CVE-2024-21xxx records

Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.

863 records · Page 5 of 9

• CVE-2024-21497: Versions of the package github.com/greenpau/caddy-security are vulnerable to Open Redirect via the redirect_url parameter. An attacker could perform a phishing attack and trick us 5.4 Medium

  Versions of the package github.com/greenpau/caddy-security are vulnerable to Open Redirect via the redirect_url parameter. An attacker could perform a phishing attack and trick users into visiting a malicious website by crafting a convincing URL with this parameter. To exploit this vulnerability, the user must take an action, such as clicking on a portal button or using the browser’s back button,

  Updated 2026-03-03
• CVE-2024-21496: All versions of the package github.com/greenpau/caddy-security are vulnerable to Cross-site Scripting (XSS) via the Referer header, due to improper input sanitization. Although the 6.1 Medium

  All versions of the package github.com/greenpau/caddy-security are vulnerable to Cross-site Scripting (XSS) via the Referer header, due to improper input sanitization. Although the Referer header is sanitized by escaping some characters that can allow XSS (e.g., [&], [<], [>], ["], [']), it does not account for the attack based on the JavaScript URL scheme (e.g., javascript:alert(document.domain)/

  Updated 2024-11-06
• CVE-2024-21495: Versions of the package github.com/greenpau/caddy-security before 1.0.42 are vulnerable to Insecure Randomness due to using an insecure random number generation library which could 6.5 Medium

  Versions of the package github.com/greenpau/caddy-security before 1.0.42 are vulnerable to Insecure Randomness due to using an insecure random number generation library which could possibly be predicted via a brute-force search. Attackers could use the potentially predictable nonce value used for authentication purposes in the OAuth flow to conduct OAuth replay attacks. In addition, insecure rando

  Updated 2024-09-05
• CVE-2024-21494: All versions of the package github.com/greenpau/caddy-security are vulnerable to Authentication Bypass by Spoofing via the X-Forwarded-For header due to improper input sanitization 5.4 Medium

  All versions of the package github.com/greenpau/caddy-security are vulnerable to Authentication Bypass by Spoofing via the X-Forwarded-For header due to improper input sanitization. An attacker can spoof an IP address used in the user identity module (/whoami API endpoint). This could lead to unauthorized access if the system trusts this spoofed IP address.

  Updated 2025-04-24
• CVE-2024-21493: All versions of the package github.com/greenpau/caddy-security are vulnerable to Improper Validation of Array Index when parsing a Caddyfile. Multiple parsing functions in the affe 5.3 Medium

  All versions of the package github.com/greenpau/caddy-security are vulnerable to Improper Validation of Array Index when parsing a Caddyfile. Multiple parsing functions in the affected library do not validate whether their input values are nil before attempting to access elements, which can lead to a panic (index out of range). Panics during the parsing of a configuration file may introduce ambigu

  Updated 2024-08-01
• CVE-2024-21492: All versions of the package github.com/greenpau/caddy-security are vulnerable to Insufficient Session Expiration due to improper user session invalidation upon clicking the "Sign O 4.8 Medium

  All versions of the package github.com/greenpau/caddy-security are vulnerable to Insufficient Session Expiration due to improper user session invalidation upon clicking the "Sign Out" button. User sessions remain valid even after requests are sent to /logout and /oauth2/google/logout. Attackers who gain access to an active but supposedly logged-out session can perform unauthorized actions on behal

  Updated 2024-12-06
• CVE-2024-21491: Versions of the package svix before 1.17.0 are vulnerable to Authentication Bypass due to an issue in the verify function where signatures of different lengths are incorrectly comp 5.9 Medium

  Versions of the package svix before 1.17.0 are vulnerable to Authentication Bypass due to an issue in the verify function where signatures of different lengths are incorrectly compared. An attacker can bypass signature verification by providing a shorter signature that matches the beginning of the actual signature. **Note:** The attacker would need to know a victim uses the Rust library for veri

  Updated 2025-05-09
• CVE-2024-21490: This affects versions of the package angular from 1.3.0; versions of the package angularjs from 1.3.0. A regular expression used to split the value of the ng-srcset directive is vu 7.5 High

  This affects versions of the package angular from 1.3.0; versions of the package angularjs from 1.3.0. A regular expression used to split the value of the ng-srcset directive is vulnerable to super-linear runtime due to backtracking. With large carefully-crafted input, this can result in catastrophic backtracking and cause a denial of service. **Note:** This package is EOL and will not receive

  Updated 2026-07-06
• CVE-2024-21489: Versions of the package uplot before 1.6.31 are vulnerable to Prototype Pollution via the uplot.assign function due to missing check if the attribute resolves to the object prototy 8.8 High

  Versions of the package uplot before 1.6.31 are vulnerable to Prototype Pollution via the uplot.assign function due to missing check if the attribute resolves to the object prototype.

