CVE-2024-43xxx records

Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.

880 records · Page 4 of 9

• CVE-2024-43690: Inclusion of Functionality from Untrusted Control Sphere(CWE-829) in the Command Centre Server and Workstations may allow an attacker to perform Remote Code Execution (RCE). 8.0 High

  Inclusion of Functionality from Untrusted Control Sphere(CWE-829) in the Command Centre Server and Workstations may allow an attacker to perform Remote Code Execution (RCE). This issue affects: Command Centre Server and Command Centre Workstations 9.10 prior to vEL9.10.1530 (MR2), 9.00 prior to vEL9.00.2168 (MR4), 8.90 prior to vEL8.90.2155 (MR5), 8.80 prior to vEL8.80.1938 (MR6), all versions of

  Updated 2024-09-11
• CVE-2024-43689: Stack-based buffer overflow vulnerability exists in ELECOM wireless access points. By processing a specially crafted HTTP request, arbitrary code may be executed. 8.8 High

  Stack-based buffer overflow vulnerability exists in ELECOM wireless access points. By processing a specially crafted HTTP request, arbitrary code may be executed.

  Updated 2025-09-04
• CVE-2024-43688: cron/entry.c in vixie cron before 9cc8ab1, as used in OpenBSD 7.4 and 7.5, allows a heap-based buffer underflow and memory corruption. NOTE: this issue was introduced during a May 7.3 High

  cron/entry.c in vixie cron before 9cc8ab1, as used in OpenBSD 7.4 and 7.5, allows a heap-based buffer underflow and memory corruption. NOTE: this issue was introduced during a May 2023 refactoring.

  Updated 2024-08-26
• CVE-2024-43687: XSS vulnerability in bannerconfig endpoint in TimeProvider 4100 7.7 High

  Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip TimeProvider 4100 (banner config modules) allows Cross-Site Scripting (XSS).This issue affects TimeProvider 4100: from 1.0 before 2.4.7.

  Updated 2025-05-23
• CVE-2024-43686: Reflected XSS in TimeProvider 4100 chart component 5.4 Medium

  Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip TimeProvider 4100 (data plot modules) allows Reflected XSS.This issue affects TimeProvider 4100: from 1.0 before 2.4.7.

  Updated 2024-10-07
• CVE-2024-43685: Session token fixation in TimeProvider 4100 8.7 High

  Improper Authentication vulnerability in Microchip TimeProvider 4100 (login modules) allows Session Hijacking.This issue affects TimeProvider 4100: from 1.0 before 2.4.7.

  Updated 2025-08-29
• CVE-2024-43684: Cross-Site Request Forgery vulnerability in TimeProvider 4100 8.7 High

  Cross-Site Request Forgery (CSRF) vulnerability in Microchip TimeProvider 4100 allows Cross Site Request Forgery, Cross-Site Scripting (XSS).This issue affects TimeProvider 4100: from 1.0.

  Updated 2025-08-29
• CVE-2024-43683: Improper verification of the Host header in TimeProvider 4100 8.7 High

  URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Microchip TimeProvider 4100 allows XSS Through HTTP Headers.This issue affects TimeProvider 4100: from 1.0.

  Updated 2024-11-01
• CVE-2024-43663: Buffer overflow vulnerabilities in CGI scripts lead to segfault 5.3 Medium

  There are many buffer overflow vulnerabilities present in several CGI binaries of the charging station.This issue affects Iocharger firmware for AC model chargers beforeversion 24120701. Likelihood: High – Given the prevalence of these buffer overflows, and the clear error message of the web server, an attacker is very likely to be able to find these vulnerabilities. Impact: Low – Usually, overf

  Updated 2025-03-11
• CVE-2024-43662: Authenticated arbitrary file upload to /tmp/ and /tmp/upload/ 5.3 Medium

  The <redacted>.exe or <redacted>.exe CGI binary can be used to upload arbitrary files to /tmp/upload/ or /tmp/ respectively as any user, although the user interface for uploading files is only shown to the iocadmin user. This issue affects Iocharger firmware for AC models before version 24120701. Likelihood: Moderate – An attacker will need to have knowledge of this CGI binary, e.g. by finding i

