Microsoft Windows Security Update Advisory (CVE-2024-21338)

AhnLab reports on CVE-2024-21338, a high-severity Windows kernel elevation-of-privilege vulnerability in the AppLocker driver (appid.sys) that permits arbitrary kernel memory read/write; the advisory warns that the Lazarus APT has leveraged this flaw via a BYOVD technique to disable security products and escalate privileges, and provides affected Windows builds and Microsoft patch links with guidance to update systems.