Microsoft

20658 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-28919 Apr 09, 17:15 MEDIUM This Month

Secure Boot Security Feature Bypass Vulnerability. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +10

NVD

CVSS 3.1

6.7

EPSS

0.6%

CVE-2024-28917 Apr 09, 17:15 MEDIUM This Month

Azure Arc-enabled Kubernetes Extension Cluster-Scope Elevation of Privilege Vulnerability. Rated medium severity (CVSS 6.2), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Kubernetes Microsoft Azure Arc Extension Microsoft Azstackhci Operator Azure Arc Extension Microsoft Azure Hybridnetwork +5

NVD

CVSS 3.1

6.2

EPSS

0.9%

CVE-2024-28915 Apr 09, 17:15 HIGH This Week

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow Microsoft Sql Server 2019 +2

NVD

CVSS 3.1

8.8

EPSS

2.2%

CVE-2024-28914 Apr 09, 17:15 HIGH This Week

RCE Buffer Overflow Heap Overflow Microsoft Sql Server 2019 +2

NVD

CVSS 3.1

8.8

EPSS

2.4%

CVE-2024-28913 Apr 09, 17:15 HIGH This Week

RCE Buffer Overflow Heap Overflow Microsoft Sql Server 2019 +2

NVD

CVSS 3.1

8.8

EPSS

2.3%

CVE-2024-28912 Apr 09, 17:15 HIGH This Week

RCE Buffer Overflow Heap Overflow Microsoft Sql Server 2019 +2

NVD

CVSS 3.1

8.8

EPSS

2.3%

CVE-2024-28911 Apr 09, 17:15 HIGH This Week

RCE Buffer Overflow Heap Overflow Microsoft Sql Server 2019 +2

NVD

CVSS 3.1

8.8

EPSS

2.2%

CVE-2024-28910 Apr 09, 17:15 HIGH This Week

RCE Buffer Overflow Heap Overflow Microsoft Sql Server 2019 +2

NVD

CVSS 3.1

8.8

EPSS

2.8%

CVE-2024-28909 Apr 09, 17:15 HIGH This Week

RCE Buffer Overflow Heap Overflow Microsoft Sql Server 2019 +2

NVD

CVSS 3.1

8.8

EPSS

2.4%

CVE-2024-28908 Apr 09, 17:15 HIGH This Week

RCE Buffer Overflow Heap Overflow Microsoft Sql Server 2019 +2

NVD

CVSS 3.1

8.8

EPSS

2.4%

CVE-2024-28907 Apr 09, 17:15 HIGH This Week

Microsoft Brokering File System Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8). No vendor patch available.

Information Disclosure Microsoft Windows Server 2022 23h2

NVD

CVSS 3.1

7.8

EPSS

0.6%

CVE-2024-28906 Apr 09, 17:15 HIGH This Week

RCE Buffer Overflow Heap Overflow Microsoft Sql Server 2019 +2

NVD

CVSS 3.1

8.8

EPSS

2.4%

CVE-2024-28905 Apr 09, 17:15 HIGH This Week

Microsoft Brokering File System Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8). No vendor patch available.

Privilege Escalation Microsoft Windows Server 2022 23h2

NVD

CVSS 3.1

7.8

EPSS

0.5%

CVE-2024-28904 Apr 09, 17:15 HIGH This Week

Microsoft Brokering File System Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8). No vendor patch available.

Privilege Escalation Microsoft Windows Server 2022 23h2

NVD

CVSS 3.1

7.8

EPSS

0.5%

CVE-2024-28903 Apr 09, 17:15 MEDIUM This Month

Secure Boot Security Feature Bypass Vulnerability. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +10

NVD

CVSS 3.1

6.7

EPSS

0.7%

CVE-2024-28902 Apr 09, 17:15 MEDIUM This Month

Windows Remote Access Connection Manager Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Microsoft Windows 10 1507 Windows 10 1607 +11

NVD

CVSS 3.1

5.5

EPSS

0.8%

CVE-2024-28901 Apr 09, 17:15 MEDIUM This Month

Windows Remote Access Connection Manager Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Microsoft Windows 10 1507 Windows 10 1607 +11

NVD

CVSS 3.1

5.5

EPSS

0.7%

CVE-2024-28900 Apr 09, 17:15 MEDIUM This Month

Windows Remote Access Connection Manager Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Microsoft Windows 10 1507 Windows 10 1607 +11

NVD

CVSS 3.1

5.5

EPSS

0.7%

CVE-2024-28898 Apr 09, 17:15 MEDIUM This Month

Secure Boot Security Feature Bypass Vulnerability. Rated medium severity (CVSS 6.3). No vendor patch available.

Buffer Overflow Microsoft Stack Overflow Windows 10 1507 Windows 10 1607 +11

NVD

CVSS 3.1

6.3

EPSS

0.8%

CVE-2024-28897 Apr 09, 17:15 MEDIUM This Month

Secure Boot Security Feature Bypass Vulnerability. Rated medium severity (CVSS 6.8), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +10

NVD

CVSS 3.1

6.8

EPSS

0.9%

CVE-2024-28896 Apr 09, 17:15 HIGH This Week

Secure Boot Security Feature Bypass Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is no authentication required. No vendor patch available.

