一、漏洞详情

Windows操作系统内核库中DWM（桌面窗口管理器）可在桌面上实现视觉效果以及各种功能，监测发现存在权限提升漏洞（CVE-2024-30051）。

攻击者可以通过该漏洞劫持相关共享内存，控制内存数据，实现任意函数调用等功能，最终实现Windows本地提权。该漏洞利用代码中适配了大多数Windows 10和Windows 11环境，且漏洞利用条件方式简单，危害性高。

建议受影响用户做好资产自查以及预防工作，以免遭受黑客攻击。

二、影响范围

Windows 10 for 32-bit Systems

Windows 10 for x64-based Systems

Windows 10 Version 1607 for 32-bit Systems

Windows 10 Version 1607 for x64-based Systems

Windows 10 Version 1809 for 32-bit Systems

Windows 10 Version 1809 for ARM64-based Systems

Windows 10 Version 1809 for x64-based Systems

Windows 10 Version 21H2 for 32-bit Systems

Windows 10 Version 21H2 for ARM64-based Systems

Windows 10 Version 21H2 for x64-based Systems

Windows 10 Version 22H2 for 32-bit Systems

Windows 10 Version 22H2 for ARM64-based Systems

Windows 10 Version 22H2 for x64-based Systems

Windows 11 version 21H2 for ARM64-based Systems

Windows 11 version 21H2 for x64-based Systems

Windows 11 Version 22H2 for ARM64-based Systems

Windows 11 Version 22H2 for x64-based Systems

Windows 11 Version 23H2 for ARM64-based Systems

Windows 11 Version 23H2 for x64-based Systems

Windows Server 2016

Windows Server 2016 (Server Core installation)

Windows Server 2019

Windows Server 2019 (Server Core installation)

Windows Server 2022

Windows Server 2022 (Server Core installation)

三、修复建议

目前微软针对支持的产品已发布升级补丁修复了上述漏洞，请用户参考官方通告及时下载更新补丁。校园网提供了Windows 系统补丁自动更新服务，通过安装自动更新脚本，可定期从校内补丁服务器自动更新各类最新补丁，详见http://winupdate.njau.edu.cn。