evidence of active exploitation in the wild has been publicly reported at this time (NVD).

Microsoft has released security updates to address this vulnerability across affected versions of Windows. Users are advised to apply the appropriate security updates, which are available through Windows Update or the Microsoft Update Catalog (Rapid7).