  Updated 2025-03-11
• CVE-2024-43661: Buffer overflow in <redacted>.so leads to DoS of OCPP service 7.1 High

  The <redacted>.so library, which is used by <redacted>, is vulnerable to a buffer overflow in the code that handles the deletion of certificates. This buffer overflow can be triggered by providing a long file path to the <redacted> action of the <redacted>.exe CGI binary or to the <redacted>.sh CGI script. This binary or script will write this file path to <redacted>, which is then read by <redact

  Updated 2025-03-11
• CVE-2024-43660: Arbitrary file download using <redacted>.sh 7.1 High

  The CGI script <redacted>.sh can be used to download any file on the filesystem. This issue affects Iocharger firmware for AC model chargers beforeversion 24120701. Likelihood: High, but credentials required. Impact: Critical – The script can be used to download any file on the filesystem, including sensitive files such as /etc/shadow, the CGI script source code or binaries and configuration fi

  Updated 2025-03-11
• CVE-2024-43659: Plaintext default credentials in firmware 8.3 High

  After gaining access to the firmware of a charging station, a file at <redacted> can be accessed to obtain default credentials that are the same across all Iocharger AC model EV chargers. This issue affects Iocharger firmware for AC models before firmware version 25010801. The issue is addressed by requiring a mandatory password change on first login, it is still recommended to change the passw

  Updated 2025-03-11
• CVE-2024-43658: Using the <redacted> action or <redacted>.sh script, arbitrary files and directories can be deleted using directory traversal. 7.2 High

  Patch traversal, External Control of File Name or Path vulnerability in Iocharger Home allows deletion of arbitrary files This issue affects Iocharger firmware for AC model before firmware version 25010801. Likelihood: High, but requires authentication Impact: Critical – The vulnerability can be used to delete any file on the charging station, severely impacting the integrity of the charging st

  Updated 2025-03-11
• CVE-2024-43657: When uploading new firmware, a shell script inside a firmware file is executed during its processing. This can be used to craft a custom firmware file with a custom script with arbitrary code, which will then be executed on the charging station. 9.3 Critical

  Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Injection as root This issue affects Iocharger firmware for AC model chargers before version 24120701. Likelihood: High. However, the attacker will need a (low privilege) account to gain access to the action.exe CGI binary and upload the crafted firmware file, or convince a user wi

  Updated 2025-03-11
• CVE-2024-43656: A backup can be manipulated and then restored to create arbitrary files inside the <redacted> directory. A CGI script can be added to the web directory this way, allowing for full remote code execution. 9.3 Critical

  Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Injection as root This issue affects Iocharger firmware for AC model chargers before version 24120701. Likelihood: Moderate – It might be difficult for an attacker to identify the file structure of the <redated> directory, and then modify the backup to add a new CGI script in the c

  Updated 2025-03-11
• CVE-2024-43655: Any authenticated users can execute OS commands as root using the <redacted>.sh CGI script. 9.3 Critical

  Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Injection as root This issue affects Iocharger firmware for AC model chargers before version 24120701. Likelihood: Moderate – The attacker will first need to find the name of the script, and needs a (low privilege) account to gain access to the script, or convince a user with such

  Updated 2025-03-11
• CVE-2024-43654: Authenticated command injection in the <redacted> action leads to full remote code execution as root on the charging station 9.3 Critical

  Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Iocharger firmware for AC models allows OS Command Injection as root This issue affects all Iocharger AC EV charger models on a firmware version before 25010801. Likelihood: Moderate – The <redacted> binary does not seem to be used by the web interface, so it might be more difficult to find. It s

  Updated 2025-03-11
• CVE-2024-43653: Authenticated command injection in the <redacted> action leads to full remote code execution as root on the charging station 9.3 Critical

  Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability  allows OS Command Injection as root This issue affects Iocharger firmware for AC model chargers before version 24120701. Likelihood: Moderate – The <redacted> binary does not seem to be used by the web interface, so it might be more difficult to find. It seems to be largely the same binary as used b

  Updated 2025-03-11
• CVE-2024-43652: Authenticated command injection in the <redacted> action leads to full remote code execution as root on the charging station 9.3 Critical

  Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Injection as root This issue affects Iocharger firmware for AC model chargers before version 24120701 Likelihood: Moderate – The <redacted> binary does not seem to be used by the web interface, so it might be more difficult to find. It seems to be largely the same binary as used by

  Updated 2025-03-11
• CVE-2024-43651: Authenticated command injection in the <redacted> action leads to full remote code execution as root on the charging station 9.3 Critical

  Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Injection as root This issue affects Iocharger firmware for AC models before version 241207101 Likelihood: Moderate – The <redacted> binary does not seem to be used by the web interface, so it might be more difficult to find. It seems to be largely the same binary as used by the Ioc

  Updated 2025-03-11
• CVE-2024-43650: Authenticated command injection in the <redacted> action leads to full remote code execution as root on the charging station 9.3 Critical

  Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Iocharger firmware for AC models allows OS Command Injection as root This issue affects  firmware versions before 24120701. Likelihood: Moderate – The <redacted> binary does not seem to be used by the web interface, so it might be more difficult to find. It seems to be largely the same binary as

  Updated 2025-03-11
• CVE-2024-43649: Authenticated command injection via <redacted>.exe <redacted> parameter 9.3 Critical

  Authenticated command injection in the filename of a <redacted>.exe request leads to remote code execution as the root user. This issue affects Iocharger firmware for AC models before version 24120701. Likelihood: Moderate – This action is not a common place for command injection vulnerabilities to occur. Thus, an attacker will likely only be able to find this vulnerability by reverse-engineerin

  Updated 2025-03-11
• CVE-2024-43648: Authenticated command injection via <redacted>.exe <redacted> parameter 9.3 Critical

  Command injection in the <redacted> parameter of a <redacted>.exe request leads to remote code execution as the root user. This issue affects Iocharger firmware for AC models before version 24120701. Likelihood: Moderate – This action is not a common place for command injection vulnerabilities to occur. Thus, an attacker will likely only be able to find this vulnerability by reverse-engineering

  Updated 2025-03-11
• CVE-2024-43647: A vulnerability has been identified in SIMATIC S7-200 SMART CPU CR40 (6ES7288-1CR40-0AA0) (All versions), SIMATIC S7-200 SMART CPU CR60 (6ES7288-1CR60-0AA0) (All versions), SIMATIC 8.7 High

  A vulnerability has been identified in SIMATIC S7-200 SMART CPU CR40 (6ES7288-1CR40-0AA0) (All versions), SIMATIC S7-200 SMART CPU CR60 (6ES7288-1CR60-0AA0) (All versions), SIMATIC S7-200 SMART CPU SR20 (6ES7288-1SR20-0AA0) (All versions), SIMATIC S7-200 SMART CPU SR20 (6ES7288-1SR20-0AA1) (All versions), SIMATIC S7-200 SMART CPU SR30 (6ES7288-1SR30-0AA0) (All versions), SIMATIC S7-200 SMART CPU S

  Updated 2024-09-10
• CVE-2024-43646: Windows Secure Kernel Mode Elevation of Privilege Vulnerability 6.7 Medium

  Windows Secure Kernel Mode Elevation of Privilege Vulnerability

  Updated 2025-07-08
• CVE-2024-43645: Windows Defender Application Control (WDAC) Security Feature Bypass Vulnerability 6.7 Medium

  Windows Defender Application Control (WDAC) Security Feature Bypass Vulnerability

  Updated 2025-07-08
• CVE-2024-43644: Windows Client-Side Caching Elevation of Privilege Vulnerability 7.8 High

  Windows Client-Side Caching Elevation of Privilege Vulnerability

  Updated 2025-07-08
• CVE-2024-43643: Windows USB Video Class System Driver Elevation of Privilege Vulnerability 6.8 Medium

  Windows USB Video Class System Driver Elevation of Privilege Vulnerability

  Updated 2025-07-08
• CVE-2024-43642: Windows SMB Denial of Service Vulnerability 7.5 High

  Windows SMB Denial of Service Vulnerability

  Updated 2025-07-08
• CVE-2024-43641: Windows Registry Elevation of Privilege Vulnerability 7.8 High

