CVE-2024-22830

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-05-01 · updated 2026-07-09
Weakness: CWE-284

Description

Anti-Cheat Expert's Windows kernel module "ACE-BASE.sys" version 1.0.2202.6217 does not perform proper access control when handling system resources. This allows a local attacker to escalate privileges from regular user to System or PPL level.

Affected products

Windows-Kernel Ace-Base-Sys: 1.0.2202.6217

References

https://intl.anticheatexpert.com/#/tool-center
https://www.defencetech.it/wp-content/uploads/2024/04/Report-CVE-2024-22830.pdf
https://intl.anticheatexpert.com/#/tool-center
https://www.defencetech.it/wp-content/uploads/2024/04/Report-CVE-2024-22830.pdf

Get alerted when CVE-2024-22830 or the next vulnerability affects your stack