---
id: 3044
title: "Windows AppLocker Driver LPE Vulnerability – CVE-2024-21338"
cve: CVE-2024-21338
source_domain: crowdfense.com
source_url: "https://www.crowdfense.com/windows-applocker-driver-lpe-vulnerability-cve-2024-21338/"
published_at: "2024-08-01T06:00:30Z"
tags: ["lpe", "poc", "windows-kernel", "cve-2024-21338", "applocker", "appid-sys", "smep", "kcfg"]
phying_url: "https://phying.com/item/3044"
lang: en
---

# Windows AppLocker Driver LPE Vulnerability – CVE-2024-21338

## Summary

In-depth analysis of CVE-2024-21338, an untrusted pointer dereference in Windows' appid.sys (AppLocker) driver enabling kernel privilege escalation, covering root cause, SMEP/kCFG bypasses and POCs.

## Intelligence Metadata

- **Sources:** crowdfense.com
- **CVE:** CVE-2024-21338
- **Published:** 2024-08-01T06:00:30Z
- **Original:** https://www.crowdfense.com/windows-applocker-driver-lpe-vulnerability-cve-2024-21338/
- **Phying News:** https://phying.com/item/3044