CVE-2024-38xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
842 records · Page 7 of 9
An improper restriction of operations within the bounds of a memory buffer in the parameter type parser of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated attacker with administrator privileges to cause potential memory corruptions, resulting in a thread crash on an affected device.
Updated- CVE-2024-38265: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability 8.8 High
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Updated Microsoft Virtual Hard Disk (VHDX) Denial of Service Vulnerability
Updated- CVE-2024-38263: Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability 7.5 High
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
Updated - CVE-2024-38262: Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability 7.5 High
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
Updated - CVE-2024-38261: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability 7.8 High
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Updated - CVE-2024-38260: Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability 8.8 High
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
Updated Microsoft Management Console Remote Code Execution Vulnerability
Updated- CVE-2024-38258: Windows Remote Desktop Licensing Service Information Disclosure Vulnerability 6.5 Medium
Windows Remote Desktop Licensing Service Information Disclosure Vulnerability
Updated Microsoft AllJoyn API Information Disclosure Vulnerability
UpdatedWindows Kernel-Mode Driver Information Disclosure Vulnerability
UpdatedSQL Server Native Client Remote Code Execution Vulnerability
UpdatedWindows Authentication Information Disclosure Vulnerability
UpdatedWindows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
UpdatedWindows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
UpdatedWindows Graphics Component Elevation of Privilege Vulnerability
UpdatedWindows Graphics Component Elevation of Privilege Vulnerability
UpdatedWindows Storage Elevation of Privilege Vulnerability
UpdatedWindows Graphics Component Elevation of Privilege Vulnerability
UpdatedWin32k Elevation of Privilege Vulnerability
UpdatedKernel Streaming Service Driver Elevation of Privilege Vulnerability
UpdatedKernel Streaming Service Driver Elevation of Privilege Vulnerability
UpdatedKernel Streaming Service Driver Elevation of Privilege Vulnerability
UpdatedKernel Streaming Service Driver Elevation of Privilege Vulnerability
UpdatedKernel Streaming Service Driver Elevation of Privilege Vulnerability
Updated- CVE-2024-38240: Windows Remote Access Connection Manager Elevation of Privilege Vulnerability 8.1 High
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Updated Windows Kerberos Elevation of Privilege Vulnerability
UpdatedKernel Streaming Service Driver Elevation of Privilege Vulnerability
Updated- CVE-2024-38237: Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability 7.8 High
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Updated DHCP Server Service Denial of Service Vulnerability
UpdatedWindows Hyper-V Denial of Service Vulnerability
UpdatedWindows Networking Denial of Service Vulnerability
UpdatedWindows Networking Denial of Service Vulnerability
UpdatedWindows Networking Denial of Service Vulnerability
UpdatedWindows Remote Desktop Licensing Service Denial of Service Vulnerability
Updated- CVE-2024-38230: Windows Standards-Based Storage Management Service Denial of Service Vulnerability 6.5 Medium
Windows Standards-Based Storage Management Service Denial of Service Vulnerability
Updated .NET and Visual Studio Remote Code Execution Vulnerability
UpdatedMicrosoft SharePoint Server Remote Code Execution Vulnerability
UpdatedMicrosoft SharePoint Server Remote Code Execution Vulnerability
UpdatedMicrosoft Publisher Security Feature Bypass Vulnerability
Updated- CVE-2024-38225: Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability 8.8 High
Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
Updated - CVE-2024-38223: Windows Initial Machine Configuration Elevation of Privilege Vulnerability 6.8 Medium
Windows Initial Machine Configuration Elevation of Privilege Vulnerability
Updated Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
UpdatedMicrosoft Edge (Chromium-based) Spoofing Vulnerability
UpdatedAzure Stack Hub Elevation of Privilege Vulnerability
UpdatedMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability
UpdatedMicrosoft Edge (HTML-based) Memory Corruption Vulnerability
UpdatedWindows Mark of the Web Security Feature Bypass Vulnerability
UpdatedAzure Stack Hub Elevation of Privilege Vulnerability
Updated- CVE-2024-38215: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability 7.8 High
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Updated Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
UpdatedWindows Mark of the Web Security Feature Bypass Vulnerability
Updated- CVE-2024-38212: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability 8.8 High
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Updated Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
UpdatedMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability
UpdatedMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability
UpdatedMicrosoft Edge for Android Spoofing Vulnerability
UpdatedMicrosoft Edge (HTML-based) Memory Corruption Vulnerability
UpdatedAn authenticated attacker can bypass Server-Side Request Forgery (SSRF) protection in Microsoft Copilot Studio to leak sensitive information over a network.