  Updated 2026-08-16
• CVE-2024-21488: Versions of the package network before 0.7.0 are vulnerable to Arbitrary Command Injection due to use of the child_process exec function without input sanitization. If (attacker-co 7.3 High

  Versions of the package network before 0.7.0 are vulnerable to Arbitrary Command Injection due to use of the child_process exec function without input sanitization. If (attacker-controlled) user input is given to the mac_address_for function of the package, it is possible for the attacker to execute arbitrary commands on the operating system that this package is being run on.

  Updated 2026-07-26
• CVE-2024-21485: Versions of the package dash-core-components before 2.13.0; versions of the package dash-core-components before 2.0.0; versions of the package dash before 2.15.0; versions of the p 6.5 Medium

  Versions of the package dash-core-components before 2.13.0; versions of the package dash-core-components before 2.0.0; versions of the package dash before 2.15.0; versions of the package dash-html-components before 2.0.0; versions of the package dash-html-components before 2.0.16 are vulnerable to Cross-site Scripting (XSS) when the href of the a tag is controlled by an adversary. An authenticated

  Updated 2025-05-15
• CVE-2024-21484: Versions of the package jsrsasign before 11.0.0 are vulnerable to Observable Discrepancy via the RSA PKCS1.5 or RSAOAEP decryption process. An attacker can decrypt ciphertexts by e 7.5 High

  Versions of the package jsrsasign before 11.0.0 are vulnerable to Observable Discrepancy via the RSA PKCS1.5 or RSAOAEP decryption process. An attacker can decrypt ciphertexts by exploiting the Marvin security flaw. Exploiting this vulnerability requires the attacker to have access to a large number of ciphertexts encrypted with the same key. Workaround The vulnerability can be mitigated by fi

  Updated 2024-10-21
• CVE-2024-21483: A vulnerability has been identified in SENTRON 7KM PAC3120 AC/DC (7KM3120-0BA01-1DA0) (All versions >= V3.2.3 < V3.2.4 only when manufactured between LQN231003... and LQN231215... 5.1 Medium

  A vulnerability has been identified in SENTRON 7KM PAC3120 AC/DC (7KM3120-0BA01-1DA0) (All versions >= V3.2.3 < V3.2.4 only when manufactured between LQN231003... and LQN231215... ( with LQNYYMMDD...)), SENTRON 7KM PAC3120 DC (7KM3120-1BA01-1EA0) (All versions >= V3.2.3 < V3.2.4 only when manufactured between LQN231003... and LQN231215... ( with LQNYYMMDD...)), SENTRON 7KM PAC3220 AC/DC (7KM3220-0

  Updated 2025-04-15
• CVE-2024-21482: Improper Restriction of Operations within the Bounds of a Memory Buffer in Linux Boot Loader 6.8 Medium

  Memory corruption during the secure boot process, when the `bootm` command is used, it bypasses the authentication of the kernel/rootfs image.

  Updated 2024-08-01
• CVE-2024-21481: Improper Restriction of Operations within the Bounds of a Memory Buffer in Hypervisor 8.4 High

  Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager.

  Updated 2024-08-15
• CVE-2024-21480: Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio 7.3 High

  Memory corruption while playing audio file having large-sized input buffer.

  Updated 2024-08-01
• CVE-2024-21479: Buffer Over-read in Audio 7.5 High

  Transient DOS during music playback of ALAC content.

  Updated 2024-08-05
• CVE-2024-21478: NULL Pointer Dereference in Graphics 6.2 Medium

  transient DOS when setting up a fence callback to free a KGSL memory entry object during DMA.

  Updated 2024-08-01
• CVE-2024-21477: Buffer Over-read in WLAN Firmware 7.5 High

  Transient DOS while parsing a protected 802.11az Fine Time Measurement (FTM) frame.

  Updated 2024-08-01
• CVE-2024-21476: Improper Input Validation in Secure Processor 7.8 High

  Memory corruption when the channel ID passed by user is not validated and further used.

  Updated 2025-12-16
• CVE-2024-21475: Use of Out-of-range Pointer Offset in Video 7.8 High

  Memory corruption when the payload received from firmware is not as per the expected protocol size.