  Windows Registry Elevation of Privilege Vulnerability

  Updated 2025-07-08
• CVE-2024-43640: Windows Kernel-Mode Driver Elevation of Privilege Vulnerability 7.8 High

  Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

  Updated 2025-07-08
• CVE-2024-43639: Windows KDC Proxy Remote Code Execution Vulnerability 9.8 Critical

  Windows KDC Proxy Remote Code Execution Vulnerability

  Updated 2025-07-08
• CVE-2024-43638: Windows USB Video Class System Driver Elevation of Privilege Vulnerability 6.8 Medium

  Windows USB Video Class System Driver Elevation of Privilege Vulnerability

  Updated 2025-07-08
• CVE-2024-43637: Windows USB Video Class System Driver Elevation of Privilege Vulnerability 6.8 Medium

  Windows USB Video Class System Driver Elevation of Privilege Vulnerability

  Updated 2025-07-08
• CVE-2024-43636: Win32k Elevation of Privilege Vulnerability 7.8 High

  Win32k Elevation of Privilege Vulnerability

  Updated 2025-07-08
• CVE-2024-43635: Windows Telephony Service Remote Code Execution Vulnerability 8.8 High

  Windows Telephony Service Remote Code Execution Vulnerability

  Updated 2025-07-08
• CVE-2024-43634: Windows USB Video Class System Driver Elevation of Privilege Vulnerability 6.8 Medium

  Windows USB Video Class System Driver Elevation of Privilege Vulnerability

  Updated 2025-07-08
• CVE-2024-43633: Windows Hyper-V Denial of Service Vulnerability 6.5 Medium

  Windows Hyper-V Denial of Service Vulnerability

  Updated 2025-07-08
• CVE-2024-43631: Windows Secure Kernel Mode Elevation of Privilege Vulnerability 6.7 Medium

  Windows Secure Kernel Mode Elevation of Privilege Vulnerability

  Updated 2025-07-08
• CVE-2024-43630: Windows Kernel Elevation of Privilege Vulnerability 7.8 High

  Windows Kernel Elevation of Privilege Vulnerability

  Updated 2025-07-08
• CVE-2024-43629: Windows DWM Core Library Elevation of Privilege Vulnerability 7.8 High

  Windows DWM Core Library Elevation of Privilege Vulnerability

  Updated 2025-07-08
• CVE-2024-43628: Windows Telephony Service Remote Code Execution Vulnerability 8.8 High

  Windows Telephony Service Remote Code Execution Vulnerability

  Updated 2025-07-08
• CVE-2024-43627: Windows Telephony Service Remote Code Execution Vulnerability 8.8 High

  Windows Telephony Service Remote Code Execution Vulnerability

  Updated 2025-07-08
• CVE-2024-43626: Windows Telephony Service Elevation of Privilege Vulnerability 7.8 High

  Windows Telephony Service Elevation of Privilege Vulnerability

  Updated 2025-07-08
• CVE-2024-43625: Microsoft Windows VMSwitch Elevation of Privilege Vulnerability 8.1 High

  Microsoft Windows VMSwitch Elevation of Privilege Vulnerability

  Updated 2025-07-08
• CVE-2024-43624: Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability 8.8 High

  Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability

  Updated 2025-07-08
• CVE-2024-43623: Windows NT OS Kernel Elevation of Privilege Vulnerability 7.8 High

  Windows NT OS Kernel Elevation of Privilege Vulnerability

  Updated 2025-07-08
• CVE-2024-43622: Windows Telephony Service Remote Code Execution Vulnerability 8.8 High

  Windows Telephony Service Remote Code Execution Vulnerability

  Updated 2025-07-08
• CVE-2024-43621: Windows Telephony Service Remote Code Execution Vulnerability 8.8 High

  Windows Telephony Service Remote Code Execution Vulnerability

  Updated 2025-07-08
• CVE-2024-43620: Windows Telephony Service Remote Code Execution Vulnerability 8.8 High

  Windows Telephony Service Remote Code Execution Vulnerability

  Updated 2025-07-08
• CVE-2024-43616: Microsoft Office Remote Code Execution Vulnerability 7.8 High

  Microsoft Office Remote Code Execution Vulnerability

  Updated 2026-08-19
• CVE-2024-43615: Microsoft OpenSSH for Windows Remote Code Execution Vulnerability 7.1 High

  Microsoft OpenSSH for Windows Remote Code Execution Vulnerability

  Updated 2026-08-19
• CVE-2024-43614: Microsoft Defender for Endpoint for Linux Spoofing Vulnerability 5.5 Medium

  Relative path traversal in Microsoft Defender for Endpoint allows an authorized attacker to perform spoofing locally.

