# MA-1114.082024: MyCERT Advisory - Zero-Day Vulnerabilities in Microsoft Products

**Date:** 10 Aug 2024  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-1114.082024  
**Advisory ID:** MA-1114.082024

---

**1.0 Introduction**
Recently, Microsoft has released security updates to critical zero-day vulnerabilities in Microsoft Windows operating systems. **CVE-2024-21302 (Medium): Windows Secure Kernel Mode Elevation of Privilege Vulnerability.**This vulnerability could allow an attacker with administrator privileges to replace current Windows system files with outdated versions, potentially reintroducing previously patched vulnerabilities and bypassing security features. **CVE-2024-38202 (High): Windows Update Stack Elevation of Privilege Vulnerability.**This vulnerability could allow an attacker with basic user privileges to “unpatch” previously fixed security vulnerabilities or bypass security features like Virtualization Based Security (VBS).
**2.0 Impact**
A successful exploitation of this vulnerabilities by an attacker can lead to system compromise, data breaches and privilege escalation within the system.
**3.0 Affected Products**
- CVE-2024-21302 (Medium): Windows systems supporting Virtualization Based Security (VBS), including specific Azure Virtual Machine SKUs.
- CVE-2024-38202 (High): All Windows systems with backup functionality.
**4.0 Recommendations**
CyberSecurity Malaysia encourages users and administrators to review the [Microsoft MSRC Security Update Guide](https://msrc.microsoft.com/update-guide) and apply the necessary updates.
Kindly refer to the following URL: 
- <https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38202>
- <https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21302>
Generally, we advise users to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact Cyber999 Incident Response Centre through the following channels:
E-mail: cyber999[at]cybersecurity.my 
Phone: 1-300-88-2999 (monitored during business hours) 
Mobile: +60 19 2665850 (24x7 call incident reporting) 
Business Hours: Mon - Fri 08:30 -17:30 MYT 
Web: [https://www.mycert.org.my](https://www.mycert.org.my/)
**5.0 References**
- <https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21302>
- <https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21302>
- <https://www.safebreach.com/blog/downgrade-attacks-using-windows-updates/>