  Updated 2024-08-01
• CVE-2024-21474: Stack-based Buffer Overflow in PMIC 8.4 High

  Memory corruption when size of buffer from previous call is used without validation or re-initialization.

  Updated 2024-08-01
• CVE-2024-21473: Improper Input Validation in WIN SON 9.8 Critical

  Memory corruption while redirecting log file to any file location with any file name.

  Updated 2024-08-01
• CVE-2024-21472: Use After Free in Kernel 8.4 High

  Memory corruption in Kernel while handling GPU operations.

  Updated 2024-08-12
• CVE-2024-21471: Use After Free in Graphics Linux 8.4 High

  Memory corruption when IOMMU unmap of a GPU buffer fails in Linux.

  Updated 2024-08-15
• CVE-2024-21470: Integer Overflow to Buffer Overflow in Graphics Windows 8.4 High

  Memory corruption while allocating memory for graphics.

  Updated 2024-08-12
• CVE-2024-21469: Permissions, Privileges, and Access Control issues in TZ Secure OS 7.3 High

  Memory corruption when an invoke call and a TEE call are bound for the same trusted application.

  Updated 2024-08-01
• CVE-2024-21468: Use After Free in Kernel 8.4 High

  Memory corruption when there is failed unmap operation in GPU.

  Updated 2024-08-08
• CVE-2024-21467: Buffer Over-read in WLAN Host Communication 6.5 Medium

  Information disclosure while handling beacon probe frame during scan entry generation in client side.

  Updated 2024-08-05
• CVE-2024-21466: Integer Underflow (Wrap or Wraparound) in WLAN Host Communication 6.5 Medium

  Information disclosure while parsing sub-IE length during new IE generation.

  Updated 2024-08-01
• CVE-2024-21465: Buffer Over-read in Trusted Execution Environment 7.8 High

  Memory corruption while processing key blob passed by the user.

  Updated 2024-08-01
• CVE-2024-21464: Buffer Copy Without Checking Size of Input in Data Network Stack & Connectivity 8.4 High

  Memory corruption while processing IPA statistics, when there are no active clients registered.

  Updated 2026-02-26
• CVE-2024-21463: Buffer Copy Without Checking Size of Input in Audio 7.3 High

  Memory corruption while processing Codec2 during v13k decoder pitch synthesis.

  Updated 2024-08-01
• CVE-2024-21462: Buffer Over-read in TZ Secure OS 7.1 High

  Transient DOS while loading the TA ELF file.

  Updated 2024-08-01
• CVE-2024-21461: Double Free in HLOS 8.4 High

  Memory corruption while performing finish HMAC operation when context is freed by keymaster.

  Updated 2024-08-01
• CVE-2024-21460: Use of Insufficiently Random Values in Core 7.1 High

  Information disclosure when ASLR relocates the IMEM and Secure DDR portions as one chunk in virtual address space.

  Updated 2024-08-01
• CVE-2024-21459: Buffer Over-read in WLAN HOST 6.5 Medium

  Information disclosure while handling beacon or probe response frame in STA.

  Updated 2024-08-05
• CVE-2024-21458: Buffer Over-read in WLAN HOST 6.5 Medium

  Information disclosure while handling SA query action frame.

  Updated 2024-08-01
• CVE-2024-21457: Buffer Over-read in WLAN Host Communication 6.5 Medium

  INformation disclosure while handling Multi-link IE in beacon frame.

  Updated 2024-08-01
• CVE-2024-21456: Buffer Over-read in WLAN HOST 6.5 Medium

  Information Disclosure while parsing beacon frame in STA.

  Updated 2024-08-01
• CVE-2024-21455: Untrusted Pointer Dereference in DSP Service 7.8 High

  Memory corruption when a compat IOCTL call is followed by another IOCTL call from userspace to a driver.

  Updated 2024-10-07
• CVE-2024-21454: Integer Overflow to Buffer Overflow in Automotive Telematics 7.5 High

  Transient DOS while decoding the ToBeSignedMessage in Automotive Telematics.

  Updated 2024-08-01
• CVE-2024-21453: Improper Input Validation in Automotive Telematics 7.5 High

  Transient DOS while decoding message of size that exceeds the available system memory.

  Updated 2024-08-01
• CVE-2024-21452: Improper Input Validation in Automotive Telematics 7.3 High

  Transient DOS while decoding an ASN.1 OER message containing a SEQUENCE of unknown extensions.

