CVE-2024-3290 HIGH

CVE-2024-3290: Race Condition

Vendor Tenable

Product Nessus

Weakness CWE-367

Published May 17, 2024

Last update August 1, 2024

View on NVD All CVEs

CVSS base score

8.2/10

Attack vector Local

Attack complexity Low

Privileges required Low

User interaction Required

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

A race condition vulnerability exists where an authenticated, local attacker on a Windows Nessus host could modify installation parameters at installation time, which could lead to the execution of arbitrary code on the Nessus host

Key dates

02Disclosure timeline

May 17, 2024 CVE published

August 1, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-3290 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/367.html

Related vulnerabilities

04Related CVE

CVE-2025-49730 Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability CVE-2026-34224 Parse Server: MFA single-use token bypass via concurrent authData login requests CVE-2026-9796 Keycloak: keycloak: privilege escalation via time-of-check to time-of-use (toctou) vulnerability CVE-2024-21362 Windows Kernel Security Feature Bypass Vulnerability CVE-2025-34027 Versa Concerto Authentication Bypass File Write Remote Code Execution