CVE-2024-21338 is a high-severity vulnerability in the Microsoft Windows Kernel involving an exposed IOCTL dispatcher in appid.sys with insufficient access control. This flaw allows a local attacker to escalate privileges on the affected system. It has been exploited in the wild and is known to be used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.