  Updated 2024-08-26
• CVE-2024-21451: Microsoft ODBC Driver Remote Code Execution Vulnerability 8.8 High

  Microsoft ODBC Driver Remote Code Execution Vulnerability

  Updated 2025-05-03
• CVE-2024-21450: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability 8.8 High

  Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  Updated 2025-05-03
• CVE-2024-21449: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability 8.8 High

  SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

  Updated 2025-12-09
• CVE-2024-21448: Microsoft Teams for Android Information Disclosure Vulnerability 5.0 Medium

  Microsoft Teams for Android Information Disclosure Vulnerability

  Updated 2025-05-03
• CVE-2024-21447: Windows Authentication Elevation of Privilege Vulnerability 7.8 High

  Windows Authentication Elevation of Privilege Vulnerability

  Updated 2025-05-03
• CVE-2024-21446: NTFS Elevation of Privilege Vulnerability 7.8 High

  NTFS Elevation of Privilege Vulnerability

  Updated 2025-05-03
• CVE-2024-21445: Windows USB Print Driver Elevation of Privilege Vulnerability 7.0 High

  Windows USB Print Driver Elevation of Privilege Vulnerability

  Updated 2025-05-03
• CVE-2024-21444: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability 8.8 High

  Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  Updated 2025-05-03
• CVE-2024-21443: Windows Kernel Elevation of Privilege Vulnerability 7.3 High

  Windows Kernel Elevation of Privilege Vulnerability

  Updated 2025-05-03
• CVE-2024-21442: Windows USB Print Driver Elevation of Privilege Vulnerability 7.8 High

  Windows USB Print Driver Elevation of Privilege Vulnerability

  Updated 2025-05-03
• CVE-2024-21441: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability 8.8 High

  Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  Updated 2025-05-03
• CVE-2024-21440: Microsoft ODBC Driver Remote Code Execution Vulnerability 8.8 High

  Microsoft ODBC Driver Remote Code Execution Vulnerability

  Updated 2025-05-03
• CVE-2024-21439: Windows Telephony Server Elevation of Privilege Vulnerability 7.0 High

  Windows Telephony Server Elevation of Privilege Vulnerability

  Updated 2025-05-03
• CVE-2024-21438: Microsoft AllJoyn API Denial of Service Vulnerability 7.5 High

  Microsoft AllJoyn API Denial of Service Vulnerability

  Updated 2025-05-03
• CVE-2024-21437: Windows Graphics Component Elevation of Privilege Vulnerability 7.8 High

  Windows Graphics Component Elevation of Privilege Vulnerability

  Updated 2025-05-03
• CVE-2024-21436: Windows Installer Elevation of Privilege Vulnerability 7.8 High

  Windows Installer Elevation of Privilege Vulnerability

  Updated 2025-05-03
• CVE-2024-21435: Windows OLE Remote Code Execution Vulnerability 8.8 High

  Windows OLE Remote Code Execution Vulnerability

  Updated 2025-05-03
• CVE-2024-21434: Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability 7.8 High

  Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability

  Updated 2025-05-03
• CVE-2024-21433: Windows Print Spooler Elevation of Privilege Vulnerability 7.0 High

  Windows Print Spooler Elevation of Privilege Vulnerability

  Updated 2025-05-03
• CVE-2024-21432: Windows Update Stack Elevation of Privilege Vulnerability 7.0 High

  Windows Update Stack Elevation of Privilege Vulnerability

  Updated 2025-05-03
• CVE-2024-21431: Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability 7.8 High

  Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability

  Updated 2025-05-03
• CVE-2024-21430: Windows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability 5.7 Medium

  Windows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability

  Updated 2025-05-03
• CVE-2024-21429: Windows USB Hub Driver Remote Code Execution Vulnerability 6.8 Medium

  Windows USB Hub Driver Remote Code Execution Vulnerability

  Updated 2025-05-03
• CVE-2024-21428: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability 8.8 High

  SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

  Updated 2025-12-09
• CVE-2024-21427: Windows Kerberos Security Feature Bypass Vulnerability 7.5 High

  Windows Kerberos Security Feature Bypass Vulnerability

  Updated 2025-05-03
• CVE-2024-21426: Microsoft SharePoint Server Remote Code Execution Vulnerability 7.8 High

  Microsoft SharePoint Server Remote Code Execution Vulnerability

  Updated 2025-05-03
• CVE-2024-21425: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability 8.8 High

  SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

  Updated 2025-12-09
• CVE-2024-21424: Azure Compute Gallery Elevation of Privilege Vulnerability 6.5 Medium

