2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-43620 | HIGH | 8.8 | 1.5% | Nov 12, 2024 | Windows Telephony Service Remote Code Execution Vulnerability |
| CVE-2024-43602 | CRITICAL | 9.9 | 2.2% | Nov 12, 2024 | Azure CycleCloud Remote Code Execution Vulnerability |
| CVE-2024-43598 | HIGH | 8.1 | 1.4% | Nov 12, 2024 | LightGBM Remote Code Execution Vulnerability |
| CVE-2024-43530 | HIGH | 7.8 | 0.5% | Nov 12, 2024 | Windows Update Stack Elevation of Privilege Vulnerability |
| CVE-2024-43499 | HIGH | 7.5 | 2.6% | Nov 12, 2024 | .NET and Visual Studio Denial of Service Vulnerability |
| CVE-2024-43498 | CRITICAL | 9.8 | 3.5% | Nov 12, 2024 | .NET and Visual Studio Remote Code Execution Vulnerability |
| CVE-2024-43462 | HIGH | 8.8 | 1.6% | Nov 12, 2024 | SQL Server Native Client Remote Code Execution Vulnerability |
| CVE-2024-43459 | HIGH | 8.8 | 1.6% | Nov 12, 2024 | SQL Server Native Client Remote Code Execution Vulnerability |
| CVE-2024-43452 | HIGH | 7.5 | 24.3% | Nov 12, 2024 | Windows Registry Elevation of Privilege Vulnerability |
| CVE-2024-43451 | MEDIUM | 6.5 | 81.8% | Nov 12, 2024 | NTLM Hash Disclosure Spoofing Vulnerability |
| CVE-2024-43450 | HIGH | 7.5 | 0.6% | Nov 12, 2024 | Windows DNS Spoofing Vulnerability |
| CVE-2024-43449 | MEDIUM | 6.8 | 0.7% | Nov 12, 2024 | Windows USB Video Class System Driver Elevation of Privilege Vulnerability |
| CVE-2024-43447 | HIGH | 8.1 | 1.4% | Nov 12, 2024 | Windows SMBv3 Server Remote Code Execution Vulnerability |
| CVE-2024-38264 | MEDIUM | 5.9 | 1.3% | Nov 12, 2024 | Microsoft Virtual Hard Disk (VHDX) Denial of Service Vulnerability |
| CVE-2024-38255 | HIGH | 8.8 | 1.6% | Nov 12, 2024 | SQL Server Native Client Remote Code Execution Vulnerability |
| CVE-2024-38203 | MEDIUM | 5.5 | 0.7% | Nov 12, 2024 | Windows Package Library Manager Information Disclosure Vulnerability |
| CVE-2024-21976 | HIGH | 8.8 | 0.3% | Nov 12, 2024 | Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially le... |
| CVE-2024-21975 | HIGH | 7.8 | 0.3% | Nov 12, 2024 | Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially le... |
| CVE-2024-21974 | HIGH | 7.8 | 0.3% | Nov 12, 2024 | Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially le... |
| CVE-2024-21958 | HIGH | 7.3 | 0.3% | Nov 12, 2024 | Incorrect default permissions in the AMD Provisioning Console installation directory could allow an attacker to achieve ... |
| CVE-2024-21957 | HIGH | 7.3 | 0.3% | Nov 12, 2024 | Incorrect default permissions in the AMD Management Console installation directory could allow an attacker to achieve pr... |
| CVE-2024-21949 | MEDIUM | 5.5 | 0.2% | Nov 12, 2024 | Improper validation of user input in the NPU driver could allow an attacker to provide a buffer with unexpected size, po... |
| CVE-2024-21946 | HIGH | 7.3 | 0.2% | Nov 12, 2024 | Incorrect default permissions in the AMD RyzenTM Master Utility installation directory could allow an attacker to achiev... |
| CVE-2024-21945 | HIGH | 7.3 | 0.2% | Nov 12, 2024 | Incorrect default permissions in the AMD RyzenTM Master monitoring SDK installation directory could allow an attacker to... |
| CVE-2024-21939 | HIGH | 7.3 | 0.2% | Nov 12, 2024 | Incorrect default permissions in the AMD Cloud Manageability Service (ACMS) Software installation directory could allow ... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now