CVE-2024-30085 Analizi
Windows Cloud Files Mini Filter Driver yetki yukseltme acigi. DanaBot kampanyalarinda POST_COMPROMISE evresi icin istismar edilmistir.
CVE-2024-30085
Windows Cloud Files Mini Filter Driver privilege escalation vulnerability. Windows file system driver vulnerability that loader families such as DanaBot and GootLoader exploit to gain a permanent foothold in the system.
Vulnerability Profile
CVSS Score
7.8 / 10.0
Severity
High
Exploitation Status
⚠ Active Exploitation
Patch Status
✓ Patch Available
Affected Software
Windows 10/11, Windows Server 2019/2022
Exploitation Method
Privilege Escalation
MITRE ATT&CK
T1068 - Exploitation for Privilege Escalation