UpdatedImproper access control in Imagine Cup allows an authorized attacker to elevate privileges over a network.
UpdatedWindows Package Library Manager Information Disclosure Vulnerability
UpdatedSummary Microsoft was notified that an elevation of privilege vulnerability exists in Windows Update, potentially enabling an attacker with basic user privileges to reintroduce previously mitigated vulnerabilities or circumvent some features of Virtualization Based Security (VBS). However, an attacker attempting to exploit this vulnerability requires additional interaction by a privileged user to
UpdatedAzure Stack Hub Elevation of Privilege Vulnerability
UpdatedMicrosoft Office Spoofing Vulnerability
Updated- CVE-2024-38199: Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability 9.8 Critical
Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability
Updated Windows Print Spooler Elevation of Privilege Vulnerability
UpdatedMicrosoft Teams for iOS Spoofing Vulnerability
UpdatedWindows Common Log File System Driver Elevation of Privilege Vulnerability
UpdatedAzure CycleCloud Remote Code Execution Vulnerability
UpdatedAn authenticated attacker can exploit an improper authorization vulnerability in Azure Web Apps to elevate privileges over a network.
Updated- CVE-2024-38193: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability 7.8 High
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Updated Kernel Streaming Service Driver Elevation of Privilege Vulnerability
UpdatedMissing authorization in Power Platform allows an unauthenticated attacker to view sensitive information through a network attack vector.
UpdatedMicrosoft Project Remote Code Execution Vulnerability
UpdatedAzure Network Watcher VM Agent Elevation of Privilege Vulnerability
UpdatedWindows Kernel-Mode Driver Elevation of Privilege Vulnerability
UpdatedWindows Kernel-Mode Driver Elevation of Privilege Vulnerability
UpdatedWindows Kernel-Mode Driver Elevation of Privilege Vulnerability
UpdatedWindows Kernel-Mode Driver Elevation of Privilege Vulnerability
UpdatedAn improper access control vulnerability in GroupMe allows an a unauthenticated attacker to elevate privileges over a network.
UpdatedWeak authentication in Microsoft Dynamics 365 allows an unauthenticated attacker to elevate privileges over a network.
UpdatedWindows SmartScreen Security Feature Bypass Vulnerability
Updated- CVE-2024-38179: Azure Stack Hyperconverged Infrastructure (HCI) Elevation of Privilege Vulnerability 8.8 High
Azure Stack Hyperconverged Infrastructure (HCI) Elevation of Privilege Vulnerability
Updated Scripting Engine Memory Corruption Vulnerability
UpdatedWindows App Installer Spoofing Vulnerability
UpdatedAn improper restriction of excessive authentication attempts in GroupMe allows a unauthenticated attacker to elevate privileges over a network.
Updated- CVE-2024-38175: Azure Managed Instance for Apache Cassandra Elevation of Privilege Vulnerability 9.6 Critical
An improper access control vulnerability in the Azure Managed Instance for Apache Cassandra allows an authenticated attacker to elevate privileges over a network.
Updated Microsoft Outlook Remote Code Execution Vulnerability
UpdatedMicrosoft Excel Remote Code Execution Vulnerability
UpdatedMicrosoft PowerPoint Remote Code Execution Vulnerability
UpdatedMicrosoft Excel Remote Code Execution Vulnerability
UpdatedMicrosoft Office Visio Remote Code Execution Vulnerability
Updated.NET and Visual Studio Denial of Service Vulnerability
Updated.NET and Visual Studio Information Disclosure Vulnerability
UpdatedAn unauthenticated attacker can exploit improper neutralization of input during web page generation in Microsoft Dynamics 365 to spoof over a network by tricking a user to click on a link.
UpdatedWindows Compressed Folder Tampering Vulnerability
UpdatedAn improper access control vulnerability in GroupMe allows an a unauthenticated attacker to elevate privileges over a network by convincing a user to click on a malicious link.
UpdatedWindows Update Stack Elevation of Privilege Vulnerability
UpdatedAzure Connected Machine Agent Elevation of Privilege Vulnerability
UpdatedWindows Mobile Broadband Driver Remote Code Execution Vulnerability
Updated