  Azure Compute Gallery Elevation of Privilege Vulnerability

  Updated 2025-05-03
• CVE-2024-21423: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability 4.8 Medium

  Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

  Updated 2026-08-10
• CVE-2024-21421: Azure SDK Spoofing Vulnerability 7.5 High

  Azure SDK Spoofing Vulnerability

  Updated 2025-05-03
• CVE-2024-21420: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability 8.8 High

  Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  Updated 2026-08-10
• CVE-2024-21419: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability 7.6 High

  Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

  Updated 2025-05-03
• CVE-2024-21418: Software for Open Networking in the Cloud (SONiC) Elevation of Privilege Vulnerability 7.8 High

  Software for Open Networking in the Cloud (SONiC) Elevation of Privilege Vulnerability

  Updated 2025-05-03
• CVE-2024-21417: Windows Text Services Framework Elevation of Privilege Vulnerability 8.8 High

  Windows Text Services Framework Elevation of Privilege Vulnerability

  Updated 2026-02-10
• CVE-2024-21416: Windows TCP/IP Remote Code Execution Vulnerability 8.1 High

  Windows TCP/IP Remote Code Execution Vulnerability

  Updated 2026-08-10
• CVE-2024-21415: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability 8.8 High

  SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

  Updated 2025-12-09
• CVE-2024-21414: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability 8.8 High

  SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

  Updated 2025-12-09
• CVE-2024-21413: Microsoft Outlook Remote Code Execution Vulnerability 9.8 Critical

  Microsoft Outlook Remote Code Execution Vulnerability

  Updated 2026-08-10
• CVE-2024-21412: Internet Shortcut Files Security Feature Bypass Vulnerability 8.1 High

  Internet Shortcut Files Security Feature Bypass Vulnerability

  Updated 2026-08-10
• CVE-2024-21411: Skype for Consumer Remote Code Execution Vulnerability 8.8 High

  Skype for Consumer Remote Code Execution Vulnerability

  Updated 2025-05-03
• CVE-2024-21410: Microsoft Exchange Server Elevation of Privilege Vulnerability 9.8 Critical

  Microsoft Exchange Server Elevation of Privilege Vulnerability

  Updated 2026-08-10
• CVE-2024-21409: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability 7.3 High

  .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

  Updated 2025-05-03
• CVE-2024-21408: Windows Hyper-V Denial of Service Vulnerability 5.5 Medium

  Windows Hyper-V Denial of Service Vulnerability

  Updated 2025-05-03
• CVE-2024-21407: Windows Hyper-V Remote Code Execution Vulnerability 8.1 High

  Windows Hyper-V Remote Code Execution Vulnerability

  Updated 2025-05-03
• CVE-2024-21406: Windows Printing Service Spoofing Vulnerability 7.5 High

  Windows Printing Service Spoofing Vulnerability

  Updated 2026-08-10
• CVE-2024-21405: Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability 7.0 High

  Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability

  Updated 2026-08-10
• CVE-2024-21404: .NET Denial of Service Vulnerability 7.5 High

  .NET Denial of Service Vulnerability

  Updated 2026-08-10
• CVE-2024-21403: Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability 9.0 Critical

  Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability

  Updated 2026-08-10
• CVE-2024-21402: Microsoft Outlook Elevation of Privilege Vulnerability 7.1 High

  Microsoft Outlook Elevation of Privilege Vulnerability

  Updated 2026-08-10
• CVE-2024-21401: Microsoft Entra Jira Single-Sign-On Plugin Elevation of Privilege Vulnerability 9.8 Critical

  Microsoft Entra Jira Single-Sign-On Plugin Elevation of Privilege Vulnerability

  Updated 2026-08-10
• CVE-2024-21400: Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability 9.0 Critical

  Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability

  Updated 2025-05-03
• CVE-2024-21399: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability 8.3 High

  Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  Updated 2026-08-10
• CVE-2024-21398: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability 8.8 High

  SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

  Updated 2025-12-09
• CVE-2024-21397: Microsoft Azure File Sync Elevation of Privilege Vulnerability 5.3 Medium

  Microsoft Azure File Sync Elevation of Privilege Vulnerability

  Updated 2026-08-10
• CVE-2024-21396: Dynamics 365 Sales Spoofing Vulnerability 7.6 High

  Dynamics 365 Sales Spoofing Vulnerability

  Updated 2026-08-10
• CVE-2024-21395: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability 8.2 High

  Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

  Updated 2026-08-10

Search a CVE ID or check dependency files →