Vulnerabilities (CVE)

Filtered by CWE-20
Total 13735 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-38265 1 Microsoft 6 Windows Server 2008, Windows Server 2012, Windows Server 2016 and 3 more 2026-06-17 N/A 8.8 HIGH
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-38261 1 Microsoft 6 Windows Server 2008, Windows Server 2012, Windows Server 2016 and 3 more 2026-06-17 N/A 7.8 HIGH
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-38201 1 Microsoft 1 Azure Stack Hub 2026-06-17 N/A 7.0 HIGH
Azure Stack Hub Elevation of Privilege Vulnerability
CVE-2024-38196 1 Microsoft 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more 2026-06-17 N/A 7.8 HIGH
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2024-38189 1 Microsoft 4 365 Apps, Office 2019, Office Long Term Servicing Channel and 1 more 2026-06-17 N/A 8.8 HIGH
Microsoft Project Remote Code Execution Vulnerability
CVE-2024-38105 1 Microsoft 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more 2026-06-17 N/A 6.5 MEDIUM
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
CVE-2024-38095 1 Microsoft 2 .net, Visual Studio 2022 2026-06-17 N/A 7.5 HIGH
.NET and Visual Studio Denial of Service Vulnerability
CVE-2024-38055 1 Microsoft 14 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 11 more 2026-06-17 N/A 5.5 MEDIUM
Microsoft Windows Codecs Library Information Disclosure Vulnerability
CVE-2024-38052 1 Microsoft 14 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 11 more 2026-06-17 N/A 7.8 HIGH
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
CVE-2024-38047 1 Microsoft 11 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 8 more 2026-06-17 N/A 7.8 HIGH
PowerShell Elevation of Privilege Vulnerability
CVE-2024-38043 1 Microsoft 11 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 8 more 2026-06-17 N/A 7.8 HIGH
PowerShell Elevation of Privilege Vulnerability
CVE-2024-38033 1 Microsoft 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more 2026-06-17 N/A 7.3 HIGH
PowerShell Elevation of Privilege Vulnerability
CVE-2024-38021 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2026-06-17 N/A 8.8 HIGH
Microsoft Outlook Remote Code Execution Vulnerability
CVE-2024-37917 1 Pexip 1 Pexip Infinity 2026-06-17 N/A 7.5 HIGH
Pexip Infinity before 35.0 has improper input validation that allows remote attackers to trigger a denial of service (software abort) via a crafted signalling message.
CVE-2024-37794 2026-06-17 N/A 7.5 HIGH
Improper input validation in CVC5 Solver v1.1.3 allows attackers to cause a Denial of Service (DoS) via a crafted SMT2 input file.
CVE-2024-37777 1 Zoneland 1 O2oa 2026-06-17 N/A 8.8 HIGH
O2OA v9.0.3 was discovered to contain a remote code execution (RCE) vulnerability via the mainOutput() function.
CVE-2024-37406 2026-06-17 N/A 7.5 HIGH
In Brave Android prior to v1.67.116, domains in the Brave Shields popup are elided from the right instead of the left, which may lead to domain confusion.
CVE-2024-37373 1 Ivanti 1 Avalanche 2026-06-17 N/A 7.2 HIGH
Improper input validation in the Central Filestore in Ivanti Avalanche 6.3.1 allows a remote authenticated attacker with admin rights to achieve RCE.
CVE-2024-37365 1 Rockwellautomation 1 Factorytalk View 2026-06-17 N/A 7.3 HIGH
A remote code execution vulnerability exists in the affected product. The vulnerability allows users to save projects within the public directory allowing anyone with local access to modify and/or delete files. Additionally, a malicious user could potentially leverage this vulnerability to escalate their privileges by changing the macro to execute arbitrary code.
CVE-2024-37346 1 Absolute 1 Secure Access 2026-06-17 N/A 4.9 MEDIUM
There is an insufficient input validation vulnerability in the Warehouse component of Absolute Secure Access prior to 13.06. Attackers with system administrator permissions can impair the availability of certain elements of the Secure Access administrative UI by writing invalid data to the warehouse over the network. There is no loss of warehouse integrity or confidentiality, the security scope is unchanged. Loss of availability is high.