Buffer Overflow Heap Overflow Microsoft Windows 10 1507 Windows 10 1607 +11

NVD

CVSS 3.1

7.5

EPSS

1.0%

CVE-2024-26257 Apr 09, 17:15 HIGH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Long Term Servicing Channel

NVD

CVSS 3.1

7.8

EPSS

0.5%

CVE-2024-26255 Apr 09, 17:15 MEDIUM This Month

Windows Remote Access Connection Manager Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Microsoft Windows 10 1809 Windows 10 21h2 +7

NVD

CVSS 3.1

5.5

EPSS

0.8%

CVE-2024-26254 Apr 09, 17:15 HIGH This Week

Microsoft Virtual Machine Bus (VMBus) Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Microsoft Windows 10 1809 Windows 10 21h2 Windows 10 22h2 +6

NVD

CVSS 3.1

7.5

EPSS

3.1%

CVE-2024-26253 Apr 09, 17:15 MEDIUM This Month

Windows rndismp6.sys Remote Code Execution Vulnerability. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +11

NVD

CVSS 3.1

6.8

EPSS

0.7%

CVE-2024-26252 Apr 09, 17:15 MEDIUM This Month

Windows rndismp6.sys Remote Code Execution Vulnerability. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +11

NVD

CVSS 3.1

6.8

EPSS

0.7%

CVE-2024-26251 Apr 09, 17:15 LOW Monitor

Microsoft SharePoint Server Spoofing Vulnerability. Rated low severity (CVSS 3.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

XSS Microsoft Sharepoint Server

NVD

CVSS 3.1

3.1

EPSS

1.4%

CVE-2024-26250 Apr 09, 17:15 MEDIUM This Month

Secure Boot Security Feature Bypass Vulnerability. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +10

NVD

CVSS 3.1

6.7

EPSS

0.6%

CVE-2024-26248 Apr 09, 17:15 HIGH This Week

Windows Kerberos Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable. No vendor patch available.

Information Disclosure Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +11

NVD

CVSS 3.1

7.5

EPSS

1.0%

CVE-2024-26245 Apr 09, 17:15 HIGH This Week

Windows SMB Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Microsoft Windows 10 1507

NVD

CVSS 3.1

7.8

EPSS

0.7%

CVE-2024-26244 Apr 09, 17:15 HIGH This Week

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Integer Overflow Microsoft Windows 10 1507 Windows 10 1607 +12

NVD

CVSS 3.1

8.8

EPSS

2.0%

CVE-2024-26243 Apr 09, 17:15 HIGH This Week

Windows USB Print Driver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

Buffer Overflow Microsoft Windows 10 21h2 Windows 10 22h2 Windows 11 22h2 +4

NVD

CVSS 3.1

7.0

EPSS

0.4%

CVE-2024-26242 Apr 09, 17:15 HIGH This Week

Windows Telephony Server Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

Information Disclosure Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +11

NVD

CVSS 3.1

7.0

EPSS

0.3%

CVE-2024-26241 Apr 09, 17:15 HIGH This Week

Win32k Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Use After Free Memory Corruption Microsoft Windows 10 1507 +10

NVD

CVSS 3.1

7.8

EPSS

0.7%

CVE-2024-26240 Apr 09, 17:15 HIGH This Week

Secure Boot Security Feature Bypass Vulnerability. Rated high severity (CVSS 8.0), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +11

NVD

CVSS 3.1

8.0

EPSS

1.1%

CVE-2024-26239 Apr 09, 17:15 HIGH This Week

Windows Telephony Server Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Heap Overflow Microsoft Windows 10 1507 Windows 10 1607 +11

NVD

CVSS 3.1

7.8

EPSS

0.6%

CVE-2024-26237 Apr 09, 17:15 HIGH This Week

Windows Defender Credential Guard Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Use After Free Memory Corruption Microsoft Windows 10 1809 +8

NVD

CVSS 3.1

7.8

EPSS

0.7%

CVE-2024-26236 Apr 09, 17:15 HIGH This Week

Windows Update Stack Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

Information Disclosure Microsoft Windows Server 2022 23h2

NVD

CVSS 3.1

7.0

EPSS

0.4%

CVE-2024-26235 Apr 09, 17:15 HIGH This Week

Windows Update Stack Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Windows Server 2022 23h2

NVD

CVSS 3.1

7.8

EPSS

0.6%

CVE-2024-26234 Apr 09, 17:15 MEDIUM This Month

Proxy Driver Spoofing Vulnerability. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +11

NVD

CVSS 3.1

6.7

EPSS

4.9%

CVE-2024-26233 Apr 09, 17:15 MEDIUM This Month

Windows DNS Server Remote Code Execution Vulnerability. Rated medium severity (CVSS 6.6), this vulnerability is remotely exploitable. No vendor patch available.

