CVE-2024-53289 HIGH

CVE-2024-53289

Vendor Dell

Product Wyse Proprietary OS (Modern ThinOS)

Weakness CWE-367

Published December 11, 2024

Last update December 11, 2024

View on NVD All CVEs

CVSS base score

7.8/10

Attack vector Local

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Dell ThinOS version 2408 contains a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

Key dates

02Disclosure timeline

December 11, 2024 CVE published

December 11, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-53289 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/367.html

Related vulnerabilities

04Related CVE

CVE-2025-42701 CrowdStrike Falcon Sensor for Windows Race Condition CVE-2026-42344 FastGPT: DNS rebinding TOCTOU bypass in isInternalAddress allows SSRF on all protected endpoints CVE-2024-49046 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability CVE-2026-32921 OpenClaw < 2026.3.8 - Script Content Modification via Mutable Operand Binding in system.run CVE-2021-3054 PAN-OS: Unsigned Code Execution During Plugin Installation Race Condition Vulnerability