Cyber Files

5 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-49392 MEDIUM This Month

Stored cross-site scripting (XSS) vulnerability on enrollment invitation page. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Microsoft Cyber Files

NVD

CVSS 3.1

4.8

EPSS

0.2%

CVE-2024-49391 HIGH This Week

Local privilege escalation due to DLL hijacking vulnerability. Rated high severity (CVSS 7.3), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Cyber Files

NVD

CVSS 3.1

7.3

EPSS

0.1%

CVE-2024-49390 HIGH This Week

Local privilege escalation due to DLL hijacking vulnerability. Rated high severity (CVSS 7.3), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Cyber Files

NVD

CVSS 3.1

7.3

EPSS

0.2%

CVE-2024-49389 HIGH This Week

Local privilege escalation due to insecure folder permissions. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Cyber Files

NVD

CVSS 3.1

7.8

EPSS

0.1%

CVE-2024-49386 MEDIUM This Month

Sensitive information disclosure due to spell-jacking. Rated medium severity (CVSS 5.7), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft Cyber Files

NVD

CVSS 3.1

5.7

EPSS

0.2%

CVE-2024-49392

EPSS 0% CVSS 4.8

MEDIUM This Month

XSS Microsoft Cyber Files

NVD

CVE-2024-49391

EPSS 0% CVSS 7.3

HIGH This Week

Local privilege escalation due to DLL hijacking vulnerability. Rated high severity (CVSS 7.3), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Cyber Files

NVD

CVE-2024-49390

EPSS 0% CVSS 7.3

HIGH This Week

Local privilege escalation due to DLL hijacking vulnerability. Rated high severity (CVSS 7.3), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Cyber Files

NVD

CVE-2024-49389

EPSS 0% CVSS 7.8

HIGH This Week

Local privilege escalation due to insecure folder permissions. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Cyber Files

NVD

CVE-2024-49386

EPSS 0% CVSS 5.7

MEDIUM This Month

Sensitive information disclosure due to spell-jacking. Rated medium severity (CVSS 5.7), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft Cyber Files

NVD