RCE Use After Free Memory Corruption Microsoft Windows Server 2016 +3

NVD

CVSS 3.1

6.6

EPSS

1.6%

CVE-2024-26232 Apr 09, 17:15 HIGH This Week

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability. Rated high severity (CVSS 7.3), this vulnerability is low attack complexity. No vendor patch available.

RCE Memory Corruption Microsoft Windows 10 1507 Windows 10 1607 +12

NVD

CVSS 3.1

7.3

EPSS

0.9%

CVE-2024-26231 Apr 09, 17:15 MEDIUM This Month

Windows DNS Server Remote Code Execution Vulnerability. Rated medium severity (CVSS 6.6), this vulnerability is remotely exploitable. No vendor patch available.

RCE Use After Free Memory Corruption Microsoft Windows Server 2016 +3

NVD

CVSS 3.1

6.6

EPSS

1.5%

CVE-2024-26230 Apr 09, 17:15 HIGH This Week

Windows Telephony Server Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Use After Free Memory Corruption Microsoft Windows 10 1507 +13

NVD

CVSS 3.1

7.8

EPSS

24.3%

CVE-2024-26229 Apr 09, 17:15 HIGH This Week

Windows CSC Service Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Heap Overflow Microsoft Windows 10 1507 Windows 10 1607 +12

NVD

CVSS 3.1

7.8

EPSS

9.4%

CVE-2024-26228 Apr 09, 17:15 HIGH This Week

Windows Cryptographic Services Security Feature Bypass Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +11

NVD

CVSS 3.1

7.8

EPSS

0.4%

CVE-2024-26227 Apr 09, 17:15 MEDIUM This Month

Windows DNS Server Remote Code Execution Vulnerability. Rated medium severity (CVSS 6.6), this vulnerability is remotely exploitable. No vendor patch available.

RCE Use After Free Memory Corruption Microsoft Windows Server 2016 +3

NVD

CVSS 3.1

6.6

EPSS

1.5%

CVE-2024-26226 Apr 09, 17:15 MEDIUM This Month

Windows Distributed File System (DFS) Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 +4

NVD

CVSS 3.1

6.5

EPSS

1.8%

CVE-2024-26224 Apr 09, 17:15 MEDIUM This Month

Windows DNS Server Remote Code Execution Vulnerability. Rated medium severity (CVSS 6.6), this vulnerability is remotely exploitable. No vendor patch available.

RCE Use After Free Memory Corruption Microsoft Windows Server 2016 +3

NVD

CVSS 3.1

6.6

EPSS

1.6%

CVE-2024-26223 Apr 09, 17:15 MEDIUM This Month

Windows DNS Server Remote Code Execution Vulnerability. Rated medium severity (CVSS 6.6), this vulnerability is remotely exploitable. No vendor patch available.

RCE Use After Free Memory Corruption Microsoft Windows Server 2016 +3

NVD

CVSS 3.1

6.6

EPSS

1.6%

CVE-2024-26222 Apr 09, 17:15 MEDIUM This Month

Windows DNS Server Remote Code Execution Vulnerability. Rated medium severity (CVSS 6.6), this vulnerability is remotely exploitable. No vendor patch available.

RCE Use After Free Memory Corruption Microsoft Windows Server 2016 +3

NVD

CVSS 3.1

6.6

EPSS

1.8%

CVE-2024-26221 Apr 09, 17:15 MEDIUM This Month

Windows DNS Server Remote Code Execution Vulnerability. Rated medium severity (CVSS 6.6), this vulnerability is remotely exploitable. No vendor patch available.

RCE Use After Free Memory Corruption Microsoft Windows Server 2016 +3

NVD

CVSS 3.1

6.6

EPSS

1.8%

CVE-2024-26220 Apr 09, 17:15 MEDIUM This Month

Windows Mobile Hotspot Information Disclosure Vulnerability. Rated medium severity (CVSS 5.0), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +9

NVD

CVSS 3.1

5.0

EPSS

1.1%

CVE-2024-26219 Apr 09, 17:15 HIGH This Week

HTTP.sys Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Null Pointer Dereference Microsoft Windows 10 1809 Windows 10 21h2 +7

NVD

CVSS 3.1

7.5

EPSS

3.1%

CVE-2024-26218 Apr 09, 17:15 HIGH This Week

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows 10 1809 Windows 10 21h2 Windows 10 22h2 +6

NVD

CVSS 3.1

7.8

EPSS

12.9%

CVE-2024-26217 Apr 09, 17:15 LOW Monitor

Windows Remote Access Connection Manager Information Disclosure Vulnerability. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Microsoft Windows 10 1507 Windows 10 1607 +8

NVD

CVSS 3.1

3.3

EPSS

0.7%

CVE-2024-26216 Apr 09, 17:15 HIGH This Week

Windows File Server Resource Management Service Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.3), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +3

