Skip to content

CVE-2024-21xxx records

Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.

863 records · Page 6 of 9

CVE-2024-21394: Dynamics 365 Field Service Spoofing Vulnerability 7.6 High
Dynamics 365 Field Service Spoofing Vulnerability
Updated 2026-08-10
CVE-2024-21393: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability 7.6 High
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Updated 2026-08-10
CVE-2024-21392: .NET and Visual Studio Denial of Service Vulnerability 7.5 High
.NET and Visual Studio Denial of Service Vulnerability
Updated 2025-05-03
CVE-2024-21391: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability 8.8 High
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Updated 2026-08-10
CVE-2024-21390: Microsoft Authenticator Elevation of Privilege Vulnerability 7.1 High
Microsoft Authenticator Elevation of Privilege Vulnerability
Updated 2025-05-03
CVE-2024-21389: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability 7.6 High
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Updated 2026-08-10
CVE-2024-21388: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability 6.5 Medium
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Updated 2025-05-29
CVE-2024-21387: Microsoft Edge for Android Spoofing Vulnerability 5.3 Medium
Microsoft Edge for Android Spoofing Vulnerability
Updated 2025-05-03
CVE-2024-21386: .NET Denial of Service Vulnerability 7.5 High
.NET Denial of Service Vulnerability
Updated 2026-08-10
CVE-2024-21385: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability 8.3 High
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Updated 2025-05-29
CVE-2024-21384: Microsoft Office OneNote Remote Code Execution Vulnerability 7.8 High
Microsoft Office OneNote Remote Code Execution Vulnerability
Updated 2026-08-10
CVE-2024-21383: Microsoft Edge (Chromium-based) Spoofing Vulnerability 3.3 Low
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Updated 2025-05-03
CVE-2024-21382: Microsoft Edge for Android Information Disclosure Vulnerability 4.3 Medium
Microsoft Edge for Android Information Disclosure Vulnerability
Updated 2025-05-29
CVE-2024-21381: Microsoft Azure Active Directory B2C Spoofing Vulnerability 6.8 Medium
Microsoft Azure Active Directory B2C Spoofing Vulnerability
Updated 2026-08-10
CVE-2024-21380: Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability 8.0 High
Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability
Updated 2026-08-10
CVE-2024-21379: Microsoft Word Remote Code Execution Vulnerability 7.8 High
Microsoft Word Remote Code Execution Vulnerability
Updated 2026-08-10
CVE-2024-21378: Microsoft Outlook Remote Code Execution Vulnerability 8.8 High
Microsoft Outlook Remote Code Execution Vulnerability
Updated 2026-08-10
CVE-2024-21377: Windows DNS Information Disclosure Vulnerability 5.5 Medium
Windows DNS Information Disclosure Vulnerability
Updated 2026-08-10
CVE-2024-21376: Microsoft Azure Kubernetes Service Confidential Container Remote Code Execution Vulnerability 9.0 Critical
Microsoft Azure Kubernetes Service Confidential Container Remote Code Execution Vulnerability
Updated 2026-08-10
CVE-2024-21375: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability 8.8 High
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Updated 2026-08-10
CVE-2024-21374: Microsoft Teams for Android Information Disclosure Vulnerability 5.0 Medium
Microsoft Teams for Android Information Disclosure Vulnerability
Updated 2026-08-10
CVE-2024-21373: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability 8.8 High
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
Updated 2025-12-09
CVE-2024-21372: Windows OLE Remote Code Execution Vulnerability 8.8 High
Windows OLE Remote Code Execution Vulnerability
Updated 2026-08-10
CVE-2024-21371: Windows Kernel Elevation of Privilege Vulnerability 7.0 High
Windows Kernel Elevation of Privilege Vulnerability
Updated 2026-08-10
CVE-2024-21370: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability 8.8 High
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Updated 2026-08-10
CVE-2024-21369: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability 8.8 High
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Updated 2026-08-10
CVE-2024-21368: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability 8.8 High
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Updated 2026-08-10
CVE-2024-21367: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability 8.8 High
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Updated 2026-08-10
CVE-2024-21366: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability 8.8 High
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Updated 2026-08-10
CVE-2024-21365: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability 8.8 High
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Updated 2026-08-10
