Vulnerabilities (CVE)

Filtered by CWE-416
Total 8686 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-43582 1 Microsoft 10 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 7 more 2026-06-17 N/A 8.1 HIGH
Remote Desktop Protocol Server Remote Code Execution Vulnerability
CVE-2024-43574 1 Microsoft 8 Windows 10 21h2, Windows 10 22h2, Windows 11 21h2 and 5 more 2026-06-17 N/A 8.3 HIGH
Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability
CVE-2024-43570 1 Microsoft 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more 2026-06-17 N/A 6.4 MEDIUM
Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-43556 1 Microsoft 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more 2026-06-17 N/A 7.8 HIGH
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2024-43552 1 Microsoft 4 Windows 11 22h2, Windows 11 23h2, Windows 11 24h2 and 1 more 2026-06-17 N/A 7.3 HIGH
Windows Shell Remote Code Execution Vulnerability
CVE-2024-43535 1 Microsoft 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more 2026-06-17 N/A 7.0 HIGH
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
CVE-2024-43533 1 Microsoft 6 Windows 11 21h2, Windows 11 22h2, Windows 11 23h2 and 3 more 2026-06-17 N/A 8.8 HIGH
Remote Desktop Client Remote Code Execution Vulnerability
CVE-2024-43509 1 Microsoft 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more 2026-06-17 N/A 7.8 HIGH
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2024-43504 1 Microsoft 4 365 Apps, Excel, Office and 1 more 2026-06-17 N/A 7.8 HIGH
Microsoft Excel Remote Code Execution Vulnerability
CVE-2024-43491 1 Microsoft 1 Windows 10 1507 2026-06-17 N/A 9.8 CRITICAL
Microsoft is aware of a vulnerability in Servicing Stack that has rolled back the fixes for some vulnerabilities affecting Optional Components on Windows 10, version 1507 (initial version released July 2015). This means that an attacker could exploit these previously mitigated vulnerabilities on Windows 10, version 1507 (Windows 10 Enterprise 2015 LTSB and Windows 10 IoT Enterprise 2015 LTSB) systems that have installed the Windows security update released on March 12, 2024—KB5035858 (OS Build 10240.20526) or other updates released until August 2024. All later versions of Windows 10 are not impacted by this vulnerability. This servicing stack vulnerability is addressed by installing the September 2024 Servicing stack update (SSU KB5043936) AND the September 2024 Windows security update (KB5043083), in that order. Note: Windows 10, version 1507 reached the end of support (EOS) on May 9, 2017 for devices running the Pro, Home, Enterprise, Education, and Enterprise IoT editions. Only Windows 10 Enterprise 2015 LTSB and Windows 10 IoT Enterprise 2015 LTSB editions are still under support.
CVE-2024-43472 1 Microsoft 1 Edge Chromium 2026-06-17 N/A 5.8 MEDIUM
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2024-43459 1 Microsoft 3 Sql Server 2016, Sql Server 2017, Sql Server 2019 2026-06-17 N/A 8.8 HIGH
SQL Server Native Client Remote Code Execution Vulnerability
CVE-2024-43374 3 Neovim, Netapp, Vim 4 Neovim, Bootstrap Os, Hci Compute Node and 1 more 2026-06-17 N/A 4.5 MEDIUM
The UNIX editor Vim prior to version 9.1.0678 has a use-after-free error in argument list handling. When adding a new file to the argument list, this triggers `Buf*` autocommands. If in such an autocommand the buffer that was just opened is closed (including the window where it is shown), this causes the window structure to be freed which contains a reference to the argument list that we are actually modifying. Once the autocommands are completed, the references to the window and argument list are no longer valid and as such cause an use-after-free. Impact is low since the user must either intentionally add some unusual autocommands that wipe a buffer during creation (either manually or by sourcing a malicious plugin), but it will crash Vim. The issue has been fixed as of Vim patch v9.1.0678.
CVE-2024-43102 1 Freebsd 1 Freebsd 2026-06-17 N/A 10.0 CRITICAL
Concurrent removals of certain anonymous shared memory mappings by using the UMTX_SHM_DESTROY sub-request of UMTX_OP_SHM can lead to decreasing the reference count of the object representing the mapping too many times, causing it to be freed too early. A malicious code exercizing the UMTX_SHM_DESTROY sub-request in parallel can panic the kernel or enable further Use-After-Free attacks, potentially including code execution or Capsicum sandbox escape.
CVE-2024-43066 1 Qualcomm 196 Csrb31024, Csrb31024 Firmware, Fastconnect 6200 and 193 more 2026-06-17 N/A 7.8 HIGH
Memory corruption while handling file descriptor during listener registration/de-registration.
CVE-2024-43062 1 Qualcomm 28 Fastconnect 6900, Fastconnect 6900 Firmware, Fastconnect 7800 and 25 more 2026-06-17 N/A 7.8 HIGH
Memory corruption caused by missing locks and checks on the DMA fence and improper synchronization.
CVE-2024-43061 1 Qualcomm 60 Fastconnect 6900, Fastconnect 6900 Firmware, Fastconnect 7800 and 57 more 2026-06-17 N/A 7.8 HIGH
Memory corruption during voice activation, when sound model parameters are loaded from HLOS, and the received sound model list is empty in HLOS drive.
CVE-2024-43059 1 Qualcomm 40 Fastconnect 6900, Fastconnect 6900 Firmware, Fastconnect 7800 and 37 more 2026-06-17 N/A 7.8 HIGH
Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.
CVE-2024-43057 1 Qualcomm 306 Ar8035, Ar8035 Firmware, C-v2x 9150 and 303 more 2026-06-17 N/A 7.8 HIGH
Memory corruption while processing command in Glink linux.
CVE-2024-43047 1 Qualcomm 128 Fastconnect 6700, Fastconnect 6700 Firmware, Fastconnect 6800 and 125 more 2026-06-17 N/A 7.8 HIGH
Memory corruption while maintaining memory maps of HLOS memory.