NVD

CVSS 3.1

7.3

EPSS

0.9%

CVE-2024-26215 Apr 09, 17:15 HIGH This Week

DHCP Server Service Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +3

NVD

CVSS 3.1

7.5

EPSS

2.7%

CVE-2024-26214 Apr 09, 17:15 HIGH This Week

Microsoft WDAC SQL Server ODBC Driver Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow Microsoft Windows 10 1507 +13

NVD

CVSS 3.1

8.8

EPSS

2.0%

CVE-2024-26213 Apr 09, 17:15 HIGH This Week

Microsoft Brokering File System Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

Information Disclosure Microsoft Windows Server 2022 23h2

NVD

CVSS 3.1

7.0

EPSS

0.6%

CVE-2024-26212 Apr 09, 17:15 HIGH This Week

Denial Of Service Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +3

NVD

CVSS 3.1

7.5

EPSS

62.6%

CVE-2024-26211 Apr 09, 17:15 HIGH This Week

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Heap Overflow Microsoft Windows 10 1507 Windows 10 1607 +11

NVD

CVSS 3.1

7.8

EPSS

4.1%

CVE-2024-26210 Apr 09, 17:15 HIGH This Week

RCE Buffer Overflow Heap Overflow Microsoft Windows 10 1507 +13

NVD

CVSS 3.1

8.8

EPSS

2.0%

CVE-2024-26209 Apr 09, 17:15 MEDIUM This Month

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +10

NVD

CVSS 3.1

5.5

EPSS

14.8%

CVE-2024-26208 Apr 09, 17:15 HIGH This Week

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Integer Overflow Microsoft Windows 10 1507 Windows 10 1607 +12

NVD

CVSS 3.1

7.2

EPSS

2.3%

CVE-2024-26207 Apr 09, 17:15 MEDIUM This Month

Windows Remote Access Connection Manager Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Microsoft Windows 10 1507 Windows 10 1607 +11

NVD

CVSS 3.1

5.5

EPSS

0.8%

CVE-2024-26205 Apr 09, 17:15 HIGH This Week

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow Microsoft Windows 10 1507 +13

NVD

CVSS 3.1

8.8

EPSS

1.8%

CVE-2024-26202 Apr 09, 17:15 HIGH This Week

DHCP Server Service Remote Code Execution Vulnerability. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow Microsoft Windows Server 2012 +4

NVD

CVSS 3.1

7.2

EPSS

2.2%

CVE-2024-26200 Apr 09, 17:15 HIGH This Week

RCE Buffer Overflow Heap Overflow Microsoft Windows 10 1507 +13

NVD

CVSS 3.1

8.8

EPSS

1.8%

CVE-2024-26195 Apr 09, 17:15 HIGH This Week

DHCP Server Service Remote Code Execution Vulnerability. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow Microsoft Windows Server 2008 +5

NVD

CVSS 3.1

7.2

EPSS

2.2%

CVE-2024-26194 Apr 09, 17:15 HIGH This Week

Secure Boot Security Feature Bypass Vulnerability. Rated high severity (CVSS 7.4), this vulnerability is no authentication required. No vendor patch available.

Authentication Bypass Microsoft Jwt Attack Windows 10 1507 Windows 10 1607 +9

NVD

CVSS 3.1

7.4

EPSS

0.4%

CVE-2024-26193 Apr 09, 17:15 MEDIUM This Month

Azure Migrate Remote Code Execution Vulnerability. Rated medium severity (CVSS 6.4). No vendor patch available.

Authentication Bypass RCE Microsoft Azure Migrate

NVD

CVSS 3.1

6.4

EPSS

0.9%

CVE-2024-26189 Apr 09, 17:15 HIGH This Week

Secure Boot Security Feature Bypass Vulnerability. Rated high severity (CVSS 8.0), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +10

NVD

CVSS 3.1

8.0

EPSS

1.4%

CVE-2024-26183 Apr 09, 17:15 MEDIUM This Month

Windows Kerberos Denial of Service Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Null Pointer Dereference Microsoft Windows 10 1507 Windows 10 1607 +11

NVD

CVSS 3.1

6.5

EPSS

2.2%

CVE-2024-26180 Apr 09, 17:15 HIGH This Week

Secure Boot Security Feature Bypass Vulnerability. Rated high severity (CVSS 8.0), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Microsoft Stack Overflow Windows 10 1507 Windows 10 1607 +11

NVD

CVSS 3.1

8.0

EPSS

1.5%

CVE-2024-26179 Apr 09, 17:15 HIGH This Week

RCE Buffer Overflow Heap Overflow Microsoft Windows 10 1507 +13

NVD

CVSS 3.1

8.8

EPSS

1.8%

CVE-2024-26175 Apr 09, 17:15 HIGH This Week

Secure Boot Security Feature Bypass Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Microsoft Windows 10 1507 Windows 10 1607 +8

NVD

CVSS 3.1

7.8

EPSS

0.6%

CVE-2024-26172 Apr 09, 17:15 MEDIUM This Month

Windows DWM Core Library Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Microsoft Windows 10 1809 Windows 10 21h2 +7