CVE-2024-21364: Microsoft Azure Site Recovery Elevation of Privilege Vulnerability 9.3 Critical
Microsoft Azure Site Recovery Elevation of Privilege Vulnerability
Updated 2026-08-10
CVE-2024-21363: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability 7.8 High
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Updated 2026-08-10
CVE-2024-21362: Windows Kernel Security Feature Bypass Vulnerability 5.5 Medium
Windows Kernel Security Feature Bypass Vulnerability
Updated 2026-08-10
CVE-2024-21361: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability 8.8 High
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Updated 2026-08-10
CVE-2024-21360: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability 8.8 High
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Updated 2026-08-10
CVE-2024-21359: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability 8.8 High
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Updated 2026-08-10
CVE-2024-21358: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability 8.8 High
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Updated 2026-08-10
CVE-2024-21357: Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability 8.1 High
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
Updated 2026-08-10
CVE-2024-21356: Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability 6.5 Medium
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
Updated 2026-08-10
CVE-2024-21355: Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability 7.0 High
Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
Updated 2026-08-10
CVE-2024-21354: Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability 7.8 High
Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
Updated 2026-08-10
CVE-2024-21353: Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability 8.8 High
Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability
Updated 2026-08-10
CVE-2024-21352: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability 8.8 High
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Updated 2026-08-10
CVE-2024-21351: Windows SmartScreen Security Feature Bypass Vulnerability 7.6 High
Windows SmartScreen Security Feature Bypass Vulnerability
Updated 2026-08-10
CVE-2024-21350: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability 8.8 High
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Updated 2026-08-10
CVE-2024-21349: Microsoft ActiveX Data Objects Remote Code Execution Vulnerability 8.8 High
Microsoft ActiveX Data Objects Remote Code Execution Vulnerability
Updated 2026-08-10
CVE-2024-21348: Internet Connection Sharing (ICS) Denial of Service Vulnerability 7.5 High
Internet Connection Sharing (ICS) Denial of Service Vulnerability
Updated 2026-08-10
CVE-2024-21347: Microsoft ODBC Driver Remote Code Execution Vulnerability 7.5 High
Microsoft ODBC Driver Remote Code Execution Vulnerability
Updated 2026-08-10
CVE-2024-21346: Win32k Elevation of Privilege Vulnerability 7.8 High
Win32k Elevation of Privilege Vulnerability
Updated 2026-08-10
CVE-2024-21345: Windows Kernel Elevation of Privilege Vulnerability 8.8 High
Windows Kernel Elevation of Privilege Vulnerability
Updated 2026-08-10
CVE-2024-21344: Windows Network Address Translation (NAT) Denial of Service Vulnerability 5.9 Medium
Windows Network Address Translation (NAT) Denial of Service Vulnerability
Updated 2026-08-10
CVE-2024-21343: Windows Network Address Translation (NAT) Denial of Service Vulnerability 5.9 Medium
Windows Network Address Translation (NAT) Denial of Service Vulnerability
Updated 2026-08-10
CVE-2024-21342: Windows DNS Client Denial of Service Vulnerability 7.5 High
Windows DNS Client Denial of Service Vulnerability
Updated 2026-08-10
CVE-2024-21341: Windows Kernel Remote Code Execution Vulnerability 6.8 Medium
Windows Kernel Remote Code Execution Vulnerability
Updated 2026-08-10
CVE-2024-21340: Windows Kernel Information Disclosure Vulnerability 4.6 Medium
Windows Kernel Information Disclosure Vulnerability
Updated 2026-08-10
CVE-2024-21339: Windows USB Generic Parent Driver Remote Code Execution Vulnerability 6.4 Medium
Windows USB Generic Parent Driver Remote Code Execution Vulnerability
Updated 2026-08-10
CVE-2024-21338: Windows Kernel Elevation of Privilege Vulnerability 7.8 High
Windows Kernel Elevation of Privilege Vulnerability
Updated 2026-08-10
CVE-2024-21337: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability 5.2 Medium
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Updated 2025-06-03
CVE-2024-21336: Microsoft Edge (Chromium-based) Spoofing Vulnerability 2.5 Low
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Updated 2025-05-03
CVE-2024-21335: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability 8.8 High
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
Updated 2025-12-09
