CVE-2024-49078: CVE-2024-49078 [MEDIUM] CWE-190 Windows Mobile Broadband Driver Elevation of Privilege Vulnerability Windows Mobile Broadband Driver Elevation of Privilege…

PriorityP428medium6.8CVSS 3.1

AVPACLPRNUINSUCHIHAH

EPSS

0.85%

53.3th percentile

CVE-2024-49078 [MEDIUM] CWE-190 Windows Mobile Broadband Driver Elevation of Privilege Vulnerability Windows Mobile Broadband Driver Elevation of Privilege Vulnerability FAQ: According to the CVSS metric, the Attack Vector is Physical (AV:P). What does that mean for this vulnerability? An attacker needs physical access to the target computer to plug in a malicious USB drive. FAQ: What privileges could be gained by an attacker who successfully exploited this vulnerability? An attacker who successfully exploited this vulnerability could gain SYSTEM privileges. Windows Mobile Broadband: Windows Mobile Broadband Microsoft: Microsoft Customer Action Required: Yes Impact: Elevation of Privilege Exploit Status: Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;DOS:N/A Reference: https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5048661 Refere

Affected

17 ranges

Vendor	Product	Version range	Fixed in
msrc	windows_10_version_1809_for_32-bit_systems	—	—
msrc	windows_10_version_1809_for_x64-based_systems	—	—
msrc	windows_10_version_21h2_for_32-bit_systems	—	—
msrc	windows_10_version_21h2_for_arm64-based_systems	—	—
msrc	windows_10_version_21h2_for_x64-based_systems	—	—
msrc	windows_10_version_22h2_for_32-bit_systems	—	—
msrc	windows_10_version_22h2_for_arm64-based_systems	—	—
msrc	windows_10_version_22h2_for_x64-based_systems	—	—
msrc	windows_11_version_22h2_for_arm64-based_systems	—	—
msrc	windows_11_version_22h2_for_x64-based_systems	—	—
msrc	windows_11_version_23h2_for_arm64-based_systems	—	—
msrc	windows_11_version_23h2_for_x64-based_systems	—	—
msrc	windows_11_version_24h2_for_arm64-based_systems	—	—
msrc	windows_11_version_24h2_for_x64-based_systems	—	—
msrc	windows_server_2019	—	—
msrc	windows_server_2022_23h2_edition	—	—
msrc	windows_server_2025	—	—

CVSS provenance

nvdv3.16.8MEDIUMCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

vendor_msrc6.8MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.