NVD

CVSS 3.1

5.5

EPSS

0.7%

CVE-2024-26171 Apr 09, 17:15 MEDIUM This Month

Secure Boot Security Feature Bypass Vulnerability. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Integer Overflow Microsoft Windows 10 1507 Windows 10 1607 +11

NVD

CVSS 3.1

6.7

EPSS

0.6%

CVE-2024-26168 Apr 09, 17:15 MEDIUM This Month

Secure Boot Security Feature Bypass Vulnerability. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Heap Overflow Microsoft Windows 10 1507 Windows 10 1607 +11

NVD

CVSS 3.1

6.8

EPSS

0.9%

CVE-2024-26158 Apr 09, 17:15 HIGH This Week

Microsoft Install Service Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +11

NVD

CVSS 3.1

7.8

EPSS

12.3%

CVE-2024-21447 Apr 09, 17:15 HIGH This Week

Windows Authentication Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows 10 21h2 Windows 10 22h2 Windows 11 22h2 +4

NVD

CVSS 3.1

7.8

EPSS

1.4%

CVE-2024-21424 Apr 09, 17:15 MEDIUM This Month

Azure Compute Gallery Elevation of Privilege Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Azure Compute Gallery

NVD

CVSS 3.1

6.5

EPSS

1.9%

CVE-2024-21324 Apr 09, 17:15 HIGH This Week

Microsoft Defender for IoT Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Defender For Iot

NVD

CVSS 3.1

7.2

EPSS

2.3%

CVE-2024-21323 Apr 09, 17:15 HIGH This Week

Microsoft Defender for IoT Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Microsoft Defender For Iot

NVD

CVSS 3.1

8.8

EPSS

3.2%

CVE-2024-21322 Apr 09, 17:15 HIGH This Week

Microsoft Defender for IoT Remote Code Execution Vulnerability. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Command Injection Microsoft Defender For Iot

NVD

CVSS 3.1

7.2

EPSS

3.1%

CVE-2024-20693 Apr 09, 17:15 HIGH This Week

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +9

NVD

CVSS 3.1

7.8

EPSS

0.8%

CVE-2024-20689 Apr 09, 17:15 HIGH This Week

Secure Boot Security Feature Bypass Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is no authentication required. No vendor patch available.

Buffer Overflow Microsoft Stack Overflow Windows Server 2012

NVD

CVSS 3.1

7.1

EPSS

1.3%

CVE-2024-20688 Apr 09, 17:15 HIGH This Week

Secure Boot Security Feature Bypass Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is no authentication required. No vendor patch available.

Buffer Overflow Microsoft Stack Overflow Windows Server 2012

NVD

CVSS 3.1

7.1

EPSS

1.3%

CVE-2024-20685 Apr 09, 17:15 MEDIUM This Month

Azure Private 5G Core Denial of Service Vulnerability. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Denial Of Service Microsoft Azure Private 5G Core

NVD

CVSS 3.1

5.9

EPSS

5.5%

CVE-2024-28919

EPSS 1% CVSS 6.7

MEDIUM This Month

Secure Boot Security Feature Bypass Vulnerability. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Windows 10 1507 +12

NVD

CVE-2024-28917

EPSS 1% CVSS 6.2

MEDIUM This Month

Azure Arc-enabled Kubernetes Extension Cluster-Scope Elevation of Privilege Vulnerability. Rated medium severity (CVSS 6.2), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Kubernetes Microsoft +7

NVD

CVE-2024-28915

EPSS 2% CVSS 8.8

HIGH This Week

RCE Buffer Overflow Heap Overflow +4

NVD

CVE-2024-28914

EPSS 2% CVSS 8.8

HIGH This Week

RCE Buffer Overflow Heap Overflow +4

NVD

CVE-2024-28913

EPSS 2% CVSS 8.8

HIGH This Week

RCE Buffer Overflow Heap Overflow +4

NVD

CVE-2024-28912

EPSS 2% CVSS 8.8

HIGH This Week

RCE Buffer Overflow Heap Overflow +4

NVD

CVE-2024-28911

EPSS 2% CVSS 8.8

HIGH This Week

RCE Buffer Overflow Heap Overflow +4

NVD

CVE-2024-28910

EPSS 3% CVSS 8.8

HIGH This Week

RCE Buffer Overflow Heap Overflow +4

NVD

CVE-2024-28909

EPSS 2% CVSS 8.8

HIGH This Week

RCE Buffer Overflow Heap Overflow +4

NVD

CVE-2024-28908

EPSS 2% CVSS 8.8

HIGH This Week

RCE Buffer Overflow Heap Overflow +4

NVD

CVE-2024-28907

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Brokering File System Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8). No vendor patch available.

Information Disclosure Microsoft Windows Server 2022 23h2

NVD

CVE-2024-28906

EPSS 2% CVSS 8.8

HIGH This Week

RCE Buffer Overflow Heap Overflow +4

NVD

CVE-2024-28905

EPSS 0% CVSS 7.8

HIGH This Week

Microsoft Brokering File System Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8). No vendor patch available.