CVE-2024-21334: Open Management Infrastructure (OMI) Remote Code Execution Vulnerability 9.8 Critical
Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
Updated 2025-05-03
CVE-2024-21333: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability 8.8 High
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
Updated 2025-12-09
CVE-2024-21332: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability 8.8 High
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
Updated 2025-12-09
CVE-2024-21331: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability 8.8 High
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
Updated 2025-12-09
CVE-2024-21330: Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability 7.8 High
Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
Updated 2025-05-03
CVE-2024-21329: Azure Connected Machine Agent Elevation of Privilege Vulnerability 7.3 High
Azure Connected Machine Agent Elevation of Privilege Vulnerability
Updated 2026-08-10
CVE-2024-21328: Dynamics 365 Sales Spoofing Vulnerability 7.6 High
Dynamics 365 Sales Spoofing Vulnerability
Updated 2026-08-10
CVE-2024-21327: Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability 7.6 High
Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability
Updated 2026-08-10
CVE-2024-21326: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability 9.6 Critical
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Updated 2025-06-17
CVE-2024-21325: Microsoft Printer Metadata Troubleshooter Tool Remote Code Execution Vulnerability 7.8 High
Microsoft Printer Metadata Troubleshooter Tool Remote Code Execution Vulnerability
Updated 2025-06-17
CVE-2024-21324: Microsoft Defender for IoT Elevation of Privilege Vulnerability 7.2 High
Microsoft Defender for IoT Elevation of Privilege Vulnerability
Updated 2025-05-03
CVE-2024-21323: Microsoft Defender for IoT Remote Code Execution Vulnerability 8.8 High
Microsoft Defender for IoT Remote Code Execution Vulnerability
Updated 2025-05-03
CVE-2024-21322: Microsoft Defender for IoT Remote Code Execution Vulnerability 7.2 High
Microsoft Defender for IoT Remote Code Execution Vulnerability
Updated 2025-05-03
CVE-2024-21320: Windows Themes Spoofing Vulnerability 6.5 Medium
Windows Themes Spoofing Vulnerability
Updated 2025-09-15
CVE-2024-21319: Microsoft Identity Denial of service vulnerability 6.8 Medium
Microsoft Identity Denial of service vulnerability
Updated 2025-06-03
CVE-2024-21318: Microsoft SharePoint Server Remote Code Execution Vulnerability 8.8 High
Microsoft SharePoint Server Remote Code Execution Vulnerability
Updated 2025-05-03
CVE-2024-21317: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability 8.8 High
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
Updated 2025-12-09
CVE-2024-21316: Windows Server Key Distribution Service Security Feature Bypass 6.1 Medium
Windows Server Key Distribution Service Security Feature Bypass
Updated 2025-06-03
CVE-2024-21315: Microsoft Defender for Endpoint Protection Elevation of Privilege Vulnerability 7.8 High
Microsoft Defender for Endpoint Protection Elevation of Privilege Vulnerability
Updated 2026-08-10
CVE-2024-21314: Microsoft Message Queuing Information Disclosure Vulnerability 6.5 Medium
Microsoft Message Queuing Information Disclosure Vulnerability
Updated 2025-05-03
CVE-2024-21313: Windows TCP/IP Information Disclosure Vulnerability 5.3 Medium
Windows TCP/IP Information Disclosure Vulnerability
Updated 2025-06-03
CVE-2024-21312: .NET Framework Denial of Service Vulnerability 7.5 High
.NET Framework Denial of Service Vulnerability
Updated 2025-05-03
CVE-2024-21311: Windows Cryptographic Services Information Disclosure Vulnerability 5.5 Medium
Windows Cryptographic Services Information Disclosure Vulnerability
Updated 2025-05-09
CVE-2024-21310: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability 7.8 High
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Updated 2025-05-03
CVE-2024-21309: Windows Kernel-Mode Driver Elevation of Privilege Vulnerability 7.8 High
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Updated 2025-06-17
CVE-2024-21308: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability 8.8 High
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
Updated 2025-12-09
CVE-2024-21307: Remote Desktop Client Remote Code Execution Vulnerability 7.5 High
Remote Desktop Client Remote Code Execution Vulnerability
Updated 2025-06-17
CVE-2024-21306: Microsoft Bluetooth Driver Spoofing Vulnerability 5.7 Medium
Microsoft Bluetooth Driver Spoofing Vulnerability
Updated 2025-05-03
CVE-2024-21305: Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability 4.4 Medium
Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability
Updated 2025-06-03
CVE-2024-21304: Trusted Compute Base Elevation of Privilege Vulnerability 4.1 Medium