  Updated 2026-08-19
• CVE-2024-43613: Azure Database for PostgreSQL Flexible Server Extension Elevation of Privilege Vulnerability 7.2 High

  Azure Database for PostgreSQL Flexible Server Extension Elevation of Privilege Vulnerability

  Updated 2025-07-08
• CVE-2024-43612: Power BI Report Server Spoofing Vulnerability 6.9 Medium

  Power BI Report Server Spoofing Vulnerability

  Updated 2026-08-19
• CVE-2024-43611: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability 8.8 High

  Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  Updated 2026-08-19
• CVE-2024-43610: Copilot Studio Information Disclosure Vulnerability 7.4 High

  Exposure of Sensitive Information to an Unauthorized Actor in Copilot Studio allows a unauthenticated attacker to view sensitive information through network attack vector

  Updated 2026-08-19
• CVE-2024-43609: Microsoft Office Spoofing Vulnerability 6.5 Medium

  Microsoft Office Spoofing Vulnerability

  Updated 2026-08-19
• CVE-2024-43608: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability 8.8 High

  Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  Updated 2026-08-19
• CVE-2024-43607: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability 8.8 High

  Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  Updated 2026-08-19
• CVE-2024-43604: Outlook for Android Elevation of Privilege Vulnerability 5.7 Medium

  Outlook for Android Elevation of Privilege Vulnerability

  Updated 2026-08-19
• CVE-2024-43603: Visual Studio Collector Service Denial of Service Vulnerability 5.5 Medium

  Visual Studio Collector Service Denial of Service Vulnerability

  Updated 2026-08-19
• CVE-2024-43602: Azure CycleCloud Remote Code Execution Vulnerability 9.9 Critical

  Azure CycleCloud Remote Code Execution Vulnerability

  Updated 2025-07-08
• CVE-2024-43601: Visual Studio Code for Linux Remote Code Execution Vulnerability 7.8 High

  Visual Studio Code for Linux Remote Code Execution Vulnerability

  Updated 2026-08-19
• CVE-2024-43600: Microsoft Office Elevation of Privilege Vulnerability 7.8 High

  Microsoft Office Elevation of Privilege Vulnerability

  Updated 2026-06-09
• CVE-2024-43599: Remote Desktop Client Remote Code Execution Vulnerability 8.8 High

  Remote Desktop Client Remote Code Execution Vulnerability

  Updated 2026-08-19
• CVE-2024-43598: LightGBM Remote Code Execution Vulnerability 8.1 High

  LightGBM Remote Code Execution Vulnerability

  Updated 2025-07-08
• CVE-2024-43596: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability 6.5 Medium

  Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  Updated 2026-08-19
• CVE-2024-43595: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability 6.5 Medium

  Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  Updated 2026-08-19
• CVE-2024-43594: Microsoft System Center Elevation of Privilege Vulnerability 7.3 High

  Microsoft System Center Elevation of Privilege Vulnerability

  Updated 2026-06-09
• CVE-2024-43593: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability 8.8 High

  Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  Updated 2026-08-19
• CVE-2024-43592: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability 8.8 High

  Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  Updated 2026-08-19
• CVE-2024-43591: Azure Command Line Integration (CLI) Elevation of Privilege Vulnerability 8.7 High

  Azure Command Line Integration (CLI) Elevation of Privilege Vulnerability

  Updated 2026-08-19
• CVE-2024-43590: Visual C++ Redistributable Installer Elevation of Privilege Vulnerability 7.8 High

  Visual C++ Redistributable Installer Elevation of Privilege Vulnerability

  Updated 2026-08-19
• CVE-2024-43589: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability 8.8 High

  Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  Updated 2026-08-19
• CVE-2024-43587: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability 5.9 Medium

  Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  Updated 2026-08-19
• CVE-2024-43585: Code Integrity Guard Security Feature Bypass Vulnerability 5.5 Medium

  Code Integrity Guard Security Feature Bypass Vulnerability

  Updated 2026-08-19
• CVE-2024-43584: Windows Scripting Engine Security Feature Bypass Vulnerability 7.7 High

  Windows Scripting Engine Security Feature Bypass Vulnerability

  Updated 2026-08-19
• CVE-2024-43583: Winlogon Elevation of Privilege Vulnerability 7.8 High

  Winlogon Elevation of Privilege Vulnerability

  Updated 2026-08-19
• CVE-2024-43582: Remote Desktop Protocol Server Remote Code Execution Vulnerability 8.1 High

  Remote Desktop Protocol Server Remote Code Execution Vulnerability

  Updated 2026-08-19
• CVE-2024-43581: Microsoft OpenSSH for Windows Remote Code Execution Vulnerability 7.1 High

  Microsoft OpenSSH for Windows Remote Code Execution Vulnerability

  Updated 2026-08-19
• CVE-2024-43580: Microsoft Edge (Chromium-based) Spoofing Vulnerability 5.4 Medium

  Microsoft Edge (Chromium-based) Spoofing Vulnerability

  Updated 2026-08-19
• CVE-2024-43579: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability 7.6 High

  Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  Updated 2026-08-19
• CVE-2024-43578: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability 7.6 High

  Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  Updated 2026-08-19
• CVE-2024-43577: Microsoft Edge (Chromium-based) Spoofing Vulnerability 4.3 Medium

  Microsoft Edge (Chromium-based) Spoofing Vulnerability

  Updated 2026-08-19
• CVE-2024-43576: Microsoft Office Remote Code Execution Vulnerability 7.8 High

  Microsoft Office Remote Code Execution Vulnerability

  Updated 2026-08-19
• CVE-2024-43575: Windows Hyper-V Denial of Service Vulnerability 7.5 High

  Windows Hyper-V Denial of Service Vulnerability

  Updated 2026-08-19
• CVE-2024-43574: Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability 8.3 High

  Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability

  Updated 2026-08-19
• CVE-2024-43573: Windows MSHTML Platform Spoofing Vulnerability 6.5 Medium

  Windows MSHTML Platform Spoofing Vulnerability

  Updated 2026-08-19
• CVE-2024-43572: Microsoft Management Console Remote Code Execution Vulnerability 7.8 High

  Microsoft Management Console Remote Code Execution Vulnerability

  Updated 2026-08-19
• CVE-2024-43571: Sudo for Windows Spoofing Vulnerability 5.6 Medium

  Sudo for Windows Spoofing Vulnerability

  Updated 2026-08-19
• CVE-2024-43570: Windows Kernel Elevation of Privilege Vulnerability 6.4 Medium

  Windows Kernel Elevation of Privilege Vulnerability

  Updated 2026-08-19
• CVE-2024-43567: Windows Hyper-V Denial of Service Vulnerability 7.5 High

  Windows Hyper-V Denial of Service Vulnerability

  Updated 2026-08-19
• CVE-2024-43566: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability 7.5 High

  Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  Updated 2026-08-19
• CVE-2024-43565: Windows Network Address Translation (NAT) Denial of Service Vulnerability 7.5 High

  Windows Network Address Translation (NAT) Denial of Service Vulnerability

  Updated 2026-08-19
• CVE-2024-43564: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability 8.8 High

  Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  Updated 2026-08-19
• CVE-2024-43563: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability 7.8 High

  Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

  Updated 2026-08-19
• CVE-2024-43562: Windows Network Address Translation (NAT) Denial of Service Vulnerability 7.5 High

  Windows Network Address Translation (NAT) Denial of Service Vulnerability

  Updated 2026-08-19
• CVE-2024-43561: Windows Mobile Broadband Driver Denial of Service Vulnerability 6.5 Medium

  Windows Mobile Broadband Driver Denial of Service Vulnerability

  Updated 2026-08-19

Search a CVE ID or check dependency files →