Privilege Escalation Microsoft Windows Server 2022 23h2

NVD

CVE-2024-28904

EPSS 0% CVSS 7.8

HIGH This Week

Microsoft Brokering File System Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8). No vendor patch available.

Privilege Escalation Microsoft Windows Server 2022 23h2

NVD

CVE-2024-28903

EPSS 1% CVSS 6.7

MEDIUM This Month

Secure Boot Security Feature Bypass Vulnerability. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Windows 10 1507 +12

NVD

CVE-2024-28902

EPSS 1% CVSS 5.5

MEDIUM This Month

Windows Remote Access Connection Manager Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Microsoft +13

NVD

CVE-2024-28901

EPSS 1% CVSS 5.5

MEDIUM This Month

Windows Remote Access Connection Manager Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Microsoft +13

NVD

CVE-2024-28900

EPSS 1% CVSS 5.5

MEDIUM This Month

Windows Remote Access Connection Manager Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Microsoft +13

NVD

CVE-2024-28898

EPSS 1% CVSS 6.3

MEDIUM This Month

Secure Boot Security Feature Bypass Vulnerability. Rated medium severity (CVSS 6.3). No vendor patch available.

Buffer Overflow Microsoft Stack Overflow +13

NVD

CVE-2024-28897

EPSS 1% CVSS 6.8

MEDIUM This Month

Secure Boot Security Feature Bypass Vulnerability. Rated medium severity (CVSS 6.8), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Windows 10 1507 +12

NVD

CVE-2024-28896

EPSS 1% CVSS 7.5

HIGH This Week

Secure Boot Security Feature Bypass Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is no authentication required. No vendor patch available.

Buffer Overflow Heap Overflow Microsoft +13

NVD

CVE-2024-26257

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +1

NVD

CVE-2024-26255

EPSS 1% CVSS 5.5

MEDIUM This Month

Windows Remote Access Connection Manager Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Microsoft +9

NVD

CVE-2024-26254

EPSS 3% CVSS 7.5

HIGH This Week

Denial Of Service Microsoft Windows 10 1809 +8

NVD

CVE-2024-26253

EPSS 1% CVSS 6.8

MEDIUM This Month

Windows rndismp6.sys Remote Code Execution Vulnerability. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows 10 1507 +13

NVD

CVE-2024-26252

EPSS 1% CVSS 6.8

MEDIUM This Month

Windows rndismp6.sys Remote Code Execution Vulnerability. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows 10 1507 +13

NVD

CVE-2024-26251

EPSS 1% CVSS 3.1

LOW Monitor

Microsoft SharePoint Server Spoofing Vulnerability. Rated low severity (CVSS 3.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

XSS Microsoft Sharepoint Server

NVD

CVE-2024-26250

EPSS 1% CVSS 6.7

MEDIUM This Month

Secure Boot Security Feature Bypass Vulnerability. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Windows 10 1507 +12

NVD

CVE-2024-26248

EPSS 1% CVSS 7.5

HIGH This Week

Windows Kerberos Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable. No vendor patch available.

Information Disclosure Microsoft Windows 10 1507 +13

NVD

CVE-2024-26245

EPSS 1% CVSS 7.8

HIGH This Week

Windows SMB Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Microsoft +1

NVD

CVE-2024-26244

EPSS 2% CVSS 8.8

HIGH This Week

RCE Integer Overflow Microsoft +14

NVD

CVE-2024-26243

EPSS 0% CVSS 7.0

HIGH This Week

Windows USB Print Driver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

Buffer Overflow Microsoft Windows 10 21h2 +6

NVD

CVE-2024-26242

EPSS 0% CVSS 7.0

HIGH This Week

Windows Telephony Server Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

Information Disclosure Microsoft Windows 10 1507 +13

NVD

CVE-2024-26241

EPSS 1% CVSS 7.8

HIGH This Week

Win32k Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Use After Free Memory Corruption +12

NVD

CVE-2024-26240

EPSS 1% CVSS 8.0

HIGH This Week

Secure Boot Security Feature Bypass Vulnerability. Rated high severity (CVSS 8.0), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Windows 10 1507 +13

NVD

CVE-2024-26239

EPSS 1% CVSS 7.8

HIGH This Week

Windows Telephony Server Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Heap Overflow Microsoft +13

NVD

CVE-2024-26237

EPSS 1% CVSS 7.8

HIGH This Week

Windows Defender Credential Guard Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Use After Free Memory Corruption +10

NVD

CVE-2024-26236

EPSS 0% CVSS 7.0

HIGH This Week

Windows Update Stack Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

Information Disclosure Microsoft Windows Server 2022 23h2

NVD

CVE-2024-26235

EPSS 1% CVSS 7.8

HIGH This Week

Windows Update Stack Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Windows Server 2022 23h2

NVD

CVE-2024-26234

EPSS 5% CVSS 6.7

MEDIUM This Month

Proxy Driver Spoofing Vulnerability. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Windows 10 1507 +13

NVD

CVE-2024-26233

EPSS 2% CVSS 6.6

MEDIUM This Month

Windows DNS Server Remote Code Execution Vulnerability. Rated medium severity (CVSS 6.6), this vulnerability is remotely exploitable. No vendor patch available.

