Vulnerabilities (CVE)

Filtered by vendor Microsoft Subscribe
Total 21331 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-43373 2 J4k0xb, Microsoft 2 Webcrack, Windows 2024-08-16 N/A 7.8 HIGH
webcrack is a tool for reverse engineering javascript. An arbitrary file write vulnerability exists in the webcrack module when processing specifically crafted malicious code on Windows systems. This vulnerability is triggered when using the unpack bundles feature in conjunction with the saving feature. If a module name includes a path traversal sequence with Windows path separators, an attacker can exploit this to overwrite files on the host system. This vulnerability allows an attacker to write arbitrary `.js` files to the host system, which can be leveraged to hijack legitimate Node.js modules to gain arbitrary code execution. This vulnerability has been patched in version 2.14.1.
CVE-2024-38161 1 Microsoft 8 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 5 more 2024-08-16 N/A 6.8 MEDIUM
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
CVE-2024-38160 1 Microsoft 2 Windows 10 1607, Windows Server 2016 2024-08-16 N/A 9.1 CRITICAL
Windows Network Virtualization Remote Code Execution Vulnerability
CVE-2024-38159 1 Microsoft 2 Windows 10 1607, Windows Server 2016 2024-08-16 N/A 9.1 CRITICAL
Windows Network Virtualization Remote Code Execution Vulnerability
CVE-2024-38154 1 Microsoft 6 Windows Server 2008, Windows Server 2012, Windows Server 2016 and 3 more 2024-08-16 N/A 8.8 HIGH
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-38148 1 Microsoft 6 Windows 11 21h2, Windows 11 22h2, Windows 11 23h2 and 3 more 2024-08-16 N/A 7.5 HIGH
Windows Secure Channel Denial of Service Vulnerability
CVE-2024-38147 1 Microsoft 8 Windows 10 21h2, Windows 10 22h2, Windows 11 21h2 and 5 more 2024-08-16 N/A 7.8 HIGH
Microsoft DWM Core Library Elevation of Privilege Vulnerability
CVE-2024-38146 1 Microsoft 14 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 11 more 2024-08-16 N/A 7.5 HIGH
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
CVE-2024-38145 1 Microsoft 14 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 11 more 2024-08-16 N/A 7.5 HIGH
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
CVE-2024-38144 1 Microsoft 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more 2024-08-16 N/A 8.8 HIGH
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
CVE-2024-38143 1 Microsoft 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more 2024-08-16 N/A 4.2 MEDIUM
Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability
CVE-2024-38142 1 Microsoft 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more 2024-08-16 N/A 7.8 HIGH
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
CVE-2024-38141 1 Microsoft 14 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 11 more 2024-08-16 N/A 7.8 HIGH
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2024-38138 1 Microsoft 4 Windows Server 2016, Windows Server 2019, Windows Server 2022 and 1 more 2024-08-16 N/A 7.5 HIGH
Windows Deployment Services Remote Code Execution Vulnerability
CVE-2024-38114 1 Microsoft 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more 2024-08-16 N/A 8.8 HIGH
Windows IP Routing Management Snapin Remote Code Execution Vulnerability
CVE-2024-38084 1 Microsoft 1 Officeplus 2024-08-16 N/A 7.8 HIGH
Microsoft OfficePlus Elevation of Privilege Vulnerability
CVE-2024-37968 1 Microsoft 6 Windows Server 2008, Windows Server 2012, Windows Server 2016 and 3 more 2024-08-16 N/A 7.5 HIGH
Windows DNS Spoofing Vulnerability
CVE-2024-38063 1 Microsoft 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more 2024-08-16 N/A 9.8 CRITICAL
Windows TCP/IP Remote Code Execution Vulnerability
CVE-2024-29995 1 Microsoft 12 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 9 more 2024-08-16 N/A 8.1 HIGH
Windows Kerberos Elevation of Privilege Vulnerability
CVE-2024-38162 1 Microsoft 1 Azure Connected Machine Agent 2024-08-16 N/A 7.8 HIGH
Azure Connected Machine Agent Elevation of Privilege Vulnerability