Trusted Compute Base Elevation of Privilege Vulnerability
Updated 2026-08-10
CVE-2024-21303: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability 8.8 High
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
Updated 2025-12-09
CVE-2024-21302: Windows Secure Kernel Mode Elevation of Privilege Vulnerability 6.7 Medium
Summary: As of July 8, 2025 Microsoft has completed mitigations to address this vulnerability. See KB5042562: Guidance for blocking rollback of virtualization-based security related updates and the Recommended Actions section of this CVE for guidance on how to protect your systems from this vulnerability. An elevation of privilege vulnerability exists in Windows based systems supporting Virtualiza
Updated 2025-07-10
CVE-2024-21287: Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: Software Development Kit, Process Extension). The supported version that is affected is 7.5 High
Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: Software Development Kit, Process Extension). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM Framework. Successful attacks of this vulnerability can result in unauthorized access
Updated 2025-10-21
CVE-2024-21286: Vulnerability in the PeopleSoft Enterprise ELM Enterprise Learning Management product of Oracle PeopleSoft (component: Enterprise Learning Management). The supported version that 5.4 Medium
Vulnerability in the PeopleSoft Enterprise ELM Enterprise Learning Management product of Oracle PeopleSoft (component: Enterprise Learning Management). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise ELM Enterprise Learning Management. Successful attacks require human
Updated 2025-02-10
CVE-2024-21285: Vulnerability in the Oracle Banking Liquidity Management product of Oracle Financial Services Applications (component: Reports). The supported version that is affected is 14.5.0. 7.1 High
Vulnerability in the Oracle Banking Liquidity Management product of Oracle Financial Services Applications (component: Reports). The supported version that is affected is 14.5.0.12.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Liquidity Management. Successful attacks require human interaction from a person other th
Updated 2024-10-15
CVE-2024-21284: Vulnerability in the Oracle Banking Liquidity Management product of Oracle Financial Services Applications (component: Reports). The supported version that is affected is 14.5.0. 7.1 High
Vulnerability in the Oracle Banking Liquidity Management product of Oracle Financial Services Applications (component: Reports). The supported version that is affected is 14.5.0.12.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Liquidity Management. Successful attacks require human interaction from a person other th
Updated 2024-10-15
CVE-2024-21283: Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Core product of Oracle PeopleSoft (component: Global Payroll for Core). Supported versions that are affected are 9.2. 8.1 High
Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Core product of Oracle PeopleSoft (component: Global Payroll for Core). Supported versions that are affected are 9.2.48-9.2.50. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM Global Payroll Core. Successful attacks of this vulnerability can result in
Updated 2024-10-15
CVE-2024-21282: Vulnerability in the Oracle Financials product of Oracle E-Business Suite (component: Common Components). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitab 8.1 High
Vulnerability in the Oracle Financials product of Oracle E-Business Suite (component: Common Components). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financials. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification acces
Updated 2024-10-15
CVE-2024-21281: Vulnerability in the Oracle Banking Liquidity Management product of Oracle Financial Services Applications (component: Infrastructure). The supported version that is affected is 5.3 Medium
Vulnerability in the Oracle Banking Liquidity Management product of Oracle Financial Services Applications (component: Infrastructure). The supported version that is affected is 14.7.0.6.0. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Banking Liquidity Management. Successful attacks require human interaction from a person o
Updated 2025-02-10
CVE-2024-21280: Vulnerability in the Oracle Service Contracts product of Oracle E-Business Suite (component: Authoring). Supported versions that are affected are 12.2.5-12.2.13. Easily exploitabl 8.1 High
Vulnerability in the Oracle Service Contracts product of Oracle E-Business Suite (component: Authoring). Supported versions that are affected are 12.2.5-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Service Contracts. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification
Updated 2024-10-15

Search a CVE ID or check dependency files →