HOMEVULNERABILITIESCVE-2024-1460
MEDIUM

CVE-2024-1460

CWE-200Published: March 7, 2024· Updated: Jun 17, 2026

4.4
CVSS v3.1

Official Description

MSI Afterburner v4.6.5.16370 is vulnerable to a Kernel Memory Leak vulnerability by triggering the 0x80002040 IOCTL code of the RTCore64.sys driver. The handle to the driver can only be obtained from a high integrity process.

NVD Source

Technical Analysis

CVE-2024-1460 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires high privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), with a CVSS base score of 4.4.

From a weakness classification perspective (CWE-200): Information exposure vulnerabilities leak sensitive data to unauthorized actors.

CVSS v3.1 Vector Breakdown

Exploitability
Attack VectorLocal
Attack ComplexityLow
Privileges Req.High
User InteractionNone
ScopeUnchanged
Impact
ConfidentialityHigh
IntegrityNone
AvailabilityNone
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Affected Vendors & Products

Microsoft1 product(s)
windows
msi1 product(s)
afterburner
Source: NVD CPE · 2 total CPE entries

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time
Exploit-DB
Offensive Security exploit database
GitHub PoC Search
Community PoC repositories
Rapid7 / Metasploit
Metasploit module search
PacketStorm
Security advisories & exploits
NVD Detail
Official NIST entry
MITRE CVE
CVE Program entry
External links open in a new tab. Always verify in a controlled environment before use.

Official Patches & Advisories

ADVISORYhttps://fluidattacks.com/advisories/mingus/
ADVISORYhttps://fluidattacks.com/advisories/mingus/

All References (4)

→
https://fluidattacks.com/advisories/mingus/Exploit · Third Party Advisory
→
https://www.msi.com/Landing/afterburner/graphics-cardsProduct
→
https://fluidattacks.com/advisories/mingus/Exploit · Third Party Advisory
→
https://www.msi.com/Landing/afterburner/graphics-cardsProduct

Quick Facts

CVE IDCVE-2024-1460
CVSS Score4.4 / 10
SeverityMEDIUM
WeaknessCWE-200
CISA KEVNo
Affected2 vendor(s)
PublishedMar 7, 2024

Related CVEs (CWE-200)

CVE-2022-29165
10.0
CVE-2025-22612
10.0
CVE-2011-0376
10.0
CVE-2017-2320
10.0
CVE-2011-1643
10.0
CVE-2025-53624
10.0

Recommended Actions

  • →Apply vendor patches immediately
  • →Monitor CVE-2024-1460 in threat intel feeds
  • →Review IDS/IPS signatures for exploitation attempts
Data sourced from NVD (NIST), CISA KEV, and EPSS (FIRST). Analysis generated by CTIWatch. CVE data is provided under the NVD usage policy.
← All Vulnerabilities·Search for CVE-2024-1460·NVD