RCE Use After Free Memory Corruption +5

NVD

CVE-2024-26232

EPSS 1% CVSS 7.3

HIGH This Week

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability. Rated high severity (CVSS 7.3), this vulnerability is low attack complexity. No vendor patch available.

RCE Memory Corruption Microsoft +14

NVD

CVE-2024-26231

EPSS 2% CVSS 6.6

MEDIUM This Month

Windows DNS Server Remote Code Execution Vulnerability. Rated medium severity (CVSS 6.6), this vulnerability is remotely exploitable. No vendor patch available.

RCE Use After Free Memory Corruption +5

NVD

CVE-2024-26230

EPSS 24% CVSS 7.8

HIGH This Week

Windows Telephony Server Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Use After Free Memory Corruption +15

NVD

CVE-2024-26229

EPSS 9% CVSS 7.8

HIGH This Week

Windows CSC Service Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Heap Overflow Microsoft +14

NVD

CVE-2024-26228

EPSS 0% CVSS 7.8

HIGH This Week

Windows Cryptographic Services Security Feature Bypass Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Windows 10 1507 +13

NVD

CVE-2024-26227

EPSS 2% CVSS 6.6

MEDIUM This Month

Windows DNS Server Remote Code Execution Vulnerability. Rated medium severity (CVSS 6.6), this vulnerability is remotely exploitable. No vendor patch available.

RCE Use After Free Memory Corruption +5

NVD

CVE-2024-26226

EPSS 2% CVSS 6.5

MEDIUM This Month

Buffer Overflow Information Disclosure Microsoft +6

NVD

CVE-2024-26224

EPSS 2% CVSS 6.6

MEDIUM This Month

Windows DNS Server Remote Code Execution Vulnerability. Rated medium severity (CVSS 6.6), this vulnerability is remotely exploitable. No vendor patch available.

RCE Use After Free Memory Corruption +5

NVD

CVE-2024-26223

EPSS 2% CVSS 6.6

MEDIUM This Month

Windows DNS Server Remote Code Execution Vulnerability. Rated medium severity (CVSS 6.6), this vulnerability is remotely exploitable. No vendor patch available.

RCE Use After Free Memory Corruption +5

NVD

CVE-2024-26222

EPSS 2% CVSS 6.6

MEDIUM This Month

Windows DNS Server Remote Code Execution Vulnerability. Rated medium severity (CVSS 6.6), this vulnerability is remotely exploitable. No vendor patch available.

RCE Use After Free Memory Corruption +5

NVD

CVE-2024-26221

EPSS 2% CVSS 6.6

MEDIUM This Month

Windows DNS Server Remote Code Execution Vulnerability. Rated medium severity (CVSS 6.6), this vulnerability is remotely exploitable. No vendor patch available.

RCE Use After Free Memory Corruption +5

NVD

CVE-2024-26220

EPSS 1% CVSS 5.0

MEDIUM This Month

Windows Mobile Hotspot Information Disclosure Vulnerability. Rated medium severity (CVSS 5.0), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows 10 1507 +11

NVD

CVE-2024-26219

EPSS 3% CVSS 7.5

HIGH This Week

HTTP.sys Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Null Pointer Dereference Microsoft +9

NVD

CVE-2024-26218

EPSS 13% CVSS 7.8

HIGH This Week

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows 10 1809 +8

NVD

CVE-2024-26217

EPSS 1% CVSS 3.3

LOW Monitor

Windows Remote Access Connection Manager Information Disclosure Vulnerability. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Microsoft +10

NVD

CVE-2024-26216

EPSS 1% CVSS 7.3

HIGH This Week

Windows File Server Resource Management Service Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.3), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 +5

NVD

CVE-2024-26215

EPSS 3% CVSS 7.5

HIGH This Week

Denial Of Service Microsoft Windows Server 2008 +5

NVD

CVE-2024-26214

EPSS 2% CVSS 8.8

HIGH This Week

RCE Buffer Overflow Heap Overflow +15

NVD

CVE-2024-26213

EPSS 1% CVSS 7.0

HIGH This Week

Microsoft Brokering File System Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

Information Disclosure Microsoft Windows Server 2022 23h2

NVD

CVE-2024-26212

EPSS 63% CVSS 7.5

HIGH This Week

Denial Of Service Microsoft Windows Server 2008 +5

NVD

CVE-2024-26211

EPSS 4% CVSS 7.8

HIGH This Week

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Heap Overflow Microsoft +13

NVD

CVE-2024-26210

EPSS 2% CVSS 8.8

HIGH This Week

RCE Buffer Overflow Heap Overflow +15

NVD

CVE-2024-26209

EPSS 15% CVSS 5.5

MEDIUM This Month

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows 10 1507 +12

NVD

CVE-2024-26208

EPSS 2% CVSS 7.2

HIGH This Week

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Integer Overflow Microsoft +14

NVD

CVE-2024-26207

EPSS 1% CVSS 5.5

MEDIUM This Month

Windows Remote Access Connection Manager Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Microsoft +13

NVD

CVE-2024-26205

EPSS 2% CVSS 8.8

HIGH This Week

RCE Buffer Overflow Heap Overflow +15

NVD

CVE-2024-26202

EPSS 2% CVSS 7.2

HIGH This Week

DHCP Server Service Remote Code Execution Vulnerability. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow +6

NVD

CVE-2024-26200

EPSS 2% CVSS 8.8

HIGH This Week

RCE Buffer Overflow Heap Overflow +15

NVD

CVE-2024-26195

EPSS 2% CVSS 7.2

HIGH This Week

DHCP Server Service Remote Code Execution Vulnerability. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow +7

NVD

CVE-2024-26194

EPSS 0% CVSS 7.4

HIGH This Week

Secure Boot Security Feature Bypass Vulnerability. Rated high severity (CVSS 7.4), this vulnerability is no authentication required. No vendor patch available.

Authentication Bypass Microsoft Jwt Attack +11

NVD

CVE-2024-26193

EPSS 1% CVSS 6.4

MEDIUM This Month

Azure Migrate Remote Code Execution Vulnerability. Rated medium severity (CVSS 6.4). No vendor patch available.

Authentication Bypass RCE Microsoft +1

NVD

CVE-2024-26189

EPSS 1% CVSS 8.0

HIGH This Week

Secure Boot Security Feature Bypass Vulnerability. Rated high severity (CVSS 8.0), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Windows 10 1507 +12

NVD

CVE-2024-26183

EPSS 2% CVSS 6.5

MEDIUM This Month

Windows Kerberos Denial of Service Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Null Pointer Dereference Microsoft +13

NVD

CVE-2024-26180

EPSS 1% CVSS 8.0

HIGH This Week

Secure Boot Security Feature Bypass Vulnerability. Rated high severity (CVSS 8.0), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Microsoft Stack Overflow +13

NVD

CVE-2024-26179

EPSS 2% CVSS 8.8

HIGH This Week

RCE Buffer Overflow Heap Overflow +15

NVD

CVE-2024-26175

EPSS 1% CVSS 7.8

HIGH This Week

Secure Boot Security Feature Bypass Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Microsoft +10

NVD

CVE-2024-26172

EPSS 1% CVSS 5.5

MEDIUM This Month

Windows DWM Core Library Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Microsoft +9

NVD

CVE-2024-26171

EPSS 1% CVSS 6.7

MEDIUM This Month

Secure Boot Security Feature Bypass Vulnerability. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Integer Overflow Microsoft +13

NVD

CVE-2024-26168

EPSS 1% CVSS 6.8

MEDIUM This Month

Secure Boot Security Feature Bypass Vulnerability. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Heap Overflow Microsoft +13

NVD

CVE-2024-26158

EPSS 12% CVSS 7.8

HIGH This Week

Microsoft Install Service Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows 10 1507 +13

NVD

CVE-2024-21447

EPSS 1% CVSS 7.8

HIGH This Week

Windows Authentication Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows 10 21h2 +6

NVD

CVE-2024-21424

EPSS 2% CVSS 6.5

MEDIUM This Month

Azure Compute Gallery Elevation of Privilege Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Azure Compute Gallery

NVD

CVE-2024-21324

EPSS 2% CVSS 7.2

HIGH This Week

Microsoft Defender for IoT Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Defender For Iot

NVD

CVE-2024-21323

EPSS 3% CVSS 8.8

HIGH This Week

Microsoft Defender for IoT Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Microsoft Defender For Iot

NVD

CVE-2024-21322

EPSS 3% CVSS 7.2

HIGH This Week

Microsoft Defender for IoT Remote Code Execution Vulnerability. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Command Injection Microsoft +1

NVD

CVE-2024-20693

EPSS 1% CVSS 7.8

HIGH This Week

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows 10 1507 +11

NVD

CVE-2024-20689

EPSS 1% CVSS 7.1

HIGH This Week

Secure Boot Security Feature Bypass Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is no authentication required. No vendor patch available.

Buffer Overflow Microsoft Stack Overflow +1

NVD

CVE-2024-20688

EPSS 1% CVSS 7.1

HIGH This Week

Secure Boot Security Feature Bypass Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is no authentication required. No vendor patch available.

Buffer Overflow Microsoft Stack Overflow +1

NVD

CVE-2024-20685

EPSS 6% CVSS 5.9

MEDIUM This Month

Azure Private 5G Core Denial of Service Vulnerability. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Denial Of Service Microsoft Azure Private 5G Core

NVD

Prev Page 85 of 230 Next